Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D2041BEDB2311EF888E8E6A762E951A.roa
File: 6D2041BEDB2311EF888E8E6A762E951A.roa (raw, json)
Hash identifier: poZoiR5FfvMw/p3bGj4pS9eLRoWXRvsC/z4nHP3Lt/Y=
Subject key identifier: 3F:5F:0F:9F:6D:44:00:A4:4D:32:87:BB:04:36:D6:89:4D:4C:C5:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D2041BEDB2311EF888E8E6A762E951A.roa
Signing time: Sat 25 Jan 2025 13:51:07 +0000
ROA not before: Sat 25 Jan 2025 13:51:04 +0000
ROA not after: Wed 05 Mar 2025 13:51:04 +0000
asID: 42831
IP address blocks: 154.94.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84390 (0x149a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 13:51:04 2025 GMT
Not After : Mar 5 13:51:04 2025 GMT
Subject: CN=6794ec4b-9a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:3c:f4:9c:ee:9f:9c:26:4e:63:a9:ad:1c:
34:1d:48:8e:d8:43:c9:18:bd:29:44:8a:72:22:1c:
29:66:b2:dd:0b:e3:ba:df:63:4d:d8:85:b3:2a:76:
af:de:c9:74:e3:2d:a7:1a:08:3d:09:01:9a:35:5d:
40:84:58:c0:eb:47:41:ab:69:a2:af:6d:21:98:4d:
71:08:fb:4d:2a:c3:05:bf:87:53:f9:34:a0:d2:80:
7c:cf:89:40:da:ec:68:7f:d8:41:98:9b:00:35:e6:
19:54:59:e5:aa:74:e4:12:b9:1e:94:ee:ea:fb:22:
ee:3b:d2:05:1e:f1:1d:c9:aa:40:f5:73:93:a4:24:
97:15:df:a8:27:ad:31:d3:08:62:05:cd:ac:82:e6:
11:da:4a:1b:96:04:a9:65:d7:89:fc:4a:c3:39:7c:
d9:97:55:75:bd:6c:70:c5:5c:03:6f:0e:bb:b7:52:
8f:0e:7d:95:95:79:b2:63:33:42:9e:71:d2:de:78:
ec:21:40:bf:a4:3a:ed:da:3e:ee:6c:bf:66:3f:fb:
41:f1:91:6f:3a:1a:70:b8:a0:70:c0:9a:e1:42:fe:
78:85:0b:70:2c:27:d5:80:e0:4e:e6:0c:80:1e:07:
07:7e:a9:9e:76:60:20:a8:e9:3d:c6:dd:5d:01:76:
07:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5F:0F:9F:6D:44:00:A4:4D:32:87:BB:04:36:D6:89:4D:4C:C5:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D2041BEDB2311EF888E8E6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
74:f4:fe:ac:44:6f:03:53:fb:0e:bb:eb:97:39:73:9c:c2:3d:
ba:51:cf:2b:4c:e0:07:b1:ae:35:6c:e4:cd:82:b2:07:12:9b:
1a:59:db:70:d4:bc:fe:91:ff:de:97:f5:ad:ea:a9:3d:05:2c:
df:f9:36:d8:45:c6:a0:a1:a6:97:c5:29:73:20:57:4f:42:34:
68:28:7a:55:3a:7b:5c:ad:f5:34:03:9a:31:da:ac:63:99:84:
75:4f:3a:65:30:fc:21:00:38:02:41:88:fc:40:cb:9c:f6:9e:
c3:58:b1:ec:ed:87:4a:c1:f9:05:54:bb:6e:c8:cb:91:54:2e:
4c:ed:5e:05:90:ae:25:97:88:28:c7:c6:21:24:8e:fd:80:cd:
9e:15:76:99:69:70:1e:41:61:3b:6c:45:a8:cf:90:f5:26:7a:
00:9a:50:1f:68:3f:e7:df:ec:a3:66:b0:8c:64:a8:2e:b5:70:
61:74:56:92:07:fe:50:04:10:75:4e:9a:71:7a:75:b7:87:ac:
c4:0f:80:d6:48:2d:fc:00:2a:fe:05:cb:5d:16:2a:f9:c5:ca:
7f:24:fc:85:4f:37:32:3e:cd:4b:0d:2e:70:69:f0:84:16:f2:
f9:18:47:ee:ed:5e:91:39:b0:2d:e5:08:e1:7c:d2:c2:84:82:
b1:38:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:00:29 2025 by rpki-client