Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EE1D14C9C111EF8B8A9596762E951A.roa
File: 95EE1D14C9C111EF8B8A9596762E951A.roa (raw, json)
Hash identifier: joBYT9bAR9VoUdWv74e3Je+bqpDMlw4h0m7NiGZe17I=
Subject key identifier: 48:86:67:6B:78:3C:89:89:07:9D:AC:CB:30:1F:6C:3B:34:05:EC:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01348A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EE1D14C9C111EF8B8A9596762E951A.roa
Signing time: Fri 03 Jan 2025 10:57:55 +0000
ROA not before: Fri 03 Jan 2025 10:57:52 +0000
ROA not after: Fri 07 Feb 2025 10:57:52 +0000
asID: 397423
IP address blocks: 154.93.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78986 (0x1348a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 10:57:52 2025 GMT
Not After : Feb 7 10:57:52 2025 GMT
Subject: CN=6777c2b3-ceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:15:f5:51:c0:b6:80:0c:07:b0:c2:f9:2f:
40:f2:6a:b9:04:47:d8:dd:b3:aa:c5:17:2f:c3:a8:
86:96:ef:91:bc:b9:eb:66:32:eb:ea:2c:3b:74:94:
df:55:9b:73:4c:3a:01:90:2c:41:fc:e4:da:13:0a:
60:d7:54:2e:b4:30:b8:0b:02:a1:ad:62:08:e0:aa:
dc:34:12:62:30:da:f9:f6:f0:c6:44:90:de:c4:a8:
7b:3a:aa:25:d0:e9:91:40:ad:ce:63:7b:9a:95:21:
8f:6a:48:02:c2:74:b1:e4:50:60:79:7b:c4:35:31:
fa:8d:54:ed:2e:b9:9a:1f:cf:97:a9:cd:80:78:ed:
8f:20:d5:50:97:73:0e:d9:db:9d:cc:2c:d7:25:a9:
6e:3f:c8:6c:15:9d:4a:25:17:78:be:9b:65:6d:da:
29:77:07:d0:c6:27:c5:c5:0d:ea:6e:e1:82:79:ff:
a6:03:0d:93:dd:94:9f:fe:9e:8e:88:2f:1f:c1:44:
68:f7:4c:ee:0f:71:01:68:b0:9e:0b:53:f5:80:e5:
88:a9:50:2a:17:fe:fd:0c:eb:1e:f9:1c:5d:64:28:
e1:98:3c:84:5e:af:cc:df:e7:c0:7e:ff:89:d4:7c:
91:5b:17:b4:8b:69:63:f8:b1:0f:10:b3:24:58:1d:
ea:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:67:6B:78:3C:89:89:07:9D:AC:CB:30:1F:6C:3B:34:05:EC:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95EE1D14C9C111EF8B8A9596762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.27.0/24
Signature Algorithm: sha256WithRSAEncryption
77:96:fc:bf:d4:1d:87:c3:fe:a6:1b:d8:43:5c:31:31:9c:ca:
54:a8:5f:fb:a0:5b:81:69:f1:3f:10:8a:76:a7:91:5f:6e:23:
b9:6a:33:d9:01:f6:3e:15:13:da:61:ef:eb:85:9a:d5:63:fb:
54:f7:dd:99:20:cb:f3:1c:cd:9c:77:d2:a2:4b:6f:1d:b9:5f:
7f:5a:4a:91:3a:a0:e6:6c:77:6d:ad:35:86:4e:7a:53:74:61:
00:99:80:ee:e5:ee:d6:c5:5d:c2:bc:d6:7d:e5:03:04:fd:30:
76:f3:0b:92:1b:59:4c:d9:ab:35:40:ea:fe:77:e1:26:2b:f4:
7e:eb:b2:9e:89:63:58:7c:d3:d2:26:84:ed:2d:19:10:94:2e:
dc:05:ee:86:27:06:b9:7a:d7:4e:6f:a3:cb:10:2c:6d:5d:9f:
e5:bb:d7:ab:98:e9:7c:ed:ef:b6:d0:f7:05:03:ba:35:16:03:
d0:5a:8c:5b:a8:8f:20:ee:39:ef:9e:9e:e1:16:73:98:df:97:
16:83:a9:ce:8e:96:1a:8d:30:26:5a:90:3a:0a:60:28:e0:5e:
7e:39:ca:52:9f:32:05:5c:3d:26:61:70:1f:14:01:87:36:b7:
93:aa:d7:67:41:30:d6:d4:2e:11:09:ac:2f:e8:33:ca:a6:47:
8d:da:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:08 2025 by rpki-client