Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6426E2ACF3111EFA8B61DB3762E951A.roa
File: F6426E2ACF3111EFA8B61DB3762E951A.roa (raw, json)
Hash identifier: KNgJJtPG8zIXaaXXHA9LrbxoTskMy9yDWzskekOG5i8=
Subject key identifier: 82:41:DA:54:39:AC:4B:6B:03:EF:21:7B:FC:A8:D2:1F:3F:DB:D7:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6426E2ACF3111EFA8B61DB3762E951A.roa
Signing time: Fri 10 Jan 2025 09:04:56 +0000
ROA not before: Fri 10 Jan 2025 09:04:53 +0000
ROA not after: Fri 07 Feb 2025 09:04:53 +0000
asID: 5065
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80335 (0x139cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 09:04:53 2025 GMT
Not After : Feb 7 09:04:53 2025 GMT
Subject: CN=6780e2b8-49a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b1:90:65:47:57:26:f9:68:8e:3f:a2:c6:4d:
75:ff:6e:1d:cc:c4:6c:23:5c:09:63:7f:e4:b3:27:
20:45:e8:67:dc:d7:5f:fd:9d:f4:bd:b2:67:28:bc:
1f:e6:0b:73:e0:ae:e1:aa:84:d3:fb:86:9a:58:b3:
18:57:bc:37:15:99:13:c5:d2:a1:e5:42:09:62:8f:
b2:c5:70:11:3b:1b:4f:b5:52:16:75:76:a6:47:43:
60:d5:d3:d0:a6:17:93:d5:4d:9b:c0:1b:d6:d0:55:
31:e7:5d:78:21:0d:c7:68:59:19:c1:e9:9e:8a:24:
f0:74:14:95:5d:8c:bb:82:83:b2:d1:cd:85:00:1d:
ac:fd:36:95:27:04:d0:b9:04:b7:0c:88:b3:b6:a8:
8d:55:10:2f:8b:ae:7e:ee:82:24:e7:78:28:6b:80:
a1:73:11:7f:f3:f8:3f:03:36:95:00:ec:cf:2c:26:
4e:ca:58:7a:00:b0:67:59:c2:ab:26:f6:94:40:3a:
f6:81:93:75:e0:7c:81:42:9e:ec:30:15:bb:63:e7:
ec:89:0e:41:ca:de:6d:3c:e3:d0:b7:95:f7:46:89:
3a:b6:06:a8:ea:3a:1b:02:ca:af:93:ba:81:b4:40:
69:aa:15:38:75:1f:43:8e:2d:30:ec:d1:c7:11:1b:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:41:DA:54:39:AC:4B:6B:03:EF:21:7B:FC:A8:D2:1F:3F:DB:D7:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6426E2ACF3111EFA8B61DB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:be:6d:98:16:1e:c9:99:1a:31:85:dd:a8:55:83:d5:8a:d1:
a4:30:54:88:9d:df:d6:e2:3b:25:9f:42:8e:70:ad:32:13:f7:
a1:cb:d9:fe:89:61:08:d1:3a:59:90:60:1c:da:c9:4c:3c:50:
04:0b:90:5e:81:ac:1f:99:8a:5a:2a:1c:87:a0:f9:af:94:11:
2a:f3:00:c9:c8:63:0c:03:4c:53:92:d0:69:bc:99:2d:97:05:
30:75:c4:5d:6e:44:3e:1f:a6:9d:2a:94:7c:7b:22:ae:91:6e:
3c:96:db:21:53:5b:9f:e9:8f:07:40:13:c4:49:f9:91:6b:f3:
d5:47:bf:e7:3b:01:f4:6a:fd:15:41:a9:c7:73:7a:52:74:86:
7c:20:a5:7e:a9:66:42:bf:61:d2:d6:c9:f6:88:ba:a5:e5:32:
0e:01:f1:05:a8:08:c4:4f:0b:a3:be:cf:aa:cd:90:bd:15:fd:
01:55:7a:fb:fa:0d:73:1e:28:bc:31:9d:59:8f:f5:b4:ea:44:
d8:ec:78:b6:f8:a9:8e:1a:b1:36:43:d9:46:af:8a:2a:45:bb:
65:a0:30:37:94:ea:8b:75:51:5d:58:63:c6:14:d7:73:69:56:
5f:e5:82:2f:45:9b:ef:ef:3a:4c:ba:06:a7:fc:8f:18:4e:55:
0d:0a:de:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:20 2025 by rpki-client