Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F6184EDA3E11EFBC33955E762E951A.roa
File: A2F6184EDA3E11EFBC33955E762E951A.roa (raw, json)
Hash identifier: IdpsD+bThjdwn1Czltj+0eTIYwTUaJyljWxO8/Asyms=
Subject key identifier: 05:6C:EE:CE:16:D6:4D:09:59:F9:ED:54:62:59:69:0C:68:11:3D:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014598
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F6184EDA3E11EFBC33955E762E951A.roa
Signing time: Fri 24 Jan 2025 10:33:23 +0000
ROA not before: Fri 24 Jan 2025 10:33:18 +0000
ROA not after: Tue 11 Mar 2025 10:33:18 +0000
asID: 138915
IP address blocks: 154.95.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83352 (0x14598)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:33:18 2025 GMT
Not After : Mar 11 10:33:18 2025 GMT
Subject: CN=67936c73-9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:47:7a:e8:ce:38:ae:c1:4a:c7:7a:a2:1d:39:
17:5d:1f:c0:50:fa:bb:48:54:a9:b4:63:b0:4d:7e:
41:a4:7d:71:96:c4:4e:69:06:49:44:17:4b:7e:39:
c6:4a:42:4f:bd:ab:87:0b:ff:d2:2a:15:b6:bb:15:
86:e0:4c:87:7d:39:76:9c:b9:ab:be:ae:7c:b0:c2:
aa:52:4d:73:b7:58:f4:b9:53:9b:a5:82:1c:0b:8f:
42:c7:08:b6:04:3e:ad:0d:3a:ac:45:e5:2a:d2:af:
90:cd:9e:dc:7b:1e:4f:26:d5:b8:95:a0:18:8c:21:
d4:cd:bc:95:e3:d3:53:40:92:27:51:a6:f9:64:c7:
02:f8:23:b6:32:35:96:26:02:c0:7e:e4:11:46:34:
57:b9:a4:a6:6e:2b:a7:ba:73:45:00:4a:26:64:a7:
7d:f5:ff:e4:db:6f:f4:99:ef:46:7c:de:f7:cd:0f:
00:aa:a2:82:44:d0:8e:81:4f:70:0b:6a:e6:68:d0:
27:bd:92:29:29:a8:fd:3d:1e:f7:6d:d6:b9:8f:97:
7c:09:03:ed:9e:b2:2a:6c:8e:3d:14:bd:29:b1:8e:
51:c6:d5:28:0f:97:fd:10:c4:63:96:96:22:fb:c3:
f6:2d:19:a0:42:8b:25:87:e9:34:e7:10:de:bf:7d:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6C:EE:CE:16:D6:4D:09:59:F9:ED:54:62:59:69:0C:68:11:3D:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2F6184EDA3E11EFBC33955E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.79.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:06:c2:60:6b:36:ae:32:a9:ba:d6:a0:37:4c:1c:3e:53:54:
69:72:1e:a3:8d:75:1e:eb:98:bf:26:12:d8:24:7b:51:dd:e6:
cf:19:26:ba:4e:59:d2:0f:d3:52:60:7d:af:da:26:2e:6b:7f:
a7:60:1a:be:a7:29:71:31:a9:58:da:11:a2:00:3e:96:22:80:
28:af:ae:9e:4a:c4:72:7b:e7:57:db:e8:ef:0e:17:22:22:8b:
51:58:7c:d2:40:48:b2:20:d4:19:b1:8e:96:9e:fd:2b:b4:36:
cc:e2:02:72:2d:fe:8b:34:82:50:3f:05:63:23:9b:b0:a6:b8:
f2:ed:c6:a1:a0:3d:5f:30:58:14:09:1d:15:e1:1c:c8:1e:f4:
65:a2:eb:3c:7b:e7:86:28:e7:9b:11:2d:62:6c:fe:d3:5c:55:
ed:0c:a1:97:1b:66:28:bd:fe:f6:80:25:c4:f5:15:1c:75:99:
53:ab:f6:24:81:6f:75:b7:13:86:ff:e8:e8:ea:06:49:8e:41:
2d:90:e9:84:1b:a7:8b:fe:15:b5:24:6f:c0:ca:57:b5:db:ea:
f4:72:15:e9:41:75:1c:d2:cd:01:82:b8:89:a0:98:a8:7f:ff:
49:76:60:b3:e0:95:07:4f:c6:17:0d:46:77:e7:71:4d:04:03:
3f:eb:fa:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:28 2025 by rpki-client