Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A4F9C8DFF811EF9ACDB97C762E951A.roa
File: 79A4F9C8DFF811EF9ACDB97C762E951A.roa (raw, json)
Hash identifier: dpqZrrovp6IgWYuUQWAQ2/C5Lu9aY/A25T8uBYPj44I=
Subject key identifier: F8:97:99:69:88:D8:48:60:8B:7B:A8:D6:7F:02:2C:BE:78:39:FC:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A4F9C8DFF811EF9ACDB97C762E951A.roa
Signing time: Fri 31 Jan 2025 17:26:16 +0000
ROA not before: Fri 31 Jan 2025 17:26:12 +0000
ROA not after: Tue 11 Feb 2025 17:26:12 +0000
asID: 200373
IP address blocks: 154.94.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85551 (0x14e2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 17:26:12 2025 GMT
Not After : Feb 11 17:26:12 2025 GMT
Subject: CN=679d07b8-5ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:cd:e2:6f:1b:0b:e9:6d:df:73:43:bb:e1:
af:00:69:61:d3:1f:96:e8:6c:94:d2:c6:0a:38:fc:
f1:f5:3f:97:33:0a:14:4c:62:c9:03:c1:e7:82:ac:
65:d4:ef:5d:2f:39:67:3b:db:b2:68:27:8f:3e:90:
5d:f8:b5:51:28:45:9c:af:44:d7:c3:16:d1:b8:c4:
ef:58:27:bc:6a:43:4d:f1:22:ce:5a:a7:af:0a:a5:
53:1a:00:e2:c3:f4:b2:70:0e:a1:fa:07:61:ba:61:
6b:b1:bb:25:c1:c1:ed:4a:80:f3:9d:f3:78:3e:c0:
f3:f0:b4:e9:a5:9b:8a:83:74:dd:11:cd:8e:49:63:
07:e3:b0:68:f5:78:d3:7f:5f:b4:41:85:3c:70:b4:
3d:7f:96:ce:7e:0f:b8:75:34:d4:93:ab:18:94:9e:
00:5f:58:d1:95:d7:aa:84:d8:bc:da:76:ed:c5:7a:
87:fd:b2:23:b8:17:35:6f:0f:5d:f8:46:bb:13:06:
6a:50:a5:aa:50:0d:8e:74:5a:6b:39:bb:7b:67:64:
44:54:c9:2a:ed:7e:0f:08:a5:68:07:90:d6:22:e2:
e9:b8:f0:26:d1:42:99:e8:ab:c8:2d:5b:e1:13:e1:
bd:8f:f0:e6:c8:be:5b:04:f0:ce:f4:d6:4f:12:0a:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:97:99:69:88:D8:48:60:8B:7B:A8:D6:7F:02:2C:BE:78:39:FC:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79A4F9C8DFF811EF9ACDB97C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.14.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c6:79:8f:66:63:31:85:a9:56:e8:d7:d8:a5:91:50:73:c5:
2a:c7:12:72:1e:c3:e2:83:f1:9f:6d:33:fe:6e:f9:d8:75:51:
20:3b:4a:7a:68:2d:09:68:9c:69:f9:62:bf:50:d9:20:90:bc:
56:0e:33:06:2f:e9:ad:66:7e:3e:92:dc:0f:3f:d3:85:76:8f:
85:aa:16:65:c1:6b:2a:f4:78:cd:39:da:e1:70:9b:0b:84:eb:
41:66:80:cf:ef:6d:29:ce:ea:b6:a2:d9:b8:c9:ed:48:80:b5:
16:de:f8:ee:8e:3a:e5:4a:cd:d4:20:11:13:95:eb:a1:63:6c:
7d:c0:fe:57:e2:71:53:4e:02:8c:45:ce:2e:19:cd:eb:ec:6b:
9a:df:ab:d2:57:84:84:e6:b4:6b:53:6b:11:70:b1:83:63:d6:
e1:28:ac:9f:ce:eb:45:4d:bf:5c:81:3c:20:62:33:65:55:3f:
bb:f6:1c:e5:08:ac:40:7e:e7:33:cb:37:c0:b0:a8:80:a6:8a:
6f:47:d4:81:fe:65:26:82:0f:e1:24:d7:47:0e:ec:d9:01:df:
99:10:c5:ad:9d:4a:79:31:ce:67:aa:51:cd:ab:bb:74:0d:7b:
42:4d:32:6c:8a:0d:ae:e4:49:47:1e:52:5d:36:ab:ee:7b:bc:
b9:11:06:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:21:24 2025 by rpki-client