Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5059A4DEE811EF98B3586F762E951A.roa
File: 6C5059A4DEE811EF98B3586F762E951A.roa (raw, json)
Hash identifier: /gCshl8Q+Xr/O55LalRlwbaZUmh5aCPPaq3AeqjL3z8=
Subject key identifier: A9:B3:0B:1A:C1:5F:5B:47:71:D1:77:43:74:92:8D:86:5A:01:70:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5059A4DEE811EF98B3586F762E951A.roa
Signing time: Thu 30 Jan 2025 08:58:50 +0000
ROA not before: Thu 30 Jan 2025 08:58:46 +0000
ROA not after: Fri 07 Feb 2025 08:58:46 +0000
asID: 63199
IP address blocks: 154.207.94.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85416 (0x14da8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 08:58:46 2025 GMT
Not After : Feb 7 08:58:46 2025 GMT
Subject: CN=679b3f4a-e696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:50:79:e0:10:54:db:54:ba:e4:1b:a7:b7:34:
d9:73:bb:5c:5a:93:dc:9a:9c:67:d1:98:91:3f:ed:
24:08:5b:7d:aa:3c:55:c0:a6:68:40:27:4a:e8:cf:
51:a4:47:8b:f0:39:cf:09:3f:f0:e1:1c:90:0b:8b:
33:5f:2d:41:76:be:5f:67:33:7c:9b:bb:f2:44:2d:
69:85:b0:ef:2a:54:e6:4d:d4:c2:d5:1f:71:33:d5:
ce:e2:12:d8:dd:98:67:d9:a2:46:fc:17:3d:91:0f:
26:47:a9:b4:3f:88:e3:a2:ad:ae:3d:fc:65:cf:38:
50:72:42:84:58:35:34:a8:0a:53:e5:ac:01:b8:72:
e6:5d:de:bd:f9:d2:2f:93:8a:63:62:b5:69:63:64:
20:7e:94:a3:65:a2:e9:8e:ac:e6:cb:4f:ef:ca:07:
d5:b1:29:50:7b:63:c5:68:c7:d6:35:7e:e7:f4:65:
bc:9b:5d:15:58:fd:c6:e3:c4:68:70:e8:ee:95:0c:
bf:c6:4c:bb:b8:9d:96:fa:d3:06:5e:25:1a:d2:5d:
ba:49:e7:35:92:5c:93:65:eb:f4:42:af:54:18:af:
38:1b:af:39:e7:cb:23:40:dc:2e:48:bb:cf:19:2a:
20:a2:15:93:94:38:99:b7:56:b7:a2:c0:dc:f6:4a:
ca:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:0B:1A:C1:5F:5B:47:71:D1:77:43:74:92:8D:86:5A:01:70:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5059A4DEE811EF98B3586F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.94.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:61:06:2b:d4:39:b2:5c:a4:04:28:ad:ad:ee:81:e3:c7:4d:
7f:02:11:b0:5f:d5:da:f5:2b:af:c0:e8:63:63:40:16:40:5f:
ca:d6:58:14:eb:b4:e8:32:38:30:5c:d8:d8:91:56:d5:38:48:
2c:d0:ee:a9:71:1c:04:b3:94:5e:9e:a0:5e:10:fc:ea:83:47:
f5:0d:50:59:a8:e3:aa:d0:ff:9e:99:7e:5d:6d:1d:79:00:54:
4b:96:09:80:63:70:fa:a6:68:23:1c:0d:5a:26:cd:fb:b9:7d:
6b:1c:df:51:d2:d0:d4:68:c1:64:4b:1a:92:35:13:cd:ea:73:
fc:ea:ba:94:27:9a:04:31:a6:77:20:4c:e2:ea:ec:3e:49:7d:
51:a9:d0:59:aa:fa:ac:fa:b4:02:4d:4f:d9:e4:eb:10:d0:99:
9c:fe:67:21:bb:3b:3d:48:bc:0c:97:13:9e:c1:e6:66:69:36:
0c:f9:16:a0:12:1a:bd:e7:84:10:65:1e:26:89:d0:c4:22:8f:
13:16:33:73:3a:71:ff:47:f6:e2:fb:84:81:bb:08:8f:86:9b:
cf:04:f8:ba:fc:a7:1f:da:b0:3e:7d:d8:9c:fc:a5:65:25:29:
ca:5e:f6:1d:62:f9:23:34:3f:b8:bd:1d:d3:47:58:4f:95:d6:
d4:e8:2e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:17 2025 by rpki-client