Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9580D3C0CF3011EF92C795AA762E951A.roa
File: 9580D3C0CF3011EF92C795AA762E951A.roa (raw, json)
Hash identifier: Vfv0+LS/VFeMJtlT3gcs0no+bNPZnvGgXr/D+60oALE=
Subject key identifier: FD:37:E3:F9:77:EC:0D:B2:8C:77:B6:63:3F:81:D0:D0:B6:FE:18:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9580D3C0CF3011EF92C795AA762E951A.roa
Signing time: Fri 10 Jan 2025 08:55:05 +0000
ROA not before: Fri 10 Jan 2025 08:55:01 +0000
ROA not after: Fri 07 Feb 2025 08:55:01 +0000
asID: 5065
IP address blocks: 154.94.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80325 (0x139c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 08:55:01 2025 GMT
Not After : Feb 7 08:55:01 2025 GMT
Subject: CN=6780e068-afb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:f5:30:a7:a6:4d:5e:72:32:0e:e1:d1:a4:
40:c0:0c:ab:b6:4d:90:de:e6:e5:39:f9:c2:ab:9e:
49:80:bd:3b:14:a0:29:ad:98:70:76:26:68:38:c2:
41:e1:a8:05:5c:8d:f0:0f:16:a6:15:13:1b:42:5d:
4e:1f:d4:74:75:99:f9:08:65:a4:ae:95:fc:d3:eb:
58:0c:76:ea:82:00:45:64:ed:03:50:d8:a8:2f:69:
6e:50:f7:3a:28:54:af:05:ae:50:e5:75:dc:d5:90:
ef:6e:27:94:57:1d:e7:5f:93:6e:91:6f:aa:aa:38:
e2:2c:9f:36:39:e2:00:a1:d0:a1:ca:24:57:44:57:
cf:ae:bc:5f:3c:84:f9:1d:01:38:47:59:49:cc:8c:
89:d0:d4:36:f3:fe:4c:ac:6a:c3:59:68:29:64:6b:
a2:76:cc:e5:be:eb:ad:4c:ed:03:17:b7:5a:b4:a6:
c8:33:fe:61:cc:41:93:7a:b3:10:05:70:4b:ee:a9:
fe:f1:b9:a7:0f:8a:52:1e:ed:52:2f:f0:d9:9b:04:
d6:82:2d:b0:05:77:be:71:c7:fd:d9:05:01:57:c1:
70:a4:d5:cc:c8:0a:1b:e2:45:f7:6c:ba:c6:d1:fd:
9a:59:16:c4:ae:3c:f9:e0:2f:24:7d:55:f0:5b:76:
2d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:E3:F9:77:EC:0D:B2:8C:77:B6:63:3F:81:D0:D0:B6:FE:18:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9580D3C0CF3011EF92C795AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.56.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:98:1b:da:43:58:b4:57:94:76:19:1c:a2:14:b5:01:d0:a0:
4a:5b:d0:81:15:f3:14:09:1e:36:62:b3:6a:16:7d:36:b8:1c:
30:d9:15:a4:cd:e0:fb:b3:76:b6:03:7c:60:e5:04:71:92:ca:
ba:6d:d4:93:d6:56:ff:29:23:45:a2:ca:f9:c9:94:71:ae:84:
7e:d6:df:44:46:95:4d:3a:03:22:a0:33:bc:90:2d:79:1b:20:
b0:6a:c1:9a:a6:b6:77:3a:88:c0:f6:96:38:ba:ed:59:b1:56:
90:83:74:f0:e3:d9:f9:63:bb:23:8c:55:51:d6:4a:7f:33:a0:
de:cd:42:d1:64:cb:4f:7c:55:ab:3c:2d:f4:95:c0:a0:b3:55:
f5:81:0a:4b:bb:dd:ca:b5:87:ab:68:ba:6c:82:08:b6:bc:97:
14:1f:7b:d5:5d:5d:ce:bd:d5:0e:a6:e0:6e:37:4c:62:f1:d5:
06:45:b7:a2:5f:0b:93:be:b5:59:b5:0b:1f:d8:65:c7:89:09:
8b:6d:7f:37:55:6e:5d:06:fd:c7:5d:30:d1:17:29:97:ed:e1:
fa:1b:82:64:af:8c:70:97:e9:07:b6:76:55:ff:65:35:40:47:
fd:6c:ad:40:d2:79:34:99:b0:0d:cf:4d:10:24:9b:a0:e1:b0:
af:1b:cd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:35:10 2025 by rpki-client