Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAE8229CDFF811EFBD0EC881762E951A.roa
File: CAE8229CDFF811EFBD0EC881762E951A.roa (raw, json)
Hash identifier: ZpGNu5rSrdIBlDs9QEa9CMsbNZraehNq2KEuVORKh70=
Subject key identifier: 55:2A:9F:7A:9F:AA:52:58:73:C0:2D:7D:05:41:0C:7B:CD:38:F8:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E31
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAE8229CDFF811EFBD0EC881762E951A.roa
Signing time: Fri 31 Jan 2025 17:28:32 +0000
ROA not before: Fri 31 Jan 2025 17:28:28 +0000
ROA not after: Tue 11 Feb 2025 17:28:28 +0000
asID: 200373
IP address blocks: 154.94.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85553 (0x14e31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 17:28:28 2025 GMT
Not After : Feb 11 17:28:28 2025 GMT
Subject: CN=679d0840-54c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:b9:5a:09:6f:77:9b:d9:fc:9a:ec:b1:d4:
dc:e3:cf:42:ec:95:6a:49:92:15:7a:7e:30:6a:3d:
1b:1e:f8:7e:68:59:7e:94:0f:86:1e:24:c6:c0:c7:
c0:93:bf:53:b0:4c:97:86:b9:c4:37:3e:7a:61:f9:
9b:30:fc:b8:3d:37:b3:c0:35:df:94:79:6f:9a:91:
03:4d:06:a8:24:90:40:b5:cc:2e:45:8c:50:e9:3f:
5e:bd:1b:72:c1:d1:9a:89:96:e6:a1:97:5a:c2:9e:
cd:56:ff:97:aa:1c:68:0a:76:f3:bf:d5:78:0c:9f:
bc:01:c9:ef:36:bc:62:c1:c2:af:52:e9:d6:fa:88:
dc:e3:3f:4f:bc:55:00:87:c7:d7:e3:3e:8f:a3:ae:
07:b5:6d:d7:6c:c4:01:33:9a:c9:a2:60:48:20:18:
f8:9e:07:05:c2:73:99:0e:fc:7d:61:d8:54:ec:bc:
5c:72:60:d9:c3:58:45:6a:83:e0:e5:4c:53:49:1a:
8b:9e:ce:5e:64:ec:c3:12:dc:89:03:16:d8:f9:e1:
ff:19:2a:92:e4:82:ec:03:2a:92:1f:a4:23:d9:e0:
e9:15:56:fb:8b:e7:02:ec:2a:fa:3f:69:30:7b:bd:
cb:02:dc:e1:49:d0:26:a2:97:6a:cb:4f:5e:48:b0:
f4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2A:9F:7A:9F:AA:52:58:73:C0:2D:7D:05:41:0C:7B:CD:38:F8:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAE8229CDFF811EFBD0EC881762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.15.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:ae:73:63:a7:9e:53:08:66:d5:a7:38:89:b2:80:03:01:38:
3b:9e:ea:22:5e:45:b0:25:ac:d1:03:61:7e:4d:35:d1:14:b5:
9a:76:75:49:44:94:0e:af:86:46:d7:14:3f:ca:ac:e8:65:94:
16:b4:e9:a9:f0:2b:73:6c:a0:f8:e9:d6:9c:69:8d:71:2a:82:
83:e5:3e:20:18:b5:16:73:73:17:16:ab:15:54:b3:09:df:d8:
0a:0d:49:da:c1:c4:77:1e:1a:36:12:ea:4d:46:72:e7:e9:95:
95:f2:cf:f4:b1:af:40:d6:40:ee:ad:37:c4:03:11:98:06:b6:
6e:e3:2a:a8:0d:86:5f:8a:b2:d5:7f:bd:ab:08:86:ca:40:75:
b7:69:d1:e7:1b:b6:47:f6:ed:3c:f1:25:7b:c1:d2:3c:ef:9a:
f9:ef:91:b1:11:f5:8d:5f:e5:79:97:12:7e:1f:fb:0e:ac:99:
15:45:1c:15:66:67:11:8a:18:68:f4:94:aa:8b:75:fc:4c:9b:
ca:ba:4d:4c:e5:07:0e:03:24:5c:5a:60:1f:fa:49:e5:f7:a0:
02:25:78:06:37:2c:c5:0d:e0:f4:f0:ed:82:01:5a:d2:da:60:
9b:14:5a:7a:5b:ab:d5:a1:2e:de:e3:fe:b0:30:3f:ef:97:c7:
c9:14:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:44:22 2025 by rpki-client