Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD05F6D0CF3011EF959CF9AA762E951A.roa
File: DD05F6D0CF3011EF959CF9AA762E951A.roa (raw, json)
Hash identifier: grkuDUkIG9blsB+Awv/X/B2sB5MMKwWRn8qvjHeqlbI=
Subject key identifier: D7:09:2B:72:46:45:78:E3:33:44:7C:04:AA:7C:40:BC:9F:58:24:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD05F6D0CF3011EF959CF9AA762E951A.roa
Signing time: Fri 10 Jan 2025 08:57:04 +0000
ROA not before: Fri 10 Jan 2025 08:57:01 +0000
ROA not after: Fri 07 Feb 2025 08:57:01 +0000
asID: 39600
IP address blocks: 154.94.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80327 (0x139c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 08:57:01 2025 GMT
Not After : Feb 7 08:57:01 2025 GMT
Subject: CN=6780e0e0-6ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:bb:7c:2f:ee:87:3a:6f:2c:f0:1f:fe:06:
e5:43:a2:9c:31:63:e9:b6:6d:e6:39:44:56:76:14:
0c:11:79:1f:68:dc:1c:3d:41:24:48:41:cc:7c:42:
30:77:19:5e:18:c6:1d:4a:ff:61:80:1b:0e:80:b5:
cb:5a:2e:1c:de:a1:96:b0:b6:92:ae:f0:3a:ca:6e:
f4:ef:12:4f:ed:e0:2e:3f:03:48:8e:aa:ae:15:a5:
7f:bb:b7:17:79:04:43:1b:c6:89:12:b8:bf:ce:82:
55:a8:a6:e7:41:9e:b2:96:79:35:4d:70:7f:1a:74:
02:30:86:5f:0e:aa:b3:bf:b4:3d:60:61:21:c1:71:
62:8a:d7:2d:31:3c:28:97:a0:c4:ab:67:60:b2:6a:
ca:d4:91:7b:ba:e5:3a:f7:e2:10:57:c7:b0:16:29:
5f:9e:99:af:35:e9:5b:c6:1b:df:4d:22:7c:bd:5b:
ea:ff:70:80:97:0b:03:bb:0c:6a:f4:dd:38:ae:86:
be:83:fb:a2:a8:fa:91:24:79:fd:a9:ec:5e:4b:e0:
6f:06:3d:27:a6:23:8d:81:0d:68:20:7f:62:0f:aa:
a6:6d:68:68:eb:99:58:ef:1a:88:bd:63:9d:f5:02:
20:cf:c5:97:bf:06:b5:55:2c:03:07:5a:fe:b6:4a:
b8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:09:2B:72:46:45:78:E3:33:44:7C:04:AA:7C:40:BC:9F:58:24:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD05F6D0CF3011EF959CF9AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.51.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e4:af:ac:c6:c2:07:56:f1:2e:45:4e:0a:04:06:da:ab:9c:
86:53:15:49:93:22:e9:10:4d:f5:3d:00:b5:6a:40:1a:d5:cf:
7d:5c:a4:0d:ce:42:f6:5f:06:35:38:ce:0f:94:85:ef:47:c1:
1b:ae:d9:a2:1a:11:fb:4f:76:c2:fb:7b:24:79:fe:26:9c:d1:
0d:ef:1c:83:5c:4b:f8:5f:ee:60:d2:4e:01:7d:28:8b:3a:ee:
8f:a0:af:bd:c2:eb:c4:bc:17:f1:ec:96:9b:1e:02:e5:a4:89:
13:0e:d5:d7:33:e7:db:f5:23:4c:28:b0:fe:25:68:0f:34:f0:
24:da:71:80:49:7a:90:b3:42:ce:f1:98:03:88:7f:22:10:33:
b6:bf:ed:2b:7f:c7:16:6e:5b:ef:97:92:80:49:36:3c:b1:38:
d3:9a:3e:e2:8f:16:f9:a5:ad:e1:89:2c:d4:c4:c2:52:a5:2c:
af:8d:d3:a4:54:c1:3a:33:93:1c:13:b9:b3:91:6d:2d:ad:60:
5c:13:0e:a8:39:58:ee:a9:6d:36:67:88:29:28:b5:09:f2:e3:
9c:b5:b2:af:62:54:ca:58:3e:76:63:c9:d2:4b:52:81:fe:f9:
39:26:13:d9:14:56:9a:22:af:b5:b5:0a:49:df:df:c2:29:6e:
76:ca:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:53 2025 by rpki-client