Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4508968CCC811EF9383614C762E951A.roa
File: B4508968CCC811EF9383614C762E951A.roa (raw, json)
Hash identifier: p7/2mossEoxtPZCShYZEUy4nEBhkXMV/qPKnK0Xjkks=
Subject key identifier: 2E:71:E9:37:21:97:93:E8:91:ED:7E:4F:5F:F8:B5:69:5D:7A:A8:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01364B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4508968CCC811EF9383614C762E951A.roa
Signing time: Tue 07 Jan 2025 07:26:26 +0000
ROA not before: Tue 07 Jan 2025 07:26:22 +0000
ROA not after: Thu 06 Feb 2025 07:26:22 +0000
asID: 200373
IP address blocks: 154.94.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79435 (0x1364b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 07:26:22 2025 GMT
Not After : Feb 6 07:26:22 2025 GMT
Subject: CN=677cd722-23ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:6a:cc:00:82:dc:a4:a8:b7:40:b2:07:0b:
c7:3a:7b:d3:0a:2d:e1:a4:cf:b7:f7:38:92:98:d4:
b7:df:de:b6:d4:44:24:95:17:25:96:c1:1f:a4:4c:
33:41:39:bb:5f:f0:a6:7e:3f:47:5e:69:75:bf:3f:
a6:42:4b:bc:54:ea:1f:0a:f0:af:4c:9f:37:cb:a1:
5b:6b:a6:f3:91:03:e5:57:a9:41:3c:02:6c:56:dc:
2e:63:ed:50:a8:2e:21:f4:8e:ec:fb:95:17:90:cd:
09:fc:f1:fa:c3:71:fd:24:1c:22:66:15:15:07:d7:
eb:10:74:c9:f6:2c:07:9b:d6:d1:e2:fb:01:94:83:
c2:ef:06:95:fe:ca:dd:87:89:f6:bf:af:ad:69:d7:
75:8f:80:4f:a8:7c:f6:46:74:34:da:fa:3b:8b:6d:
be:b7:af:1f:ba:4c:7e:a3:52:09:c3:98:c1:3d:e0:
74:8b:eb:e1:ea:ac:7e:21:1f:59:92:94:6a:21:64:
cd:af:58:ef:60:72:60:69:2d:a0:c5:76:d0:c0:f5:
af:e9:26:f3:7a:91:63:1e:91:13:7c:aa:ae:0d:cf:
05:9b:24:cb:b0:83:6d:00:e5:de:03:90:2c:e1:5b:
1f:fe:55:f3:76:34:84:8a:24:f3:5c:df:55:2f:85:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:71:E9:37:21:97:93:E8:91:ED:7E:4F:5F:F8:B5:69:5D:7A:A8:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4508968CCC811EF9383614C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.13.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d2:12:6c:49:13:10:26:12:6a:8b:86:29:8f:c8:3a:e2:21:
7d:ff:24:5b:0f:d6:8e:6d:74:32:44:91:4e:2d:e7:d1:28:9c:
79:43:ee:e0:d4:09:6b:9e:7f:5f:7a:17:16:ba:77:e4:a9:22:
37:56:ff:dc:85:87:69:0c:5d:5a:a0:8d:b4:86:e2:d9:19:07:
d4:eb:c9:9c:20:c5:a0:34:73:19:3c:6b:13:2d:b0:ad:a2:4e:
45:3c:6a:91:c6:63:3b:84:b1:12:56:2e:6e:6f:aa:8f:a3:99:
77:55:3b:a4:79:76:65:35:3d:82:4e:7f:21:e2:92:d4:21:8d:
59:36:6e:43:ba:4c:ec:43:cf:c9:70:e4:84:ec:bc:35:78:7d:
f5:86:cc:29:0e:fc:61:4d:9e:ea:31:ee:41:99:ac:40:79:0d:
51:60:b5:12:9f:a0:e3:9e:ba:f0:f9:a8:f1:07:89:6c:db:1f:
94:e4:0e:b2:e6:08:7a:48:74:9c:68:19:10:fe:b6:b8:66:d9:
b0:1b:0f:3f:e8:d1:4a:29:d6:1d:0c:9c:0d:ef:74:da:43:8c:
ef:95:6b:77:bd:49:fa:ee:2f:2d:4e:b2:4d:e6:f9:c8:0d:7a:
82:0f:b6:b9:c3:d5:60:d0:82:43:e7:1e:24:31:7b:4d:79:4c:
b6:1c:a3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:22 2025 by rpki-client