Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/904CF72EC36111EFA7D15A89762E951A.roa
File: 904CF72EC36111EFA7D15A89762E951A.roa (raw, json)
Hash identifier: gEWfiHdSvPYHRkXYW6sQCRNGBO50ELk1BLwm3ci/Yko=
Subject key identifier: 49:BB:7D:F1:53:A1:D4:40:A3:1A:40:F7:2F:23:57:EC:FD:3D:C4:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01265E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/904CF72EC36111EFA7D15A89762E951A.roa
Signing time: Thu 26 Dec 2024 08:15:27 +0000
ROA not before: Thu 26 Dec 2024 08:15:23 +0000
ROA not after: Tue 04 Mar 2025 08:15:23 +0000
asID: 63139
IP address blocks: 154.94.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75358 (0x1265e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:15:23 2024 GMT
Not After : Mar 4 08:15:23 2025 GMT
Subject: CN=676d109f-f55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0d:26:f2:04:2e:23:c7:ec:b3:78:06:33:b5:
f0:69:17:43:0b:37:ee:2a:2f:a7:d6:ce:ac:35:2b:
af:0c:48:51:10:23:5c:47:76:99:79:92:f0:38:35:
e8:9c:a5:d3:f6:3e:57:16:cd:b1:5d:18:9b:cd:1c:
3d:19:2f:00:55:af:f5:48:c7:08:ea:67:69:17:27:
22:0f:8b:2d:e8:11:e4:a5:a0:f1:e1:4b:29:71:ed:
c2:ff:3c:39:ba:0d:33:2f:78:05:40:18:60:a2:10:
fd:0f:f7:c3:37:27:ec:b3:fc:51:fd:cf:ac:53:b1:
01:42:57:26:6f:b1:e3:ce:7f:66:9b:a2:13:3f:79:
7e:5b:9b:ab:99:e8:90:62:92:24:38:5b:96:fb:43:
38:5f:dd:c3:08:ae:fb:2f:79:38:3f:f1:2a:b1:59:
8f:98:d3:8b:99:c6:dc:3d:e1:65:11:65:80:57:7c:
4e:8f:f7:b0:54:41:72:78:5f:18:82:7a:8c:1c:3a:
d7:a0:ab:21:71:02:83:9d:ef:09:7d:ff:99:89:36:
32:2b:79:33:a4:4f:dc:c0:9a:19:23:fd:03:e5:40:
d8:f6:7f:0e:93:47:2d:c9:6a:ed:34:4b:82:7d:40:
60:8d:52:b4:2e:dc:68:d9:ec:3c:07:f7:23:ba:2b:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BB:7D:F1:53:A1:D4:40:A3:1A:40:F7:2F:23:57:EC:FD:3D:C4:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/904CF72EC36111EFA7D15A89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.80.0/20
Signature Algorithm: sha256WithRSAEncryption
c3:97:69:82:d3:71:48:d0:93:1c:bf:70:75:b3:e1:35:8b:78:
9b:f9:09:df:14:80:33:09:86:10:fa:09:65:03:f0:e2:d5:ef:
8d:1c:30:54:40:be:58:20:e4:79:6f:1f:bf:73:5b:1e:78:9b:
fc:39:2a:82:52:0c:a6:d3:77:5c:25:66:b8:de:e9:06:43:92:
aa:11:27:92:2b:da:3d:52:f0:05:84:a7:82:95:cc:4b:ad:46:
d1:27:6c:eb:b5:db:ff:d2:05:0f:28:39:2c:15:fd:84:18:a9:
ae:97:68:c6:19:13:a6:e9:3d:a0:6e:19:9b:8c:ed:20:3e:6b:
7e:b5:b4:e7:4a:28:80:55:c0:08:70:1b:02:eb:a6:3d:05:c0:
22:9a:98:04:a8:1c:c5:52:b2:95:e9:c9:19:f1:28:64:1f:92:
1f:93:80:ea:f0:c9:9d:4d:a4:f6:0a:2d:95:da:64:6d:19:9c:
b7:dd:fc:93:1f:03:38:64:97:f0:60:d3:11:9d:9b:d6:de:cc:
dd:f9:7f:b4:68:da:54:ed:05:fb:45:dc:fb:08:70:e5:a3:71:
05:64:fb:17:2b:14:06:bd:b1:e4:04:53:ce:cf:ec:7a:9d:15:
79:df:e2:70:09:72:ee:fb:f3:90:6e:1c:1a:fb:37:88:1c:23:
24:e4:ca:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:35 2025 by rpki-client