Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F79F050EDFE811EFBD09C095762E951A.roa
File: F79F050EDFE811EFBD09C095762E951A.roa (raw, json)
Hash identifier: kP3D3G6oSUeJFBhJtdhX9fUSMwu5VV6lR/PL3hwEKgI=
Subject key identifier: 30:9D:25:05:EE:6A:EA:BD:49:3D:BA:6E:FA:59:D0:65:13:65:E5:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F79F050EDFE811EFBD09C095762E951A.roa
Signing time: Fri 31 Jan 2025 15:35:15 +0000
ROA not before: Fri 31 Jan 2025 15:35:11 +0000
ROA not after: Wed 05 Feb 2025 15:35:11 +0000
asID: 39600
IP address blocks: 154.84.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85485 (0x14ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 15:35:11 2025 GMT
Not After : Feb 5 15:35:11 2025 GMT
Subject: CN=679cedb3-5fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:67:86:61:53:21:ac:a9:e1:89:fa:59:5f:
87:ad:01:de:24:95:38:6b:a4:d2:d8:2d:22:b6:79:
07:64:72:33:6e:e0:05:c3:6f:56:10:70:97:88:63:
f6:e6:91:72:97:ee:07:95:49:ec:d1:3a:d2:29:f4:
8c:d3:90:4f:e7:55:81:bd:8e:a0:e3:16:5f:a1:1c:
74:14:81:ab:04:31:05:e8:d1:41:e9:7a:a7:28:3f:
1c:15:23:c2:4f:7d:ac:6d:26:25:ea:eb:cf:e3:35:
84:af:48:89:86:17:f9:89:c7:14:cc:60:a0:f1:c9:
1b:04:d7:b0:25:b6:23:d4:fb:11:4a:4d:2d:20:dd:
0d:07:88:22:e2:e4:cd:66:54:fc:84:b9:5f:ce:20:
0d:41:18:d8:9a:26:ca:b4:b3:7b:0b:9d:7e:17:89:
d2:76:56:76:0e:a3:a0:33:cf:58:b7:b0:56:89:f5:
c6:f2:cb:c0:7d:0b:38:c8:3f:3c:e7:3f:30:ee:86:
1f:f6:13:ce:8c:76:7f:a1:7a:57:06:3b:ab:41:7b:
88:94:67:a4:a7:c5:c1:75:ce:30:52:c4:2f:97:19:
f4:72:64:0b:14:00:77:45:a4:18:73:54:a9:3b:b2:
f4:ae:46:e7:a6:be:ad:30:6f:0c:86:6c:f4:0b:10:
15:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9D:25:05:EE:6A:EA:BD:49:3D:BA:6E:FA:59:D0:65:13:65:E5:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F79F050EDFE811EFBD09C095762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.150.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b4:81:f6:ac:60:8f:7a:34:07:be:bc:fa:c5:eb:b4:fb:22:
ca:a5:6a:81:8f:6f:58:47:08:ba:71:6a:ff:8b:75:d0:f0:f1:
c6:d6:0c:96:82:15:fb:48:49:54:a2:ee:d4:09:d8:83:a9:6f:
29:77:61:f5:a8:53:b3:af:d8:54:95:b9:c2:7f:6b:e2:dc:a6:
fc:30:70:be:81:cd:f0:f0:e9:89:e8:53:2f:a0:26:ac:10:86:
fa:6a:e6:11:0d:71:37:4b:5c:83:07:e6:0d:02:d1:0b:0d:36:
8a:8a:42:32:f0:b7:bd:4c:40:ce:4f:a1:06:df:6d:6c:a9:c2:
97:22:a4:28:ee:44:d0:8b:55:76:cf:bb:f2:5b:ab:2f:64:26:
91:93:21:2d:b9:63:63:c2:0c:d5:5c:47:a5:45:a5:f5:b1:28:
3d:ff:a1:23:50:e3:3b:b8:b5:43:82:6d:72:01:9d:65:bb:18:
88:b0:07:fc:b9:eb:bf:c4:1e:6c:ba:9f:09:94:a0:24:d0:09:
15:4e:24:3e:60:4a:af:8a:ca:5f:5c:fa:2e:db:bc:93:02:9d:
e0:79:3a:61:f3:95:07:46:36:92:d1:08:81:8d:48:bf:06:90:
54:b7:e1:9d:db:da:88:4a:5f:3a:ea:50:84:8a:2e:eb:bd:93:
77:18:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:43:44 2025 by rpki-client