Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5AFF766C35F11EF8C936E7C762E951A.roa
File: B5AFF766C35F11EF8C936E7C762E951A.roa (raw, json)
Hash identifier: 3Tj6TqBt+HFXEv4iiW2rf8XtErAuxHuY2kWAi5Md5zA=
Subject key identifier: 79:00:F5:D8:AF:4F:4D:20:85:0F:65:DA:8C:12:86:ED:8C:E1:3E:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012636
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5AFF766C35F11EF8C936E7C762E951A.roa
Signing time: Thu 26 Dec 2024 08:02:11 +0000
ROA not before: Thu 26 Dec 2024 08:02:07 +0000
ROA not after: Tue 04 Mar 2025 08:02:07 +0000
asID: 138915
IP address blocks: 154.94.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75318 (0x12636)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:02:07 2024 GMT
Not After : Mar 4 08:02:07 2025 GMT
Subject: CN=676d0d83-5a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cf:20:31:8a:09:b8:da:4f:f1:ef:db:99:6f:
fa:80:2d:66:f4:6a:fb:0b:4f:fc:97:13:51:67:f2:
00:e2:0e:38:40:c5:6c:b8:f8:de:75:ca:2f:8f:04:
50:74:2b:23:36:ff:4f:3e:ab:ce:3e:e2:d3:82:9e:
66:74:39:a7:32:c9:9d:51:be:50:96:7f:8f:81:fe:
44:4f:ab:9b:ed:a4:3e:00:db:5e:5f:11:a1:8e:b6:
98:54:36:72:cc:97:b8:06:94:96:78:0d:4a:c0:a0:
35:9e:e5:09:31:4c:a6:90:fc:d7:6f:23:5d:78:6a:
b4:3e:3a:18:e7:49:1c:49:f9:71:85:23:02:ca:ff:
07:2d:48:a3:4d:03:79:02:72:70:74:89:ce:01:61:
11:32:75:6d:f5:34:48:d7:85:f1:3e:09:a1:d7:b7:
b4:9f:1d:bc:92:22:7a:02:d2:ae:c7:a1:bd:40:48:
64:ee:22:7d:b1:ea:3e:53:4c:05:85:3f:44:03:21:
bd:5b:d1:8f:dc:14:5e:11:5d:30:cc:f9:19:13:9d:
ec:ac:c5:1a:16:1c:f6:3f:42:51:94:0d:8e:89:37:
c8:e8:9a:8e:3f:6f:48:da:99:09:75:bc:9d:6b:0d:
6c:44:99:c6:a9:45:62:f7:62:52:64:4d:a0:d3:69:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:00:F5:D8:AF:4F:4D:20:85:0F:65:DA:8C:12:86:ED:8C:E1:3E:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5AFF766C35F11EF8C936E7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
96:e6:24:b5:4b:80:f5:b3:1e:5a:57:3a:de:c0:f3:88:31:32:
7f:12:74:bf:ae:07:25:c3:ed:52:a0:b5:80:ad:58:56:19:4d:
12:94:67:a2:d0:45:cf:0f:ae:f6:cf:38:e5:9f:83:3d:10:52:
b8:ef:e0:56:12:bf:31:20:93:08:50:f0:e4:e9:65:9e:12:5c:
ea:af:65:63:db:2f:3d:7c:93:60:10:66:58:a1:a8:e5:59:9d:
54:23:b3:e9:c2:40:0f:02:71:10:9a:59:83:1c:fd:06:0b:6c:
cd:20:a7:15:97:32:3a:72:dd:1a:a1:ab:c8:ba:50:cf:a4:32:
5b:8a:ed:2c:4a:9a:23:d9:1c:dc:7b:a9:ef:47:b7:64:e1:ec:
ac:c2:4b:b7:d2:8a:56:28:6e:2c:36:5a:64:bf:f3:63:c1:05:
c0:5b:94:da:f2:14:51:fa:cd:2a:f3:0d:32:78:7a:8f:11:e5:
1c:b3:cf:de:52:ff:dd:b8:84:f2:0e:a6:84:eb:8a:b1:e2:9a:
3d:a7:fd:76:74:ff:01:23:ba:76:18:b1:bf:d2:38:5e:10:3c:
65:13:ac:13:26:72:90:95:9a:18:ac:dd:8c:1b:20:dc:3f:f6:
86:6c:eb:0e:c5:72:87:84:cf:c0:8a:7c:4e:a0:69:02:37:65:
d3:5d:36:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:29:00 2025 by rpki-client