Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8552DB68BB7811EFAE6F2898762E951A.roa
File: 8552DB68BB7811EFAE6F2898762E951A.roa (raw, json)
Hash identifier: 3+0Cc2+rLbwtMNgutX3cyEhkzquubeC6qGFwytPIvbE=
Subject key identifier: D4:5E:BB:49:55:9A:DC:E7:9C:4C:16:88:63:B0:A1:4E:E5:91:A3:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8552DB68BB7811EFAE6F2898762E951A.roa
Signing time: Mon 16 Dec 2024 06:39:38 +0000
ROA not before: Mon 16 Dec 2024 06:39:34 +0000
ROA not after: Tue 04 Mar 2025 06:39:34 +0000
asID: 142403
IP address blocks: 154.94.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72598 (0x11b96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:39:34 2024 GMT
Not After : Mar 4 06:39:34 2025 GMT
Subject: CN=675fcb2a-f9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:3d:97:1d:2e:46:13:fa:61:24:a3:a5:1c:dd:
c6:91:05:78:4d:cb:5a:90:a3:d2:0f:e7:c8:b6:d5:
e6:ea:7d:1b:1c:0a:42:9e:8b:c0:fb:68:3b:97:ce:
67:84:fc:3f:f1:de:f5:b3:29:02:04:b4:f4:3b:d2:
4f:04:97:3b:5a:89:0d:53:29:87:76:44:42:63:4e:
92:94:29:f2:7b:f5:1e:b2:d0:79:e7:91:77:37:5c:
bd:81:e5:3d:0d:96:f7:ac:26:1b:22:bf:65:17:9f:
b6:2d:ab:81:0c:09:de:bb:32:71:65:4e:9f:ca:b6:
3d:94:ba:06:3c:c8:c5:53:d7:a9:93:17:b4:cd:62:
82:06:c3:c0:d5:d8:a9:15:d8:4a:73:5a:e8:b1:21:
b1:49:73:85:9a:99:92:74:c0:f0:f1:4f:bb:47:46:
c0:75:af:bf:8a:15:33:28:e3:ae:89:6b:b0:02:1d:
7b:ba:e6:fa:06:9f:6d:76:3b:0b:f0:de:de:33:ff:
38:51:1d:80:0a:ec:10:77:d4:8b:1a:9c:7a:64:11:
30:98:46:e0:ad:68:3e:c9:e2:3c:11:c0:13:f1:8a:
32:d6:2e:94:38:dd:de:e6:f1:a7:01:f3:be:8a:bd:
78:78:85:00:90:1a:83:c9:b5:3c:77:d9:22:05:74:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5E:BB:49:55:9A:DC:E7:9C:4C:16:88:63:B0:A1:4E:E5:91:A3:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8552DB68BB7811EFAE6F2898762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.5.0/24
Signature Algorithm: sha256WithRSAEncryption
63:39:ea:78:00:d0:a5:41:3e:9d:57:0c:ed:2c:e2:7e:0d:e8:
f0:5a:30:0b:dc:07:55:dd:19:c2:dd:a6:5b:77:19:a9:7e:78:
d1:c6:6d:74:0f:c8:93:e8:8d:66:78:c2:f1:9e:2a:95:21:39:
27:4e:97:29:e1:40:84:a1:75:3e:61:57:75:1d:9f:79:cf:47:
ae:47:bc:1f:51:b0:58:de:ce:34:c1:b2:b5:26:5b:6b:1f:42:
3f:3a:a5:21:e9:1f:8c:d7:25:5f:8c:89:2c:80:5f:0f:b3:38:
49:4b:69:50:f5:51:10:78:fb:03:49:37:4c:d1:00:43:74:2c:
77:5e:77:aa:5d:dd:6f:c3:3a:b1:02:59:fe:0a:61:17:bb:74:
a3:d8:d8:15:3e:55:eb:c2:f4:10:29:f3:f1:01:1b:4b:e6:61:
ce:76:16:96:56:04:67:3b:3e:c5:16:b0:f0:e9:80:90:08:9b:
dc:d0:4b:3c:88:83:94:e9:00:04:54:35:c1:74:cf:5d:0e:95:
ef:5b:a6:9d:d5:48:09:b4:91:be:47:ac:c5:66:8d:44:7a:25:
58:81:17:cf:3c:cd:63:8f:fb:68:47:b2:82:8e:d5:8d:6c:17:
47:2b:c6:12:35:6f:8a:f7:06:9d:38:24:ea:c8:1e:12:29:4d:
0c:ba:c3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:59 2025 by rpki-client