Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C03385BECF2F11EFB4215AA4762E951A.roa
File: C03385BECF2F11EFB4215AA4762E951A.roa (raw, json)
Hash identifier: rC/ULgEoAPlmhppLsgrDrZBBWPvkdO6YQrsL4A49xU0=
Subject key identifier: DD:2B:61:34:9A:DD:F3:5A:03:80:A4:17:A0:89:B8:FD:9A:1B:D0:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C03385BECF2F11EFB4215AA4762E951A.roa
Signing time: Fri 10 Jan 2025 08:49:07 +0000
ROA not before: Fri 10 Jan 2025 08:49:03 +0000
ROA not after: Fri 07 Feb 2025 08:49:03 +0000
asID: 5065
IP address blocks: 154.94.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80319 (0x139bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 08:49:03 2025 GMT
Not After : Feb 7 08:49:03 2025 GMT
Subject: CN=6780df03-a2b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:08:68:b4:f0:8f:fc:8d:89:07:81:5b:da:3a:
58:03:6e:db:1d:ce:8d:14:c2:d1:75:fe:87:9d:50:
3d:a6:7d:2f:52:83:ab:ed:37:e5:9e:91:fd:37:00:
a7:8c:88:40:a7:9d:60:34:c8:4d:1b:50:46:79:bb:
65:79:c3:6d:72:07:e7:bb:fe:06:66:84:7e:66:01:
86:71:3d:b8:16:58:60:ad:ba:e7:8e:9c:1b:50:2f:
5a:ff:57:8c:8e:4b:57:4a:27:60:db:9a:d3:b8:47:
da:1d:56:af:ec:5a:f4:81:df:2f:90:91:6e:7a:b9:
8d:44:98:af:76:28:3b:3e:0e:1f:cb:95:ba:bc:20:
e0:ac:17:09:7b:ef:79:28:24:de:ce:65:3a:93:90:
11:e5:65:e3:22:fb:d1:7e:72:39:6a:41:fe:eb:f2:
29:58:a1:2a:84:17:88:1d:cf:ca:26:7c:d2:f0:0e:
f3:49:79:9a:ed:57:81:24:20:ed:0d:c8:fb:d0:23:
23:77:3c:f6:ac:4d:47:fc:fc:37:19:fe:2c:b4:fd:
dd:4a:e3:96:5a:87:57:20:b9:79:8e:2c:55:18:c6:
c3:33:2f:8a:07:01:9d:eb:50:df:87:79:cd:80:ac:
35:2a:ce:5a:b4:e0:64:84:2b:63:25:b9:15:88:c6:
7b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:61:34:9A:DD:F3:5A:03:80:A4:17:A0:89:B8:FD:9A:1B:D0:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C03385BECF2F11EFB4215AA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.63.0/24
Signature Algorithm: sha256WithRSAEncryption
27:10:ec:16:e7:11:ad:43:2a:e1:03:1a:37:f8:82:23:5d:de:
25:c6:b8:a8:c8:45:65:ed:59:29:88:21:34:65:ba:bc:0b:30:
07:7a:ae:8f:72:6f:10:4a:d2:a0:da:39:ec:5c:71:6e:b9:3a:
58:7a:3c:9e:c6:4c:55:7e:fd:da:e8:b4:b4:cc:0c:fa:1f:3c:
3d:8c:be:23:e3:e8:d3:4f:ad:6e:9c:d6:1a:1b:e4:bd:61:9b:
2b:8b:4c:92:d7:41:a4:e9:51:a0:1d:fc:af:ac:01:90:21:3e:
2a:b5:bc:09:53:07:d3:b7:78:f6:04:54:cb:1b:3f:fa:ae:2b:
98:54:f2:f0:fc:16:2a:4e:26:50:6e:70:81:26:10:2c:ed:03:
88:73:8b:3f:50:27:a0:da:f8:04:ab:4c:db:4e:23:c5:e4:5b:
83:0e:8f:6b:55:6f:72:2c:b2:ea:16:38:21:e3:a8:42:3f:a1:
a9:c9:8b:9d:2b:3e:d3:bf:02:66:24:e6:33:26:d6:66:d7:0a:
b9:c8:34:d1:0b:3d:f8:b5:f7:66:ef:5e:2e:6a:17:fb:ec:e1:
48:6c:2f:63:d0:19:fe:a8:a2:05:ec:58:44:b4:3e:15:89:91:
be:a3:33:37:ab:93:54:b9:e4:33:09:37:46:db:9d:d0:80:7b:
66:07:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:44 2025 by rpki-client