Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFC94330CAB911EF984AB5B3762E951A.roa
File: CFC94330CAB911EF984AB5B3762E951A.roa (raw, json)
Hash identifier: jF7VfGDborqqAe+Kc+VDUVMd92n3eD7G45jnfI6Y8G4=
Subject key identifier: D0:5B:FD:3F:6E:05:95:04:21:15:BF:81:AE:A7:2D:EF:42:0C:B3:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFC94330CAB911EF984AB5B3762E951A.roa
Signing time: Sat 04 Jan 2025 16:34:48 +0000
ROA not before: Sun 05 Jan 2025 16:34:44 +0000
ROA not after: Tue 04 Feb 2025 16:34:44 +0000
asID: 5065
IP address blocks: 154.81.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79061 (0x134d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 16:34:44 2025 GMT
Not After : Feb 4 16:34:44 2025 GMT
Subject: CN=67796327-568c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:42:21:db:ac:ca:47:91:69:a4:5c:f4:24:
86:f2:ca:19:a9:16:fc:7d:6f:b0:cd:6a:e8:4c:71:
a0:f4:22:cf:39:b7:93:e0:f2:25:e9:9d:ce:13:69:
4d:ba:9d:89:db:cc:44:30:52:86:c3:23:28:5d:d5:
0f:26:90:58:23:1c:59:65:13:ae:e5:81:38:1b:7f:
b7:5a:45:4c:a4:af:09:b4:e5:62:a7:6c:75:0c:bb:
e9:a3:88:77:b3:30:d9:7a:d4:e6:aa:55:64:3f:a6:
34:56:f8:28:21:40:c1:01:d1:07:a7:6a:06:92:24:
10:e5:7e:3c:e0:6f:e4:4f:f0:6d:aa:4a:91:e3:c4:
5c:a1:7c:b0:4a:23:7e:a0:a4:32:1d:e9:c7:bc:47:
63:87:69:3c:34:49:f6:ba:f4:94:f3:fd:66:32:8a:
1d:5f:3a:83:70:b9:14:a1:b5:b0:cf:5d:ca:2e:e7:
e9:dd:57:f0:5e:93:6d:4a:f0:cf:4e:98:b9:6a:e2:
56:30:59:5d:d3:f3:c8:18:30:73:e9:b3:e9:74:2d:
7f:94:fc:d5:8d:96:97:6e:ed:fa:47:e2:b5:88:f4:
0a:73:d3:02:ed:76:93:f0:ec:ea:85:24:0b:be:45:
00:ca:70:dc:44:55:e5:a8:f0:6e:8e:9c:8b:b3:67:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5B:FD:3F:6E:05:95:04:21:15:BF:81:AE:A7:2D:EF:42:0C:B3:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFC94330CAB911EF984AB5B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:ba:d9:98:b9:d1:bd:22:27:d6:4e:25:45:50:e3:f7:4d:18:
bc:f2:8a:5f:76:fe:1e:2f:59:8b:38:23:b3:48:e1:8e:d0:50:
36:1d:0c:01:43:6e:12:f9:2c:ff:61:ee:b7:1a:4d:bb:1b:bc:
c1:5b:00:ed:04:05:6f:50:7a:d8:8c:43:b3:22:bb:56:64:6c:
be:05:44:45:7a:99:b4:a1:da:19:2e:a0:2d:ce:5f:6d:49:1a:
59:09:6a:c3:2d:45:d2:c3:8c:9c:bb:74:a4:ad:bb:f2:5b:5d:
b7:15:10:9f:61:b9:bb:2b:b7:82:81:6e:fa:23:67:fb:12:82:
65:f2:b3:a1:a8:c4:8c:a4:12:a7:8d:c8:67:87:42:54:48:fe:
97:9d:e5:c8:02:21:b6:72:fb:d6:57:58:65:69:28:93:b8:f8:
90:bd:5a:9e:e4:c9:71:14:22:e3:d2:c2:3e:fc:78:d1:24:36:
89:ba:17:6c:84:90:43:fe:d4:2d:87:4d:3f:16:ce:ad:6a:02:
d5:b7:62:46:a4:a3:ea:7f:7c:03:9c:59:4f:f8:8c:7f:03:64:
c4:99:e8:1c:b4:36:32:75:42:e4:c8:58:6f:3f:6c:37:aa:48:
99:de:e6:e0:06:2b:90:99:d8:98:6b:44:f6:7f:20:c8:fd:29:
de:b9:14:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:24:00 2025 by rpki-client