Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8359F93EDD6C11EFABEB9959762E951A.roa
File: 8359F93EDD6C11EFABEB9959762E951A.roa (raw, json)
Hash identifier: GeSE7JwLiwWXKQ4VDZVhGNH29+U4Tb1Q9vV9qh083WE=
Subject key identifier: 5D:02:82:1C:44:8D:1F:12:B6:C1:4A:50:3C:A1:A7:14:9C:F4:3F:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8359F93EDD6C11EFABEB9959762E951A.roa
Signing time: Tue 28 Jan 2025 11:39:20 +0000
ROA not before: Tue 28 Jan 2025 11:39:16 +0000
ROA not after: Wed 12 Feb 2025 11:39:16 +0000
asID: 5065
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85224 (0x14ce8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:39:16 2025 GMT
Not After : Feb 12 11:39:16 2025 GMT
Subject: CN=6798c1e8-8e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e2:57:d0:ba:31:c1:ab:66:8b:3d:d2:8d:ce:
40:2c:fc:35:e5:92:48:f7:a6:a1:c2:46:c9:e7:2a:
dd:7a:85:38:09:b2:93:f8:01:1b:76:a4:c7:d2:95:
25:d2:31:f1:3d:f2:2b:96:41:fa:ef:d3:41:e4:1b:
bb:32:7b:23:07:ed:46:33:f3:ce:20:83:92:7d:72:
83:fe:ab:cf:20:67:14:18:62:2e:ea:2f:1a:5e:1d:
84:77:1b:b3:c9:28:af:39:11:60:dd:68:34:88:2b:
7d:5f:92:92:ef:76:05:c7:44:2d:26:49:b2:d0:e7:
e8:12:4e:ea:9f:0a:3f:9f:6a:b2:18:8c:f7:07:e1:
02:dd:98:e1:34:09:61:dc:e2:55:de:17:6b:20:6f:
e8:df:c1:70:9c:ab:13:5f:1d:a2:0b:c2:38:81:c9:
1b:ad:5b:7f:d6:c5:d1:d3:68:98:8e:5a:56:77:63:
b3:07:95:6c:46:3f:3c:0c:55:14:9f:b2:a0:5d:d0:
3d:50:26:d5:be:51:59:1c:33:39:70:36:35:9d:ff:
6e:69:13:b0:98:c9:ad:1b:1e:4e:81:4c:80:40:93:
7a:87:69:2f:3b:e1:b6:50:88:d3:b4:af:70:c4:29:
61:ab:ca:2d:ad:c0:02:d2:5e:8f:72:7e:31:61:47:
ba:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:82:1C:44:8D:1F:12:B6:C1:4A:50:3C:A1:A7:14:9C:F4:3F:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8359F93EDD6C11EFABEB9959762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
59:36:fc:bf:ba:cd:52:dd:86:3b:05:80:54:b1:12:a7:37:1d:
e6:5c:a8:fb:91:74:37:ea:c8:ba:53:0b:a7:0e:8c:d7:59:e9:
0a:19:8f:d2:4e:e9:7b:78:e0:a2:02:24:ba:88:bf:e4:15:76:
a5:ab:43:68:93:52:36:22:7b:0f:62:72:4c:a6:ba:0a:9b:9d:
31:f3:ac:66:93:07:4d:1c:9f:ed:67:bc:26:dd:6e:da:c6:23:
72:52:3f:95:8d:97:91:6a:fd:80:71:ad:53:94:5e:fd:0f:6f:
31:fa:5a:d5:b0:da:93:d0:85:28:5d:b7:d0:9e:72:25:d3:ec:
2e:03:b3:f9:84:66:af:fc:14:cd:6f:7d:d2:ba:6a:fe:4b:87:
77:ac:c5:05:f0:4f:2b:b4:e0:54:6a:bf:84:c2:f3:f2:94:87:
7e:40:f0:db:39:d6:69:b6:86:a6:12:28:ab:4d:0e:74:5b:e5:
4b:f2:a0:5d:4b:e3:63:01:b5:9d:21:87:9f:97:2d:81:56:09:
fe:21:5e:b7:c3:e5:43:80:d2:78:c4:c1:1d:88:05:ca:8e:fc:
7c:d6:00:d0:ab:23:90:8e:d5:4e:52:8f:29:bf:b1:2e:00:f7:
43:54:6b:17:4a:64:30:33:09:66:cf:e5:8c:37:3f:96:36:db:
be:fb:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:37 2025 by rpki-client