Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD128E0DD6F11EFB0BB7470762E951A.roa
File: DCD128E0DD6F11EFB0BB7470762E951A.roa (raw, json)
Hash identifier: 15mp/K2bmarjZJ8PPmrdu6PByWX0RZAJG0THwzmlCPk=
Subject key identifier: 45:BB:A1:19:32:18:4F:B0:02:23:59:CB:29:AC:07:14:4D:7D:8C:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014CFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD128E0DD6F11EFB0BB7470762E951A.roa
Signing time: Tue 28 Jan 2025 12:03:19 +0000
ROA not before: Tue 28 Jan 2025 12:03:15 +0000
ROA not after: Wed 12 Feb 2025 12:03:15 +0000
asID: 5065
IP address blocks: 154.94.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85244 (0x14cfc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 28 12:03:15 2025 GMT
Not After : Feb 12 12:03:15 2025 GMT
Subject: CN=6798c787-05ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:76:f5:67:f4:87:66:97:0a:ff:1e:33:41:
84:f4:51:ab:38:a8:33:1b:1d:e1:82:7e:30:6c:8b:
bb:08:53:ff:57:f3:79:3c:03:45:d6:6a:4f:b0:af:
59:07:5f:3f:64:fa:05:5e:61:f7:af:a5:8a:6e:fb:
be:a9:f5:e3:bc:5d:2b:8d:55:a8:bd:02:56:de:b3:
14:8f:dd:84:d4:e3:69:e7:ac:28:33:1c:62:94:5f:
eb:45:46:52:bd:cf:2c:e9:14:97:89:f6:ea:77:ca:
81:08:f1:b9:72:de:20:df:88:09:a5:7c:77:48:a7:
5f:30:e9:4c:f0:82:04:ee:05:c2:14:ae:62:e7:07:
c0:ad:53:00:fa:54:8e:6d:5b:e2:42:54:ac:2b:c5:
ac:48:81:45:21:58:78:df:dc:62:cb:66:a8:ca:da:
48:ce:0b:fb:8d:28:1b:97:c0:72:6c:fb:ca:39:27:
27:fe:c5:c7:b1:e5:a9:a5:71:55:b7:0c:17:4b:10:
0a:3f:20:4f:97:e0:c2:b7:a0:6e:7a:a4:3e:e7:0f:
a7:d4:2e:79:89:6b:88:e2:cc:3c:ee:2a:b4:61:ca:
dc:20:f4:86:57:20:a5:c6:01:dc:1a:c3:a6:c3:57:
3c:93:ed:d7:9e:16:f5:e1:9d:d0:69:bf:2f:b7:4f:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BB:A1:19:32:18:4F:B0:02:23:59:CB:29:AC:07:14:4D:7D:8C:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD128E0DD6F11EFB0BB7470762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.52.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:3b:24:e8:1d:1f:a8:91:d0:fd:8f:1b:89:6f:fb:19:ef:04:
d6:ca:a9:bb:b6:c8:34:b9:16:b5:43:67:53:85:7e:92:10:06:
32:fe:f8:b9:66:94:0a:72:2c:c8:b8:96:50:05:1f:8c:2f:d2:
b9:d9:5b:6d:b4:b2:04:95:ac:2f:d8:2a:6f:d4:0d:9e:8d:2e:
36:d3:ec:dd:58:8a:fd:5a:f0:c1:7d:75:0f:5e:b0:ac:29:32:
2e:c8:b4:8c:a5:6a:a7:50:a4:71:f5:cc:cf:51:f6:96:5d:61:
4c:8c:5f:e5:90:f7:9f:36:6b:a4:78:ea:70:14:20:a3:7a:8f:
81:54:78:b5:ca:dc:e4:d7:d9:d5:a8:34:be:54:e2:2a:4f:66:
41:63:b2:ec:27:82:86:66:59:0e:7b:df:f4:69:3c:79:1f:5b:
de:2a:31:60:e9:8a:72:a9:9a:1a:aa:5d:a0:17:5f:0a:40:7f:
f6:85:04:3b:15:84:5e:47:27:e5:c4:c8:a2:19:99:fe:f2:7d:
61:24:cc:70:fd:c9:55:c7:fc:e0:ed:06:45:c7:fd:1d:87:72:
44:41:90:e7:59:10:93:e2:41:aa:2d:aa:bc:ce:6c:4b:fe:ae:
27:1e:34:c2:70:51:9d:dd:2e:21:0d:45:66:d7:8d:5a:56:3f:
9f:8f:a2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:19:24 2025 by rpki-client