Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC58B90EDD6B11EF9E0F1E55762E951A.roa
File: DC58B90EDD6B11EF9E0F1E55762E951A.roa (raw, json)
Hash identifier: mqGzovKUrt8Q0js4AWLaZQ9+eSxOQ6d3gSgCXUJ/s4Q=
Subject key identifier: 01:D0:77:E0:FE:CA:AC:6A:FA:7C:D7:A0:DB:81:B1:C4:7D:A8:4A:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CE4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC58B90EDD6B11EF9E0F1E55762E951A.roa
Signing time: Tue 28 Jan 2025 11:34:40 +0000
ROA not before: Tue 28 Jan 2025 11:34:36 +0000
ROA not after: Wed 12 Feb 2025 11:34:36 +0000
asID: 5065
IP address blocks: 154.94.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85220 (0x14ce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 11:34:36 2025 GMT
Not After : Feb 12 11:34:36 2025 GMT
Subject: CN=6798c0d0-377e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:0b:6c:97:61:bd:28:c2:a5:da:ed:b7:b3:
b7:d9:b5:05:73:0b:7e:c3:3d:62:86:af:7c:07:f8:
e2:89:cc:2e:4a:74:d9:44:2f:39:5e:32:7b:c3:89:
1e:5b:cf:7f:b6:90:14:a5:f1:bf:dd:91:e0:9f:8c:
d5:97:b2:0b:68:db:80:59:97:ba:6a:1f:44:35:0d:
98:57:60:27:3d:ac:24:eb:c3:53:da:99:46:0a:25:
8f:47:c5:d5:9b:0f:b4:2b:8b:1f:5f:83:9c:a7:96:
d5:98:ad:da:f0:af:0d:06:2a:68:8c:cc:a7:c6:85:
17:ea:43:36:87:e1:c5:50:0f:4c:51:dd:f6:2e:98:
3c:27:e0:4c:ad:58:de:5c:ff:5e:95:55:c3:cc:f3:
8c:a8:d3:5d:36:45:bc:b9:35:df:fa:4e:92:da:7a:
6f:ff:05:b0:f9:0c:0c:e0:6a:e8:e4:77:67:c2:f5:
0c:a3:2e:48:28:5b:bd:bc:c1:e0:b1:fc:98:7f:94:
af:b9:c9:51:a4:92:2d:d0:48:12:dc:03:85:b0:1f:
a0:4c:b3:a5:0e:5f:0d:70:b0:b9:b6:08:32:ca:2c:
f5:c9:7e:c3:f9:c4:55:6d:13:30:a1:9e:aa:ed:57:
f0:d4:0f:02:3a:91:e4:b5:48:70:d4:77:ed:8a:5e:
21:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:77:E0:FE:CA:AC:6A:FA:7C:D7:A0:DB:81:B1:C4:7D:A8:4A:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC58B90EDD6B11EF9E0F1E55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:bf:da:6a:17:ad:ad:bc:cc:41:7a:a9:32:bf:5d:4b:4f:39:
e7:a5:1a:b0:fa:aa:9e:bd:05:92:06:f2:4a:13:1c:53:26:54:
23:b2:ea:5e:09:f7:cf:c8:47:68:75:76:37:6e:f5:20:b6:4d:
fb:a7:23:83:99:1e:a5:ee:34:c7:1a:eb:6a:2d:b7:f2:e9:78:
5f:67:d5:6d:75:82:72:39:e4:67:c3:52:aa:a0:76:8f:1e:08:
0a:45:b8:dd:66:87:ed:53:18:b8:f6:c3:5b:fc:96:f4:60:c1:
08:0b:52:f2:66:08:91:e1:3a:9f:9e:bc:eb:3d:85:f8:e6:a2:
85:bd:da:8c:76:c6:43:ba:d4:9d:e1:92:39:57:74:a5:6b:a8:
a8:98:17:2e:26:28:82:d4:25:eb:e6:fd:55:6d:a6:ec:a6:9b:
13:94:62:1e:00:b5:79:9e:ba:94:cf:e1:69:83:01:89:c6:55:
9e:dd:17:3f:4e:db:f4:fe:fe:a7:82:2b:00:0c:62:1e:a2:47:
a2:82:77:9c:24:6d:86:ef:06:ed:fa:ed:e7:51:e1:67:2c:87:
ef:2b:3a:d7:4a:de:64:de:e6:91:91:14:65:af:41:92:57:fc:
29:94:28:14:b0:25:ef:5c:f4:92:bf:69:d3:7f:81:8e:37:e1:
9c:95:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:14 2025 by rpki-client