Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C600F052C81411EFBE43275B762E951A.roa
File: C600F052C81411EFBE43275B762E951A.roa (raw, json)
Hash identifier: 3Cu+qk5ZAi+i6j1XZwZrdBQlGRFErDyVpKWH88VpZcU=
Subject key identifier: 63:4D:C2:EA:AB:5A:90:5A:4C:A1:64:FF:2B:19:6D:91:67:FC:7F:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013108
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C600F052C81411EFBE43275B762E951A.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:18 +0000
ROA not after: Tue 04 Feb 2025 07:48:18 +0000
asID: 42831
IP address blocks: 154.94.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78088 (0x13108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Feb 4 07:48:18 2025 GMT
Subject: CN=6774f346-0121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:ec:83:1c:22:6e:52:5b:c2:9c:02:4d:9d:
d8:1a:90:72:28:16:c0:be:d2:bc:74:7e:ee:14:7d:
b8:9e:e2:7b:27:23:49:df:9d:17:0f:9e:ee:c4:cb:
7c:b8:8a:56:dc:38:3b:22:b5:18:2d:25:00:8b:df:
de:d1:33:42:e1:16:b7:d7:39:dc:38:02:41:4f:55:
b2:e6:85:ff:13:35:02:93:69:1b:dd:45:48:8d:44:
ec:4e:4e:24:f6:9f:49:c0:7f:46:05:53:53:7d:47:
82:18:c0:f0:af:46:d1:b7:fc:51:d8:cd:64:c8:03:
f3:0b:8e:cf:f4:93:ec:44:8d:21:fe:2f:0c:c2:cb:
2b:e6:66:c8:31:6b:9e:f7:72:b4:56:d6:cd:51:88:
ba:bc:3f:ff:69:bb:64:0c:72:ee:04:00:15:11:03:
fe:03:60:29:39:4f:20:33:8b:9e:62:1f:9d:6b:eb:
ea:80:23:cf:d5:9f:f5:e7:0e:f8:b5:3d:e3:60:c4:
38:94:aa:1d:74:4e:d3:81:65:1d:29:91:8b:13:24:
f4:f4:79:e9:49:dc:af:1e:2d:77:61:4b:5a:76:dd:
d4:51:79:38:cf:de:06:fe:13:54:8e:3a:5a:ef:4e:
f8:e1:02:e5:de:95:fe:88:eb:57:0f:2a:38:38:e6:
13:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4D:C2:EA:AB:5A:90:5A:4C:A1:64:FF:2B:19:6D:91:67:FC:7F:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C600F052C81411EFBE43275B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:47:ee:b2:da:55:84:6f:07:0e:cf:5c:07:4e:27:20:9e:71:
da:9d:84:76:e2:22:67:7e:a6:b2:e0:24:42:de:68:b5:44:ae:
a6:4d:51:44:f6:7a:61:d0:23:00:48:67:1b:78:e6:3f:77:5b:
d2:fe:fd:a9:11:9f:7f:06:b0:38:e0:1c:63:75:6c:90:40:33:
5c:b2:4f:ab:24:51:e7:df:3d:70:65:9a:44:f1:2f:54:04:7a:
ef:21:ad:4f:54:81:d4:fc:fb:cd:c1:40:bb:ce:0f:1d:37:be:
39:63:bf:7e:60:b2:ac:10:8f:6e:cb:d2:30:98:cd:3a:a3:e5:
1e:98:af:01:3e:db:43:16:c1:c5:2b:00:57:94:10:6b:71:bb:
b4:4b:d0:a5:3d:09:09:41:c5:94:1b:21:63:fa:d4:df:0a:d2:
6a:9d:f7:b0:ea:f4:8c:56:3f:f4:2e:20:51:42:c2:ca:89:67:
05:5a:38:ca:fb:08:46:fc:a6:16:ce:44:6f:06:ca:bb:e5:df:
4b:e1:e5:a4:8d:9f:0c:2b:ec:b1:40:15:c9:f3:16:47:55:5e:
e4:6d:a3:8a:09:62:c7:a0:72:5c:d2:51:9c:87:6b:fd:3f:13:
39:22:2a:64:84:a2:7f:68:b5:2d:ef:4f:99:4b:35:bc:e6:cb:
7c:77:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:01 2025 by rpki-client