Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACFF5ACBED811EFB3AD6A4E762E951A.roa
File: AACFF5ACBED811EFB3AD6A4E762E951A.roa (raw, json)
Hash identifier: 78bBDeLnCNhKmKWfz4FGy3aWFevIEjXYpagcUhjjZZY=
Subject key identifier: 0E:92:8E:E9:51:72:8C:CF:70:87:3C:09:7C:A1:4E:F4:7E:7A:48:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011D02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACFF5ACBED811EFB3AD6A4E762E951A.roa
Signing time: Fri 20 Dec 2024 13:45:26 +0000
ROA not before: Fri 20 Dec 2024 13:45:22 +0000
ROA not after: Sun 02 Feb 2025 13:45:22 +0000
asID: 44559
IP address blocks: 154.209.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72962 (0x11d02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:45:22 2024 GMT
Not After : Feb 2 13:45:22 2025 GMT
Subject: CN=676574f6-a609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:26:ec:f2:d5:c4:80:74:76:1b:38:ac:a9:
bd:6a:77:5a:35:83:01:1c:e9:02:34:ff:c9:4f:a7:
a8:54:d1:53:47:33:fb:13:ac:fe:81:0f:8e:d3:7b:
16:49:fa:45:1c:12:f2:9a:e7:da:c4:7e:38:b2:f4:
13:70:2b:b5:65:a0:eb:74:4d:4c:b5:6d:86:63:ea:
ff:55:e2:54:16:9e:a1:c8:f2:20:c8:4b:21:e7:71:
37:fd:d9:48:f4:94:37:96:90:dc:8f:b7:6b:0b:76:
ce:1d:6b:5d:95:20:c6:7c:ae:fd:14:48:6e:4f:37:
42:53:0f:cd:36:61:30:78:86:98:f2:cf:fd:fe:57:
79:3d:7f:4a:f3:b9:f6:55:e4:7f:aa:17:c8:bd:d9:
a6:5e:ef:bc:4c:da:5e:06:f4:3a:8f:d4:73:03:e8:
33:b4:16:e4:a6:4a:23:1a:d2:0c:41:bd:a5:08:46:
9e:4d:1b:60:67:97:1f:81:65:32:a8:a7:c8:26:75:
40:23:c9:e8:fb:f4:f2:5c:11:10:e2:e0:b1:54:aa:
02:8f:13:05:d2:ee:9a:7f:60:b0:77:31:1d:f4:9b:
e6:cd:ee:a9:cc:c0:fe:de:b8:03:be:53:4f:71:42:
5f:b1:d3:eb:9a:e3:af:5d:bc:7b:82:32:6b:ef:5f:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:92:8E:E9:51:72:8C:CF:70:87:3C:09:7C:A1:4E:F4:7E:7A:48:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AACFF5ACBED811EFB3AD6A4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.95.0/24
Signature Algorithm: sha256WithRSAEncryption
54:d9:24:af:0a:3e:17:93:c5:6f:a4:e2:05:d5:c2:a8:63:61:
d1:3e:77:5f:70:7b:54:5c:54:11:5e:55:41:78:9c:75:4f:aa:
a0:20:5b:8e:7b:ee:6c:45:8b:21:b4:61:a1:9c:b0:64:99:a6:
3d:71:6e:ff:c8:95:36:0d:88:89:e4:e4:ab:c3:26:44:f7:3e:
cd:1b:fb:3e:46:f0:bf:56:48:9b:80:dc:96:6f:bc:73:97:9e:
66:63:d3:27:bb:fc:a2:a3:35:21:6d:9b:46:a6:76:17:ee:c9:
82:fe:a6:2c:61:fd:16:e1:fc:bf:83:46:d0:41:6d:aa:61:5c:
c6:5f:9c:2d:18:f3:76:61:dd:3f:fb:d1:ae:d3:1b:5e:c5:11:
d8:15:10:22:ca:6b:ae:52:11:a8:2f:5c:8c:6d:f0:9e:c6:02:
35:e4:eb:80:6b:ed:76:e0:c8:02:c2:b2:72:97:34:b7:91:b7:
5a:18:77:fc:26:24:c2:83:1c:a0:ad:09:82:8c:27:f7:40:dc:
74:05:6c:49:a7:a4:5a:aa:84:c6:be:7c:86:f8:fb:6e:84:d8:
13:54:7b:59:8d:55:f5:2c:ab:d3:b9:db:7c:de:4b:3c:55:b8:
c4:bf:6d:0a:cb:ea:e5:14:b4:66:24:11:9c:ef:9d:cf:c6:9e:
51:76:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:34:39 2025 by rpki-client