Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5C419ACF3111EF995A1BAF762E951A.roa
File: 6C5C419ACF3111EF995A1BAF762E951A.roa (raw, json)
Hash identifier: +rpaFsnvO5gfbnVuU1PHV9aKifpQwpwLWXfKKzfxxXk=
Subject key identifier: 5E:21:ED:58:E2:4E:43:4C:2A:9B:1A:9C:9E:CC:3D:B2:8A:88:B7:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139CB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5C419ACF3111EF995A1BAF762E951A.roa
Signing time: Fri 10 Jan 2025 09:01:05 +0000
ROA not before: Fri 10 Jan 2025 09:01:01 +0000
ROA not after: Fri 07 Feb 2025 09:01:01 +0000
asID: 5065
IP address blocks: 154.94.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80331 (0x139cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:01:01 2025 GMT
Not After : Feb 7 09:01:01 2025 GMT
Subject: CN=6780e1d1-b563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:95:56:b8:e7:f7:47:6b:8c:f1:8f:8f:97:
38:81:59:c4:1c:9b:6c:bc:24:00:bc:3d:9b:43:81:
b6:2b:52:d9:54:cb:f4:98:59:05:f3:77:19:e3:3c:
45:1e:bd:76:6d:a4:f1:9e:cc:e9:96:1e:2f:b2:08:
db:69:f6:a9:0c:b6:b9:e5:31:13:05:91:85:92:dc:
7b:25:78:e9:08:8c:1f:6d:d0:49:95:f0:72:f2:14:
9b:69:34:06:68:96:2c:f9:aa:91:83:a3:e9:17:b7:
1f:4b:9b:79:d7:e2:28:1f:10:f1:6d:4a:ff:76:d1:
3f:15:95:b5:6d:df:5b:2e:56:12:61:14:fa:67:9c:
31:b8:8d:08:3f:08:a1:bc:08:22:6b:a7:f5:9c:2d:
38:9d:f8:36:6e:f3:1e:7d:a0:f7:b8:97:10:7d:78:
94:25:9e:05:e9:ef:aa:f2:6c:1a:d0:93:65:c3:f3:
03:dd:88:28:90:d9:33:c2:e9:f1:1c:63:97:1f:8d:
14:80:a1:02:f4:cc:2d:ce:e4:ae:63:5f:91:cf:db:
eb:50:34:e5:4e:81:5d:29:20:3e:ff:d9:79:48:40:
bc:cb:d9:b2:d4:13:db:68:36:d1:18:72:1f:7f:b1:
8f:04:59:4e:41:2b:98:4d:8b:68:0f:71:8d:e9:2c:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:ED:58:E2:4E:43:4C:2A:9B:1A:9C:9E:CC:3D:B2:8A:88:B7:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C5C419ACF3111EF995A1BAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/24
Signature Algorithm: sha256WithRSAEncryption
83:da:9a:71:5f:02:83:60:4a:6d:8e:43:5c:e7:14:66:70:9f:
38:8b:d7:78:6e:07:88:e1:ee:0e:a6:bc:15:a1:b1:5e:01:a1:
ab:c8:92:8e:f2:1c:56:c4:63:5c:76:e0:36:02:01:1f:43:55:
8f:c8:fb:64:3c:74:f1:51:46:25:26:65:68:6b:35:5f:a3:3a:
d4:5a:2c:1f:e1:67:55:8b:52:ff:2f:63:46:ba:34:86:50:07:
66:f7:32:0e:2b:3f:03:cc:f5:fa:a3:ab:08:3f:c1:06:d4:8e:
af:73:c9:b1:ca:23:37:b0:20:bb:e2:bb:4f:b0:0a:d5:d1:c5:
1d:87:9b:19:d1:67:7f:f5:25:69:d0:63:55:e9:c9:6b:c0:07:
95:6e:b4:1c:6f:da:d2:f0:26:6f:82:6e:3f:7d:b3:3c:f2:5b:
e0:0e:32:eb:a3:b2:7f:60:78:71:18:bb:0e:8f:5c:b2:83:b5:
e6:e9:d5:2d:b6:9a:a3:9c:24:8c:35:b0:68:39:2c:a3:bd:04:
6d:93:90:da:de:bc:79:15:48:62:d7:c6:91:d8:40:9e:61:0a:
eb:0f:ab:c3:6a:c4:f2:2b:5c:48:b3:92:38:a1:16:6d:a7:65:
1b:56:8b:ff:94:4e:9c:7d:b1:a7:16:0f:7b:73:1c:83:61:c7:
42:a5:33:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:57 2025 by rpki-client