Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3565D90C35F11EF8F36487E762E951A.roa
File: E3565D90C35F11EF8F36487E762E951A.roa (raw, json)
Hash identifier: 9Tc/JijqURieh9uVsHKBS+2NEUxtj5v25L/jAfedXjE=
Subject key identifier: BD:99:99:6A:52:BA:B3:59:0C:A4:69:62:6C:1F:50:1A:22:14:57:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01263A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3565D90C35F11EF8F36487E762E951A.roa
Signing time: Thu 26 Dec 2024 08:03:28 +0000
ROA not before: Thu 26 Dec 2024 08:03:24 +0000
ROA not after: Tue 04 Mar 2025 08:03:24 +0000
asID: 138915
IP address blocks: 154.94.66.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75322 (0x1263a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:03:24 2024 GMT
Not After : Mar 4 08:03:24 2025 GMT
Subject: CN=676d0dcf-02bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:af:d7:47:49:b6:37:44:4e:5a:03:56:19:f0:
ca:93:2f:0c:47:0b:c0:5e:4a:96:c0:12:83:c5:d9:
5d:a5:02:96:68:2b:8e:f8:11:d7:f3:73:1d:cc:d5:
5e:70:7b:b9:12:da:4e:3e:b3:b5:0b:0e:52:1a:f0:
a3:82:cc:4d:ef:1a:d3:c7:e3:57:89:21:a1:c0:a6:
65:9e:1b:f6:57:4f:4e:4e:36:f2:36:f9:0c:4d:64:
e7:8e:82:c2:36:fb:c3:69:7d:4d:60:bd:59:52:36:
7c:b7:7f:d2:50:d9:3c:eb:c0:a3:66:15:41:26:4d:
ff:04:f3:a9:13:3c:ce:27:18:41:e2:96:f5:27:ff:
00:32:40:97:dd:88:b1:d4:33:b6:3e:81:51:0a:f7:
e1:1e:61:91:52:59:1b:c0:6a:88:fb:f4:92:7f:53:
02:a7:b2:47:7a:a8:2f:f8:5d:06:bf:f6:3d:29:59:
97:3c:d7:5c:10:53:2d:d4:17:45:ee:d7:f2:37:c3:
c9:51:75:e6:6d:34:81:15:ca:01:4c:56:09:6a:dd:
1c:b3:93:fb:c6:16:5c:bb:02:db:31:66:81:76:e8:
29:7a:f5:f2:2c:ff:34:45:14:08:7d:66:50:40:ee:
51:f9:eb:ce:70:93:8c:5c:ad:61:c7:a4:f4:59:53:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:99:99:6A:52:BA:B3:59:0C:A4:69:62:6C:1F:50:1A:22:14:57:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3565D90C35F11EF8F36487E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.66.0/23
Signature Algorithm: sha256WithRSAEncryption
85:aa:f9:cd:28:78:c7:67:27:73:4d:a5:17:81:31:db:4b:ad:
35:03:99:ba:d9:3e:c6:bf:78:82:8b:34:a5:cd:c5:9f:1f:b1:
b0:a1:dc:9d:dc:4c:68:2e:1a:36:02:c4:89:01:91:6e:d1:32:
1c:66:40:cb:c8:a5:30:54:3b:24:53:2e:eb:80:11:5e:da:ec:
af:a8:a4:d2:7b:87:7f:c0:c6:56:4b:06:af:65:e7:98:eb:87:
b3:f8:2f:45:c5:74:2a:72:6b:1b:22:a3:75:75:9a:09:e7:79:
2c:5b:ce:08:96:ef:31:4d:8d:ba:c0:ce:f4:97:6a:93:49:3d:
7e:ce:5f:97:6f:7d:f9:f6:f0:53:83:6a:75:63:06:a0:72:99:
0c:a9:b8:46:90:bd:61:80:25:c6:49:96:7a:dc:3c:b8:eb:93:
40:08:58:32:54:ff:65:dc:ae:9b:7e:d1:fa:59:46:39:b5:86:
b4:b4:c2:2e:cc:5f:6c:2e:59:4c:94:d7:c6:0e:36:bc:98:c1:
7a:7e:c4:fa:34:d9:45:47:f0:6a:5e:fe:0b:d0:1f:30:e7:5a:
d9:2a:78:e6:85:d4:9e:c5:75:89:6e:ee:a2:f0:82:28:4b:b3:
1b:42:a0:b8:8d:f1:36:f8:a5:6d:53:5a:82:05:80:b6:37:4b:
b4:4c:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:44:32 2025 by rpki-client