Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAC2D4EC2A011EFBBE56843762E951A.roa
File: CEAC2D4EC2A011EFBBE56843762E951A.roa (raw, json)
Hash identifier: x1dnAe3ZfWR6g4lUYRqrY4fNrzS2XQAJ4FpR7yxoriw=
Subject key identifier: ED:6F:69:99:79:3B:47:56:B4:68:48:6B:84:22:B3:5E:55:E7:2E:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012530
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAC2D4EC2A011EFBBE56843762E951A.roa
Signing time: Wed 25 Dec 2024 09:15:39 +0000
ROA not before: Wed 25 Dec 2024 09:15:35 +0000
ROA not after: Tue 11 Feb 2025 09:15:35 +0000
asID: 138915
IP address blocks: 154.95.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75056 (0x12530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:15:35 2024 GMT
Not After : Feb 11 09:15:35 2025 GMT
Subject: CN=676bcd3b-039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:68:2a:1e:99:be:cb:4f:32:bb:10:37:7b:3c:
13:56:c6:32:2b:8c:f0:f9:1a:1d:f0:c0:86:ad:0c:
e0:06:2e:47:c6:7b:b0:42:2a:70:b6:91:da:3a:a5:
d7:fe:93:01:16:ce:60:cb:b1:12:19:f0:45:e6:9b:
04:e2:8a:c9:16:8d:21:d7:04:8b:5f:3c:09:92:ab:
08:1d:db:ef:16:3f:4a:7f:31:c1:62:ed:a3:33:5b:
40:b2:f7:cd:3b:85:0b:77:bb:96:01:42:82:83:c2:
74:3d:98:74:ef:aa:25:15:93:ce:2f:87:97:d3:37:
98:04:c8:99:42:e4:95:d8:96:16:14:37:e9:55:79:
3d:81:c0:d2:69:b3:38:5f:7e:bb:40:e4:bd:3c:c8:
be:0d:12:45:b8:14:c2:fd:0d:0a:14:43:1c:08:c8:
a7:94:50:ee:8b:a7:a5:30:5a:8f:80:39:26:6b:34:
1f:7c:18:20:8f:48:fd:f1:80:cf:d8:fb:7a:79:b4:
44:0e:eb:ab:12:17:77:11:d5:cd:e5:85:a9:c4:13:
5c:3e:b5:bb:b2:81:23:c0:70:6a:57:95:ba:50:cc:
52:2b:48:22:a2:b7:42:b9:ed:ae:a4:cc:b5:6a:20:
be:8b:6a:f4:69:cb:14:9c:2c:dc:c0:9a:6f:2e:61:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:69:99:79:3B:47:56:B4:68:48:6B:84:22:B3:5E:55:E7:2E:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEAC2D4EC2A011EFBBE56843762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.96.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:7c:eb:8a:13:a9:b1:01:dc:06:75:c6:66:83:e7:e5:7a:a6:
01:29:83:29:68:36:96:a5:8c:79:d0:ca:ee:5c:1a:dc:b8:a7:
25:3b:67:a3:27:a8:0f:d7:a4:65:48:25:d5:bd:5c:70:8f:3f:
d4:13:1f:ed:3a:01:d1:c3:5c:11:5a:b4:bc:98:84:8a:ad:38:
90:d5:ff:6e:59:ef:e1:bb:ed:a6:ae:eb:7c:79:7f:79:2e:a1:
16:60:63:25:13:87:df:56:66:ad:d1:34:f4:3f:f2:81:c9:fd:
bb:01:18:f7:f8:95:60:5d:26:b9:31:e4:4a:cd:5c:c8:1d:34:
07:ad:39:79:ee:29:02:d7:f5:a5:e6:f3:51:e0:62:10:4a:fd:
8d:ec:b3:3e:02:a0:21:78:cb:80:a9:21:23:d7:56:b3:ca:c2:
76:a6:e5:6b:4d:38:85:be:01:ff:ee:4a:35:91:4b:54:9c:bf:
a1:82:70:55:0e:6d:45:14:8c:19:53:97:cd:32:c8:ce:5e:0c:
d7:00:ba:85:ed:86:a0:02:e4:93:16:50:c7:ef:8d:35:ba:dd:
93:10:23:fa:32:04:f9:7c:89:95:7b:89:df:9e:48:13:99:6b:
5d:a8:41:87:86:ea:b7:c8:2e:a3:e3:9a:6f:ca:d3:c1:4c:40:
77:a2:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:39 2025 by rpki-client