Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1172794C2A011EF91790641762E951A.roa
File: A1172794C2A011EF91790641762E951A.roa (raw, json)
Hash identifier: 2WwVMDULmDgNQWt0pbTsHZxS15ENq7BjGRZLxWuOg9U=
Subject key identifier: D4:A5:75:87:97:CC:86:92:10:8C:F6:B3:F6:43:81:20:C4:67:43:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01252E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1172794C2A011EF91790641762E951A.roa
Signing time: Wed 25 Dec 2024 09:14:22 +0000
ROA not before: Wed 25 Dec 2024 09:14:19 +0000
ROA not after: Tue 11 Feb 2025 09:14:19 +0000
asID: 138915
IP address blocks: 154.95.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75054 (0x1252e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:14:19 2024 GMT
Not After : Feb 11 09:14:19 2025 GMT
Subject: CN=676bccee-0932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d6:c9:01:83:d7:ae:53:a5:02:7c:62:e7:51:
cf:d2:a7:05:97:04:97:d5:5a:18:cf:f1:81:a3:c6:
5d:1d:0e:d9:ed:4d:d9:56:c5:9b:49:cd:e7:06:3f:
65:46:c1:39:33:90:46:99:c9:56:ea:cb:6a:cd:e9:
75:a4:0d:b5:22:ca:82:25:df:82:24:a1:30:6c:46:
08:2c:9d:78:e7:52:c8:bf:7b:fc:36:d3:61:70:4d:
85:d0:1d:41:13:b2:fa:f3:d1:3a:3f:01:ba:35:4f:
31:6b:98:c5:01:cf:3c:ca:b8:f1:0b:94:54:9b:a0:
51:55:26:b1:24:2a:04:7d:0c:60:8a:da:14:55:1b:
04:91:b1:9a:ff:5b:15:51:ae:65:35:3e:ba:c2:17:
63:fa:f9:35:1c:e5:56:c7:59:38:f1:a9:11:d8:7c:
cd:8d:88:85:d5:6b:7b:2c:b5:e7:a4:d6:25:3b:65:
69:87:33:3c:a8:8f:a6:6f:98:50:1b:16:84:01:78:
f1:e6:fb:58:a9:c2:b1:b5:56:86:35:ca:64:7a:49:
b1:00:f1:07:c2:02:f0:4c:45:20:86:33:05:59:5e:
1d:b3:c3:58:bc:ef:b2:c3:6c:40:35:ab:40:8e:8e:
47:89:b1:d2:ca:51:75:83:2e:63:f2:cf:1e:51:69:
17:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A5:75:87:97:CC:86:92:10:8C:F6:B3:F6:43:81:20:C4:67:43:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1172794C2A011EF91790641762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.64.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:7c:76:f4:91:3f:2d:10:8f:ac:58:67:88:7f:ca:c5:30:59:
fe:ae:0e:82:d4:6b:fc:b1:22:ca:50:d1:60:f7:50:91:59:27:
3e:b8:cd:df:fe:f9:36:eb:a2:ee:d4:51:3c:1b:28:a2:4f:99:
25:b1:ca:95:5b:0c:6a:c6:f1:51:5c:b8:80:b6:35:29:24:b4:
f4:d1:aa:78:f4:8f:31:3b:48:81:f6:55:77:f1:9c:c0:50:0d:
a3:25:04:f1:ca:b0:a5:59:21:b8:83:d6:fa:bb:e5:b8:64:d6:
51:49:d6:4c:87:ca:0b:ba:63:4d:47:37:02:45:49:d2:41:0b:
0e:28:db:0b:47:ba:88:e6:da:75:dd:cd:33:d0:02:c2:6a:1e:
8e:8d:15:4b:5e:37:ef:96:2d:3e:09:ac:73:68:64:9a:89:a0:
17:cf:87:5f:b1:22:cd:92:4f:68:d1:c4:f9:3b:7f:94:74:c1:
18:95:e0:4b:fd:dc:b9:69:73:bb:81:09:a7:4c:bb:57:76:ec:
b1:7f:6d:6c:3c:1b:f6:28:71:78:53:77:28:63:5c:26:24:20:
75:17:f0:2a:8f:a3:e8:1e:c1:97:85:a3:00:c9:90:8b:7d:5d:
fd:11:7e:1a:e1:46:da:a9:62:8b:69:85:0d:b9:ff:78:7d:69:
4e:bf:c7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:33:57 2025 by rpki-client