Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA474B2CCABA11EFB8507CB8762E951A.roa
File: CA474B2CCABA11EFB8507CB8762E951A.roa (raw, json)
Hash identifier: G3W6J7IvqVL38ndR6Avc4eYtFaRf8CzWgvhC75owS8A=
Subject key identifier: 2E:8F:6F:15:86:3D:94:DA:37:19:C6:57:DE:54:3A:7F:CB:2E:9A:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA474B2CCABA11EFB8507CB8762E951A.roa
Signing time: Sat 04 Jan 2025 16:41:48 +0000
ROA not before: Sun 05 Jan 2025 16:41:44 +0000
ROA not after: Tue 04 Feb 2025 16:41:44 +0000
asID: 5065
IP address blocks: 154.95.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79069 (0x134dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 16:41:44 2025 GMT
Not After : Feb 4 16:41:44 2025 GMT
Subject: CN=677964cc-4f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:81:0c:35:2b:58:05:cd:39:78:05:41:c2:43:
dd:47:88:f3:44:c6:97:e8:ee:82:58:ff:80:1d:9c:
27:01:19:2b:bc:38:21:4c:ea:15:3f:a2:6c:8f:cf:
37:62:9d:c6:d6:3f:f1:4b:a7:41:2b:82:aa:05:7d:
3a:94:df:08:f3:ed:bb:d3:0a:d1:7f:75:dd:48:e7:
ae:0a:09:8c:23:19:1f:c6:f4:3b:b2:17:a1:7c:9f:
85:51:92:7d:30:6b:83:7e:a9:0b:c2:19:da:9d:fa:
d2:db:f3:8a:ab:31:b9:02:25:b5:3c:ac:1c:83:8c:
fd:1e:ca:dc:e0:7e:b1:66:88:2d:58:f4:c9:af:c8:
73:d2:98:e7:d6:0a:f3:ad:85:45:97:2a:99:4f:13:
f4:aa:1d:05:6b:fa:3f:b0:ea:bc:dc:47:cf:c4:61:
94:22:60:7c:e6:15:86:75:c4:1e:c0:2b:7a:99:f0:
ed:cc:27:3f:f0:11:47:3c:16:2d:af:23:2b:87:fc:
1d:37:f0:44:30:fb:ef:96:80:23:f9:2b:a8:41:fe:
2f:a7:87:37:e7:4d:15:c9:b0:9a:ac:64:d2:07:3c:
87:6e:d1:c1:87:9c:f2:1e:31:ff:21:80:e2:8c:32:
53:a9:09:4b:f5:e6:2c:2c:03:c5:98:36:35:bf:22:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8F:6F:15:86:3D:94:DA:37:19:C6:57:DE:54:3A:7F:CB:2E:9A:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA474B2CCABA11EFB8507CB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a2:17:b9:23:86:e5:ae:df:57:00:7d:e6:8b:90:bc:d5:82:
ad:63:61:73:c3:fe:61:05:87:4e:11:58:6b:40:37:26:a9:66:
0e:1b:40:be:a3:61:ec:e2:c6:53:7a:e9:2b:20:a9:f0:7d:61:
d3:ca:3f:c6:c5:9f:be:92:57:23:3d:95:8f:1c:40:f7:77:32:
1b:65:0d:81:68:09:73:b5:8f:19:49:8f:3e:55:a9:9a:40:37:
b2:d2:a4:5b:aa:59:b8:72:3f:5d:f2:29:d5:12:e7:0b:20:74:
2d:14:76:e4:d5:22:2c:2c:dd:4a:ae:73:02:49:57:41:d0:b6:
47:ef:e6:36:ee:bf:95:74:5d:19:ef:97:01:c0:4c:c8:b2:81:
7c:4d:a7:bb:5f:5d:74:e8:63:da:ba:78:f6:f3:35:0b:e0:2b:
d5:5c:f7:ca:b4:ba:c0:18:e0:c5:d4:31:9a:41:08:25:46:f9:
43:a8:ed:38:05:19:03:8c:c1:f4:d3:03:1c:c3:8d:05:43:10:
03:59:d2:f4:92:78:58:11:45:38:13:ba:7e:cf:47:31:9a:c6:
c7:ca:d2:15:2e:37:a7:d6:ac:c5:c3:d8:54:6d:d9:79:2b:0e:
0c:30:fd:6a:1b:af:72:a4:16:1d:9b:ab:0e:32:ae:e4:55:fd:
88:83:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:21:49 2025 by rpki-client