Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F128067EC36111EF97D2948B762E951A.roa
File: F128067EC36111EF97D2948B762E951A.roa (raw, json)
Hash identifier: tFvLTxNuowu7fH1a1T5C+x7MoFSOoZ2lEI4fGf6841w=
Subject key identifier: E3:44:BB:89:CB:EA:2A:38:8D:22:68:8E:66:DA:2D:13:5D:6D:3C:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012666
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F128067EC36111EF97D2948B762E951A.roa
Signing time: Thu 26 Dec 2024 08:18:10 +0000
ROA not before: Thu 26 Dec 2024 08:18:06 +0000
ROA not after: Tue 04 Mar 2025 08:18:06 +0000
asID: 63139
IP address blocks: 154.94.70.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75366 (0x12666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:18:06 2024 GMT
Not After : Mar 4 08:18:06 2025 GMT
Subject: CN=676d1142-bf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:79:5f:6d:4e:31:85:f6:d6:b8:2e:ef:cd:ad:
18:c1:24:40:95:69:2e:8e:ef:40:44:30:1a:c5:d1:
55:e0:b1:2e:61:d1:c3:a7:d7:ee:52:2a:d4:52:10:
66:49:f2:d9:fe:1d:3d:23:80:9e:25:40:2a:11:c0:
34:e0:3c:b5:bd:07:f1:6f:c7:45:80:ca:c5:d4:90:
d3:5d:01:7e:0a:68:cc:0b:2f:28:b0:78:26:6f:1e:
7c:1d:4c:df:29:a8:06:98:e9:d8:55:f6:3d:db:87:
2a:1b:60:1a:78:66:10:21:ee:17:d3:5d:9a:d1:a7:
23:58:64:e3:b8:7c:0a:74:8d:31:fa:d2:16:a6:68:
30:8d:ce:1a:3d:fa:6e:d0:25:9d:4a:54:eb:4c:d7:
b9:20:3c:fe:d5:c6:00:54:65:ef:c6:06:e4:a0:ef:
7b:58:b5:f1:ee:d2:3c:11:d7:9d:33:c8:14:aa:d9:
e3:53:b2:41:d6:e7:48:55:dc:ac:a0:ba:92:cc:03:
bb:1d:37:cc:61:68:3f:52:fa:e8:15:3d:f8:21:7e:
8e:83:3a:a3:ae:ed:b3:c6:58:bb:04:d4:9d:d1:2c:
4f:a9:8b:92:09:a1:fc:2c:a8:d6:f5:72:25:5d:2c:
88:21:14:3a:96:55:66:f8:42:0a:34:32:97:ad:a6:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:44:BB:89:CB:EA:2A:38:8D:22:68:8E:66:DA:2D:13:5D:6D:3C:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F128067EC36111EF97D2948B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.70.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:8b:de:e7:c3:45:b1:6f:2d:f8:c1:0d:3e:4b:61:fc:93:2e:
95:92:62:36:8c:c5:fb:3b:85:e7:55:66:98:bf:bd:19:11:4c:
a7:4c:29:41:52:84:a0:b6:d2:eb:d0:ed:5f:94:67:a5:91:e9:
45:70:6b:c4:87:b1:27:7b:80:8a:2c:d2:fc:a9:d6:05:0b:c0:
36:f6:72:f3:67:4d:bb:38:09:5f:bc:27:59:38:08:4d:66:77:
1d:0a:0b:8d:12:ad:2e:9c:9f:6a:cc:20:7f:e0:df:6e:59:9f:
f2:1c:4e:c4:a5:45:40:d9:8a:c3:41:39:e3:58:33:71:b0:a1:
91:90:c1:03:3d:2c:6b:b4:3a:2d:a3:36:c5:92:14:ca:7f:5e:
fd:a3:b3:38:f2:ef:52:7d:61:e0:e2:cc:03:61:fb:84:40:dd:
0c:44:60:50:e2:1c:50:38:5f:e6:fe:d5:c6:08:53:cf:d6:0f:
fe:13:20:83:9c:77:a8:a9:00:6e:91:ac:1d:55:a1:05:4b:36:
ba:e8:d3:8d:d6:be:d1:9f:3d:92:c2:55:11:a7:87:6f:52:8e:
75:66:c3:e8:3f:9e:ea:51:55:6f:5a:63:9e:95:1c:81:7f:f0:
16:a6:9c:2e:bb:19:0d:78:4f:18:f7:62:dd:eb:98:5b:ab:92:
44:08:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:04 2025 by rpki-client