Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43172AADA3F11EFA186A465762E951A.roa
File: C43172AADA3F11EFA186A465762E951A.roa (raw, json)
Hash identifier: NZlxxl2JSCzML6i1tBzCZ5OV7ELvXslJPUAeyRHJtkQ=
Subject key identifier: EE:83:72:98:24:62:4B:F1:5B:F9:38:56:75:D0:1B:32:E4:0A:D5:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43172AADA3F11EFA186A465762E951A.roa
Signing time: Fri 24 Jan 2025 10:41:28 +0000
ROA not before: Fri 24 Jan 2025 10:41:24 +0000
ROA not after: Tue 11 Mar 2025 10:41:24 +0000
asID: 138915
IP address blocks: 154.95.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83370 (0x145aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:41:24 2025 GMT
Not After : Mar 11 10:41:24 2025 GMT
Subject: CN=67936e58-00fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1a:00:46:23:a0:c2:cb:ad:ce:d7:b9:49:c3:
1b:0f:c4:12:c1:2c:52:3d:d0:88:3f:f3:26:35:08:
38:11:9c:4a:c4:4c:fd:bf:a3:3e:23:86:6f:01:66:
10:7b:73:7c:89:8b:d4:4e:00:35:99:b0:19:00:b3:
8c:fe:bc:5e:d7:8a:01:66:c9:72:53:26:3f:62:2c:
26:24:03:59:f0:6e:7e:bc:02:22:06:c2:81:e1:1e:
19:d7:81:89:da:8b:97:bd:7a:3f:80:53:5d:8e:d3:
1f:c6:83:9e:a1:60:a7:4a:4c:5a:96:29:55:23:0b:
01:c2:5d:ed:56:3d:db:00:b0:f3:84:58:ba:47:04:
ac:5b:37:82:5c:57:68:45:ea:b7:4d:f5:3c:be:4e:
3f:65:b7:96:e8:64:04:0f:ac:59:27:70:27:c6:a8:
c3:54:54:29:39:3e:3f:51:c2:1e:64:8f:e1:89:65:
55:0f:25:f4:89:26:93:07:b7:79:21:47:f5:e8:81:
16:47:55:05:dc:8d:e4:48:82:a1:6e:f0:cc:4f:f6:
34:a4:7b:30:33:1d:20:5e:1d:a1:50:f1:2d:c1:f6:
bc:c8:d6:ee:96:86:01:8c:e8:16:ca:6e:df:8c:a1:
9b:0a:17:25:1f:33:b3:4c:46:7a:14:8d:89:03:68:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:83:72:98:24:62:4B:F1:5B:F9:38:56:75:D0:1B:32:E4:0A:D5:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C43172AADA3F11EFA186A465762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.78.0/24
Signature Algorithm: sha256WithRSAEncryption
91:05:bb:0a:d2:a0:f7:45:11:08:b4:f6:46:32:56:60:cd:36:
05:af:28:f4:95:be:cf:67:f2:48:e2:15:7b:02:a9:00:28:13:
a2:f4:5d:35:7c:1b:8e:a1:ad:4a:48:8e:69:d8:86:1d:02:5a:
54:dc:b0:3d:e1:7c:e8:45:81:67:09:3a:d2:1b:c8:9a:2e:06:
7f:06:63:be:e7:0e:e6:07:70:eb:51:68:48:71:8a:4e:e7:27:
dd:8b:c1:1d:17:54:e7:7e:db:a5:18:8f:5e:b9:92:cd:ec:23:
d3:30:c3:40:4f:c2:f3:88:fd:e9:30:4d:28:4d:ab:6a:d4:a6:
80:44:a2:f9:60:73:14:bc:70:b6:ec:b1:2a:b3:ca:ff:3f:1b:
76:f2:b4:4d:8b:4e:24:ef:4a:74:51:74:61:12:c7:b9:b9:dc:
b4:34:09:d0:7f:92:08:32:9d:56:08:ac:6b:e6:f8:6b:3d:22:
ec:90:7f:93:54:a3:c0:d8:48:3a:9e:37:b0:8d:0f:d4:52:16:
11:ea:ee:ec:7e:66:cc:31:dd:52:a9:83:7f:ec:74:7d:01:44:
04:35:8c:22:dc:95:5a:66:fa:11:5f:c4:ab:cf:e9:27:a6:1c:
70:b5:77:ce:08:d6:cb:4d:18:76:ef:72:8b:c3:4f:b0:1f:7a:
25:ed:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:46 2025 by rpki-client