Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844AC3CADD6F11EFBA0E766C762E951A.roa
File: 844AC3CADD6F11EFBA0E766C762E951A.roa (raw, json)
Hash identifier: /YmGXlRiK1N8S7o5t3KV5N7lPIkNvnJ3aPg5nyxobdo=
Subject key identifier: 16:26:5A:DD:18:DA:01:9B:93:F1:46:16:50:20:6E:16:9E:61:DE:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844AC3CADD6F11EFBA0E766C762E951A.roa
Signing time: Tue 28 Jan 2025 12:00:51 +0000
ROA not before: Tue 28 Jan 2025 12:00:45 +0000
ROA not after: Wed 12 Feb 2025 12:00:45 +0000
asID: 5065
IP address blocks: 154.94.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85242 (0x14cfa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:00:45 2025 GMT
Not After : Feb 12 12:00:45 2025 GMT
Subject: CN=6798c6f2-0c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:80:28:27:d5:af:cf:12:5f:12:96:ca:11:
ba:81:be:18:fe:36:0f:b9:92:34:04:2b:0c:f1:56:
36:92:5a:14:43:41:08:af:48:ae:a1:60:6e:82:78:
90:d2:e6:9e:ee:31:a9:be:cd:41:34:0b:fd:8c:d6:
09:d7:08:9e:93:6b:b5:59:8a:2a:bd:82:99:c1:19:
25:b2:ee:b2:09:92:ff:d2:22:d9:a0:6b:3b:a9:7e:
87:5e:26:17:01:39:be:75:b8:b1:73:1b:0e:8e:15:
b7:39:cb:16:33:ed:9e:97:de:59:a4:95:b4:d3:40:
30:cf:02:4c:68:cd:09:49:e1:b9:a7:a3:64:95:3d:
37:76:05:9e:4d:ca:8a:6f:81:a7:63:df:22:a3:be:
81:92:5d:b8:d2:ca:46:01:26:36:94:39:64:9f:db:
86:b2:7c:33:00:71:8f:fe:a0:03:66:5c:c3:cb:df:
e4:12:f4:34:fe:4c:9d:22:c0:25:94:80:b9:37:5e:
af:a3:1e:fb:50:49:60:67:7c:aa:90:73:6d:e4:99:
fa:d9:8d:90:e9:b2:87:bd:5d:50:44:75:84:63:fd:
0e:1d:2e:14:19:8a:66:63:72:bb:d2:92:0e:6a:8a:
1b:06:1d:69:9b:9b:9f:04:6d:1c:b2:f8:d5:16:10:
ed:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:26:5A:DD:18:DA:01:9B:93:F1:46:16:50:20:6E:16:9E:61:DE:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/844AC3CADD6F11EFBA0E766C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.53.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2a:d1:57:32:4d:f6:e7:45:45:56:85:65:86:c0:f7:1e:06:
05:19:f3:c3:09:bd:96:1a:01:99:4d:0b:44:89:5b:76:0e:55:
8a:9d:b8:c3:cc:53:bd:46:a6:f3:06:ec:a3:75:3d:ae:87:53:
1b:72:8b:47:9d:62:2a:bb:b0:5f:d3:16:29:f2:5d:6a:d5:4c:
92:0a:4d:e2:e0:f6:43:cc:46:13:93:74:a9:65:9b:f9:ac:21:
73:0b:69:ed:1a:1b:e3:0a:f3:66:fb:e8:75:e3:6b:d8:e2:1e:
29:06:b8:4b:75:92:b3:35:64:10:63:91:57:8d:14:fa:7a:6f:
95:9e:35:52:3d:d6:3f:2a:3f:c9:11:37:3c:93:08:f8:6d:9a:
8f:8c:d5:93:5c:36:ef:59:6a:f0:0a:40:ae:87:2a:6f:20:f4:
da:3c:d7:d2:ac:13:c4:41:26:48:b3:76:dc:2c:04:96:ec:4d:
ca:0d:f4:e0:e9:a1:75:b3:86:0d:6e:52:07:d4:5c:b1:d9:0d:
da:e8:70:cf:87:37:d7:5a:34:06:20:98:8c:c8:54:e8:54:9d:
25:5f:d7:2b:08:4f:9d:60:bf:db:c5:3e:e9:17:0b:4d:01:1a:
82:99:88:16:80:48:1c:fb:7f:de:9c:bb:ca:5e:29:89:66:7e:
1d:fc:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:45 2025 by rpki-client