Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01CA036D56811EFA97B4C66762E951A.roa
File: B01CA036D56811EFA97B4C66762E951A.roa (raw, json)
Hash identifier: 7mYqyzQd/4/fNcVF8nqQnJVZGr01/tMHejGlAM4iPVw=
Subject key identifier: 23:B1:15:4D:C3:2F:CD:89:6D:BC:AC:70:88:26:50:03:54:1F:47:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01CA036D56811EFA97B4C66762E951A.roa
Signing time: Sat 18 Jan 2025 06:51:48 +0000
ROA not before: Sat 18 Jan 2025 06:51:44 +0000
ROA not after: Sat 22 Feb 2025 06:51:44 +0000
asID: 8796
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81282 (0x13d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 06:51:44 2025 GMT
Not After : Feb 22 06:51:44 2025 GMT
Subject: CN=678b4f84-9f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:94:f6:e2:43:63:86:74:4f:70:cf:cc:5f:
1e:cf:68:84:35:ad:f0:75:4c:97:bd:25:01:f5:b3:
32:67:1c:3a:4f:58:78:6b:55:78:66:03:48:fd:a1:
1c:a3:a5:72:b0:f1:90:e3:f0:42:76:6b:a4:2f:cd:
b7:58:9f:a3:95:b3:76:1f:0b:7b:9a:ea:ec:2a:f7:
14:03:82:e1:6f:ef:97:54:16:18:41:21:ae:22:91:
c6:d9:cc:85:fd:b7:24:fd:da:7a:fa:bf:6a:04:90:
8f:e9:e1:2d:96:25:bd:7f:06:d7:36:23:7b:a6:40:
8a:d4:00:60:68:a8:3f:62:14:fd:e5:4e:72:2b:2e:
3d:cd:53:bb:35:94:2f:eb:9a:35:3a:33:44:b8:a8:
a8:3d:9a:aa:bc:df:54:54:44:80:fe:6d:a1:1a:50:
d4:c2:18:15:c6:57:f8:32:95:46:51:9c:2b:4e:38:
3e:05:89:d0:3f:0a:75:8e:fc:ed:77:3b:d7:23:ba:
a6:96:d0:af:6b:5b:e8:02:94:a2:2a:cb:1b:08:cf:
fe:19:b4:85:72:e0:e6:7e:40:eb:15:89:ab:27:ec:
60:58:3e:71:d5:93:7e:ff:62:28:dd:71:f9:05:fb:
c6:50:4a:69:ba:13:0a:03:61:fd:07:54:d3:55:f9:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:15:4D:C3:2F:CD:89:6D:BC:AC:70:88:26:50:03:54:1F:47:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B01CA036D56811EFA97B4C66762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:12:f0:ed:b8:db:97:08:9e:66:1c:0d:0a:37:54:a4:dd:3c:
45:fe:ff:76:c9:d8:04:e4:3a:ec:29:dc:3f:bd:cd:43:c3:2c:
33:d1:22:d9:21:b1:79:e3:12:2e:8a:c4:b9:c2:ce:dc:c2:57:
09:bf:f1:a6:34:f6:df:cd:64:91:a6:ab:9b:ee:96:af:c1:e0:
c1:92:1b:b8:42:5a:f2:0c:af:bc:25:73:d8:83:e3:59:0d:13:
2b:0f:9f:25:f5:08:51:83:92:eb:6e:ec:f0:55:c6:97:46:1a:
e8:7a:b7:bb:f9:40:07:d8:ca:2c:91:f8:7f:de:1a:3e:f8:f6:
f8:0a:f9:ac:55:90:87:3b:8a:e5:34:79:5c:5c:71:2e:73:11:
f1:7b:40:11:8b:61:3b:12:af:e0:27:fc:e6:12:ba:cb:0f:0b:
f2:c9:13:d3:64:b6:5d:4c:64:a8:31:10:89:2e:18:36:0c:b2:
d7:c0:b8:a8:ee:a7:c6:24:f5:9d:7a:53:2c:fb:b1:21:1d:f7:
db:56:51:2a:cd:36:f4:79:cd:8d:b3:18:20:2e:7f:ea:6b:cf:
a4:d0:9d:2e:e5:75:a7:51:a4:12:1e:0f:9f:c2:11:48:6c:a6:
30:2b:87:a0:5b:2b:16:ff:3d:93:52:69:48:dd:97:88:c3:f3:
38:67:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:37:11 2025 by rpki-client