Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2865DB6CF3411EFB44F5A46762E951A.roa
File: F2865DB6CF3411EFB44F5A46762E951A.roa (raw, json)
Hash identifier: OY91qTZGtn77FPvDfvPyAjh0JgsX94Mcq/nO2Y2EyBM=
Subject key identifier: C4:1F:5C:76:F7:AA:F5:53:EB:4E:B1:A5:8C:0A:BC:37:B9:E5:FF:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2865DB6CF3411EFB44F5A46762E951A.roa
Signing time: Fri 10 Jan 2025 09:26:19 +0000
ROA not before: Fri 10 Jan 2025 09:26:15 +0000
ROA not after: Fri 07 Feb 2025 09:26:15 +0000
asID: 5065
IP address blocks: 154.94.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80357 (0x139e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:26:15 2025 GMT
Not After : Feb 7 09:26:15 2025 GMT
Subject: CN=6780e7bb-947f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:cd:3b:c7:40:a3:16:86:33:39:30:f3:08:
75:79:8f:df:33:72:70:e1:7f:b2:60:78:ee:d5:c5:
ce:f0:88:6e:69:d7:cd:82:a5:72:21:f8:42:05:fc:
73:b1:67:37:94:74:1b:e8:c6:34:f0:ce:36:6b:ff:
3e:d3:c8:ad:eb:b4:9b:32:d5:a5:95:be:ea:6f:4e:
b9:0b:0f:f0:49:40:16:11:ef:ba:cc:67:9a:8a:8f:
99:61:fa:7f:03:d8:7f:73:9a:5c:8f:16:d7:d7:a1:
33:a4:a3:2d:82:88:11:3c:0a:c9:32:23:02:af:5e:
28:a3:6d:15:64:d8:78:c9:1a:41:61:37:fd:03:78:
c3:ad:78:bb:8b:b8:27:80:f3:7f:53:66:66:a0:d3:
6c:e1:b3:62:87:dd:f5:fa:55:2a:49:8c:69:cb:99:
6d:8c:34:b8:a8:e0:9c:5f:fb:91:f0:74:5c:bd:6c:
fa:2a:8d:67:55:06:3b:4b:99:49:dc:af:0f:2b:a1:
70:fb:4e:03:23:d8:04:0d:49:8f:8b:60:4a:64:36:
51:d0:33:1f:fb:eb:79:6f:c4:78:d0:95:fc:06:7d:
2f:89:c2:d6:b5:2c:0f:fc:5e:03:30:aa:f6:f8:17:
39:ed:37:43:fe:a0:6e:ad:df:44:65:2a:20:ae:7b:
8a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:1F:5C:76:F7:AA:F5:53:EB:4E:B1:A5:8C:0A:BC:37:B9:E5:FF:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2865DB6CF3411EFB44F5A46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.36.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:83:69:81:87:a8:7a:93:cc:ba:4c:fa:6e:10:7d:90:45:f3:
e2:de:12:cf:8b:9f:fe:c2:50:0a:13:e0:f6:89:5f:96:10:6b:
1c:3c:d0:a5:11:42:bc:b4:c9:97:33:d4:0c:23:39:cb:a7:f7:
cf:c1:51:59:2d:0c:ac:2e:a6:b2:ec:b4:dd:35:f1:82:e2:9c:
85:b9:7d:43:fb:4a:1e:0c:13:c1:a9:0e:35:bb:86:01:01:71:
37:39:d5:b4:96:83:05:df:c4:5e:65:a4:d6:5f:54:01:87:61:
fb:aa:44:57:73:3b:86:36:8e:a8:4c:c6:7b:d4:36:5f:fa:6e:
cb:ea:e2:a4:74:fd:67:c9:92:e6:f3:62:24:08:76:4a:a2:b9:
bb:b7:f0:be:16:5b:ec:8e:72:d9:d7:15:7d:da:e3:54:20:74:
c7:3f:42:57:2b:2f:72:8f:f7:61:ac:c6:88:5c:08:d5:be:81:
d3:9d:02:39:80:8e:39:22:3a:6f:18:3b:24:75:38:2b:3c:fe:
55:35:72:f9:6e:c9:de:5d:21:04:4c:1c:f5:53:6d:c2:56:a1:
82:04:c5:27:ae:c7:d5:dd:5b:2d:9a:b5:eb:f8:e2:4c:f1:55:
0c:67:73:94:df:42:ae:cf:a2:f9:92:44:9b:30:a7:e1:6e:b4:
26:c2:1a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:44 2025 by rpki-client