Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAB3FF48CF3211EF8B65B1B7762E951A.roa
File: CAB3FF48CF3211EF8B65B1B7762E951A.roa (raw, json)
Hash identifier: zNnAZp8gebGsk1jRmmR1vKwHVE+8m/hbdw08nm98vgU=
Subject key identifier: 12:29:2C:92:78:7A:B5:DF:AC:AC:22:E3:72:D3:53:A9:8D:AE:CE:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAB3FF48CF3211EF8B65B1B7762E951A.roa
Signing time: Fri 10 Jan 2025 09:10:53 +0000
ROA not before: Fri 10 Jan 2025 09:10:49 +0000
ROA not after: Fri 07 Feb 2025 09:10:49 +0000
asID: 21859
IP address blocks: 154.94.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80341 (0x139d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:10:49 2025 GMT
Not After : Feb 7 09:10:49 2025 GMT
Subject: CN=6780e41d-7ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:b6:b0:e5:b9:b2:a2:eb:3d:1b:70:70:e8:
d5:40:3d:ef:06:1c:bc:a5:1b:5a:47:85:bb:c8:6a:
e2:9b:32:46:f9:fd:79:9a:9b:30:46:97:8d:a7:82:
69:d6:12:bd:c9:b3:1a:be:36:a1:3a:e5:0f:26:d0:
d2:7a:59:cc:e0:c6:1a:29:52:79:ed:01:41:23:1a:
21:4e:46:c1:b6:95:7c:31:ec:48:1c:b9:e2:42:1b:
f4:72:7a:01:ba:e3:d0:ac:ef:89:a7:34:62:9b:94:
34:2e:08:89:61:01:76:e8:25:38:5f:44:a5:e3:39:
9c:db:32:1a:95:fc:14:00:f5:84:1d:9c:3e:5d:0e:
fe:e3:f0:1f:6f:b8:bf:dc:3d:e2:de:80:f9:e1:8f:
1a:62:3e:25:47:31:f4:9d:c2:cd:a3:9c:fb:23:ac:
48:a1:b5:5e:43:74:c5:f8:92:d4:f5:58:ef:6d:31:
66:33:05:0e:e8:8d:91:69:b8:b0:a7:70:b4:cd:be:
f1:39:2d:4f:b9:60:c2:3b:a5:aa:df:b4:7a:31:09:
53:ef:2c:7d:98:fe:44:3b:76:ac:e9:26:5a:bf:33:
0b:ad:b6:ba:61:77:e7:f9:80:d6:d2:90:b2:79:31:
6b:ba:84:ef:76:89:1d:04:53:d0:bb:a8:fc:a1:1a:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:29:2C:92:78:7A:B5:DF:AC:AC:22:E3:72:D3:53:A9:8D:AE:CE:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAB3FF48CF3211EF8B65B1B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e3:a2:89:8a:f9:e4:3f:3c:22:2b:c2:a0:0c:e4:d1:5b:05:
29:b8:fb:76:59:26:c7:02:bb:bf:b4:f9:9b:e3:34:49:f0:ab:
a7:55:98:7d:08:17:2a:b0:9a:ac:79:87:c0:5b:92:63:8c:e0:
1d:45:4a:49:3f:f7:f8:32:e3:d2:12:8c:b1:07:c0:ae:d7:6a:
b5:d2:22:d9:a8:e3:58:8d:03:c6:50:e1:db:ed:dd:b5:eb:c1:
a1:ae:97:00:79:ca:fb:65:ea:a5:ba:10:5b:41:88:1c:b2:d9:
43:9a:f5:6e:84:b2:e0:e2:d2:45:ed:98:fa:49:32:3a:d5:0e:
2c:56:0c:85:f2:63:d1:d8:09:25:52:c3:49:4d:b7:8d:05:f8:
e8:bc:a6:20:6a:63:ca:63:2a:76:7e:dd:07:2c:8a:03:dd:be:
ce:12:6b:5d:02:b4:69:82:5a:f4:84:a7:51:57:b1:fc:df:b2:
bb:0b:49:dd:bd:a6:28:8d:30:dd:17:69:c1:cb:6f:be:7d:bc:
1f:21:0c:9a:fd:84:7a:17:e7:bd:96:c8:4c:67:a8:86:c2:18:
f6:ed:be:2a:f2:bc:00:45:07:de:ac:42:63:71:f9:f8:75:d9:
a3:a2:58:69:f0:b8:d2:68:73:a1:4c:89:9b:16:f3:c7:93:79:
54:31:c4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:07:34 2025 by rpki-client