Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D260C6BADA3911EFB8132ABC762E951A.roa
File: D260C6BADA3911EFB8132ABC762E951A.roa (raw, json)
Hash identifier: Os/OGVXAeKeU43wGVIsoyHLPm56wYijtoyOrK3CiVr8=
Subject key identifier: 4E:37:55:1D:E1:AB:DD:9F:A3:71:24:CD:6C:FA:5E:58:B9:EA:E4:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01453D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D260C6BADA3911EFB8132ABC762E951A.roa
Signing time: Fri 24 Jan 2025 09:58:55 +0000
ROA not before: Fri 24 Jan 2025 09:58:51 +0000
ROA not after: Tue 11 Mar 2025 09:58:51 +0000
asID: 138915
IP address blocks: 154.95.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83261 (0x1453d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:58:51 2025 GMT
Not After : Mar 11 09:58:51 2025 GMT
Subject: CN=6793645f-df95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:95:4d:4e:f0:99:87:77:9e:cf:ca:cc:6f:
bb:8d:96:1c:f5:12:85:ad:10:ac:ae:22:0e:88:e8:
2b:d9:05:de:86:c0:f0:50:95:e4:ff:ae:13:39:e0:
47:b0:47:f4:35:16:f4:e2:5e:49:60:75:6a:4f:6a:
25:ca:07:98:76:46:70:6f:57:b9:52:41:be:e9:79:
c9:4f:70:0b:ff:c0:5d:ef:9c:60:4a:9b:79:63:91:
56:75:56:a6:67:48:bc:58:f4:92:d5:96:a0:eb:5f:
b3:c9:bb:ef:f0:4b:99:e9:41:44:09:ba:90:93:95:
e4:cc:74:93:02:32:d7:56:7c:da:cf:e2:14:e0:bc:
7e:1c:05:28:39:3a:83:60:a3:bb:fe:fa:26:d8:22:
66:ef:5e:bf:27:e0:80:39:5a:9e:ee:bf:1c:64:b6:
39:e0:0d:67:75:13:3a:03:a8:d8:79:5f:dc:fa:d8:
be:5c:4a:38:ac:d2:40:ee:2b:84:76:a1:48:62:da:
25:1a:0a:6b:25:8e:2a:26:63:35:38:a5:32:ec:4a:
20:e9:5b:f2:0c:2c:01:be:98:47:36:9b:b5:ac:6d:
17:1a:76:8d:f5:b0:e0:7a:5b:a7:7d:fd:4e:0a:cb:
4a:b4:70:cf:24:3e:b6:01:02:f1:a4:94:d6:7f:a7:
fc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:37:55:1D:E1:AB:DD:9F:A3:71:24:CD:6C:FA:5E:58:B9:EA:E4:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D260C6BADA3911EFB8132ABC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.88.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:04:e9:a7:a5:b6:e3:95:99:9b:cb:26:7e:1f:2f:9b:eb:e1:
d8:58:77:e7:05:33:de:94:42:2d:45:f2:09:7d:a4:25:aa:fd:
f0:b0:eb:bf:35:f6:f0:33:f2:76:af:86:de:f8:43:61:3f:e3:
59:fe:af:66:bf:4d:02:4e:1f:35:27:6a:28:04:1b:30:09:86:
5c:60:31:b2:28:05:18:c0:5e:7b:7a:bc:b8:a6:a7:3e:65:27:
1f:13:c7:2e:38:7c:49:41:69:80:66:6d:51:ce:61:8b:cd:86:
c3:41:04:26:6b:15:cb:97:aa:cf:f2:9e:d5:6f:a5:41:ae:d0:
c8:fd:06:2e:ed:da:de:cf:ea:ea:b9:46:df:3f:0b:8e:30:c0:
a7:2e:5b:ef:92:6a:20:a1:f8:4b:9a:69:b8:96:7b:82:ab:b7:
24:20:6c:06:e7:9c:c2:22:0d:64:45:44:93:3b:17:64:20:8a:
9b:7c:26:33:50:88:6e:53:de:22:ff:07:08:3a:65:95:6b:b0:
8a:1b:ab:59:54:d6:29:2f:73:2e:9b:69:83:ac:4e:c3:98:f6:
6f:c4:9a:90:78:3b:4c:46:88:4d:a8:55:ef:f6:29:1f:f2:0d:
5c:e6:4d:83:20:0b:89:a0:56:18:f5:8e:ad:2b:c0:50:e3:d7:
47:7b:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:37 2025 by rpki-client