Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF9C71D8DCBE11EF8E5759BB762E951A.roa
File: AF9C71D8DCBE11EF8E5759BB762E951A.roa (raw, json)
Hash identifier: ZZYKyoSUh+28V8lE4qLdjkyj7dSonadTgLGy8T2hcqo=
Subject key identifier: CA:5C:81:60:DC:FB:1F:9A:05:78:86:18:E3:E8:5B:F3:74:DE:38:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF9C71D8DCBE11EF8E5759BB762E951A.roa
Signing time: Mon 27 Jan 2025 14:55:02 +0000
ROA not before: Mon 27 Jan 2025 14:54:58 +0000
ROA not after: Sun 09 Feb 2025 14:54:58 +0000
asID: 5065
IP address blocks: 154.86.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85029 (0x14c25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:54:58 2025 GMT
Not After : Feb 9 14:54:58 2025 GMT
Subject: CN=67979e46-7655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:bc:3b:75:ea:b7:d0:26:1d:57:ef:1a:bc:
b4:92:bf:e2:28:5e:91:44:40:d3:6d:71:21:0a:ef:
8a:25:c6:a8:9c:82:6a:15:28:a4:74:d4:1b:dc:37:
35:38:9b:bc:22:6b:0e:d3:3d:49:c3:64:a6:04:44:
d8:6f:51:cf:d5:06:35:e6:22:01:a1:50:c1:51:02:
41:a7:9f:a1:07:b7:ed:e9:99:6a:67:a3:b7:4b:60:
3a:83:86:e6:a1:3e:53:fe:fb:7b:91:b0:9f:01:ea:
e7:0b:43:87:65:cd:f1:2f:cf:bc:c8:7b:18:40:89:
ba:42:fc:0f:ff:2a:90:d3:50:10:7a:16:94:d1:84:
d2:65:28:8e:9f:16:cf:79:c4:8e:3c:93:4d:85:14:
29:3a:99:fe:22:8b:f9:32:e9:43:b3:7c:f6:90:16:
ff:28:92:9f:8f:4c:ea:61:f0:76:44:ee:39:be:94:
84:a0:14:6a:1a:aa:43:44:dc:96:87:72:0d:ba:07:
88:41:6f:e5:ee:6c:c7:c4:6a:c5:d6:9e:92:30:84:
73:05:e0:65:dd:d7:28:e1:01:f7:90:2e:68:eb:63:
2b:bb:46:44:07:da:5b:d0:79:55:12:b4:6f:f4:4b:
27:9b:e1:9b:56:30:26:e1:0a:8b:50:72:eb:b8:d3:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5C:81:60:DC:FB:1F:9A:05:78:86:18:E3:E8:5B:F3:74:DE:38:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF9C71D8DCBE11EF8E5759BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8c:7d:44:b7:85:3e:ad:6b:cf:2d:0d:09:57:9e:cb:4a:f6:
33:16:8c:9e:83:10:36:37:de:68:24:b5:d4:37:0b:12:cb:f9:
fd:40:13:08:cd:68:90:a2:1b:dc:78:13:c0:30:b8:72:71:5b:
9b:fe:12:c2:bb:b2:4a:c0:80:a5:34:79:79:41:ec:1f:7e:96:
d0:b7:d9:b0:25:59:a1:b0:8a:58:d2:a6:96:3e:d7:ce:ba:d3:
94:d7:1b:21:3e:eb:bb:a4:98:ea:3b:e2:7f:81:21:48:ec:82:
6b:18:96:5b:b6:c2:cf:05:b8:24:b0:ba:c3:99:51:cc:b5:11:
1d:4c:b3:fc:a5:d0:fe:de:fb:20:19:f7:26:d2:02:4d:78:e8:
27:76:f5:c6:a6:0a:fd:d0:24:7f:fd:61:4d:e6:ad:9d:4e:65:
12:c1:ea:54:79:7d:9a:ea:92:34:10:f7:e3:ff:d8:ba:7c:9a:
2c:0c:fb:02:48:2b:72:a8:67:56:a1:a1:87:5d:e7:0b:61:58:
02:e7:a3:9c:14:60:f1:04:02:aa:48:de:a6:cf:57:b4:b0:de:
4b:b2:a6:6c:51:40:89:3c:74:2b:bf:03:ab:a3:58:2e:ab:03:
78:75:6c:fd:ec:be:1c:77:28:91:92:03:40:f5:07:f6:69:67:
d5:90:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:10:52 2025 by rpki-client