Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA9F13F8CF3411EF8CACF345762E951A.roa
File: AA9F13F8CF3411EF8CACF345762E951A.roa (raw, json)
Hash identifier: tPv6BfSoK7+S9r3I9A/byK9jbeqlmFhDb3Pxn2Ybx6Q=
Subject key identifier: 9A:5F:9D:71:9B:49:74:70:8B:80:A5:CC:B1:27:CF:B6:00:6D:46:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA9F13F8CF3411EF8CACF345762E951A.roa
Signing time: Fri 10 Jan 2025 09:24:18 +0000
ROA not before: Fri 10 Jan 2025 09:24:14 +0000
ROA not after: Fri 07 Feb 2025 09:24:14 +0000
asID: 5065
IP address blocks: 154.94.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80355 (0x139e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:24:14 2025 GMT
Not After : Feb 7 09:24:14 2025 GMT
Subject: CN=6780e742-1f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:35:87:1c:1e:43:30:e4:1a:c8:dc:fc:33:
f3:52:90:97:af:d3:71:0d:d3:56:e8:ad:17:f8:59:
97:42:6c:83:89:d7:62:c7:37:6a:79:e9:00:45:cc:
d8:35:e6:3e:83:d2:f4:38:12:66:85:a8:31:14:e9:
c5:e0:ee:94:b2:43:67:ab:36:e1:47:26:ff:71:83:
bf:d4:58:a0:60:2c:33:6d:5c:c8:ac:b9:94:5b:98:
1f:a7:e9:79:6d:77:98:6f:ed:37:c5:95:dc:ec:95:
45:52:3f:a5:35:9d:cf:2b:01:93:80:1f:fd:03:57:
6c:02:4d:99:22:3c:e7:1d:6f:c9:38:e6:d2:5c:f1:
f7:1b:5c:4d:ab:25:9d:e4:09:69:0f:31:b0:f6:de:
d4:48:00:a7:25:62:6f:a2:37:42:60:68:35:89:58:
b6:7c:95:25:12:a7:e4:eb:0d:fa:61:6d:87:96:63:
b7:10:c2:9d:6e:8b:a4:c2:7a:6e:a6:47:be:aa:07:
c6:23:1b:bb:a1:3e:f9:42:93:cf:3b:75:ff:ed:ec:
1f:03:aa:00:03:ed:c1:9f:93:c5:15:db:63:a1:98:
08:95:e7:2f:09:22:d1:21:4e:c1:75:27:b0:3a:41:
d3:0d:4b:d0:c2:52:15:76:64:4e:ce:0c:a5:da:59:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5F:9D:71:9B:49:74:70:8B:80:A5:CC:B1:27:CF:B6:00:6D:46:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA9F13F8CF3411EF8CACF345762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:8e:8b:2b:bb:8a:7b:35:50:32:e0:f2:4d:1e:92:76:7a:00:
45:35:3a:73:24:1c:53:92:46:c3:f0:2b:e2:62:83:38:56:f9:
f0:36:22:c2:08:ec:77:84:be:30:dd:e1:97:6a:fc:07:d4:14:
c2:55:cf:e4:06:19:92:f9:2e:62:c6:0f:c8:51:05:5a:fa:3c:
32:84:39:1e:c0:3c:0d:c7:cc:8d:a6:d1:db:da:6d:db:a7:eb:
86:42:b2:9c:e5:45:69:c0:03:33:47:13:61:47:b8:3d:69:d5:
c6:68:54:6a:39:d7:a3:d7:74:a9:67:ba:5b:21:92:7f:58:e2:
2b:15:f4:da:12:8d:79:db:c7:8d:12:5a:17:97:28:9a:26:8b:
35:a4:02:f1:14:4f:15:71:af:8e:ea:03:bb:58:6d:ca:4e:4c:
7c:4f:f1:66:18:3a:70:8d:38:d4:59:8c:35:71:91:1a:55:21:
74:79:80:c1:a9:b5:7d:27:0d:75:fb:7a:d9:56:af:4d:7b:88:
52:5f:33:0d:90:9b:b9:88:55:99:7e:65:fb:5c:70:9a:c3:dc:
a4:17:eb:46:50:13:b4:9d:f8:d6:6b:09:56:6a:e1:96:63:18:
08:f3:a1:0e:12:4e:2e:ce:ec:35:9e:e0:50:90:80:37:9f:7a:
ab:38:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:25 2025 by rpki-client