Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDEFE82EDCBE11EF9CD96CBF762E951A.roa
File: FDEFE82EDCBE11EF9CD96CBF762E951A.roa (raw, json)
Hash identifier: KcwBtmfuCnYpiYC6LF7DnOcdBuqN5656sWXjVV1xFks=
Subject key identifier: 03:08:12:3C:DB:AC:6B:56:69:91:65:B9:AF:69:B8:29:2F:BB:B9:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDEFE82EDCBE11EF9CD96CBF762E951A.roa
Signing time: Mon 27 Jan 2025 14:57:13 +0000
ROA not before: Mon 27 Jan 2025 14:57:10 +0000
ROA not after: Sun 09 Feb 2025 14:57:10 +0000
asID: 5065
IP address blocks: 154.86.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85031 (0x14c27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:57:10 2025 GMT
Not After : Feb 9 14:57:10 2025 GMT
Subject: CN=67979ec9-36f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:14:19:8e:54:2d:74:64:72:6b:e3:64:30:
3c:78:43:0f:d4:92:47:01:98:eb:2a:ac:06:5f:36:
42:87:52:f2:69:ff:b3:7f:60:ca:f9:b2:5a:42:7e:
da:8a:fa:5b:c8:8e:19:3d:dd:9f:49:f1:86:3c:dd:
9e:1b:16:56:75:45:7a:8c:51:53:a5:b1:a2:3b:09:
60:75:97:22:b5:1e:31:a3:95:71:c9:b5:7a:cc:65:
14:d6:2c:08:75:62:e1:f5:28:e3:be:06:e6:8a:db:
ec:92:8b:ad:ac:0f:87:40:e9:cf:f1:9b:d7:3b:1f:
85:19:17:3b:0f:00:e4:a8:88:f7:df:ab:bf:d6:23:
80:76:0f:cb:c4:7d:b1:23:47:f1:bf:71:77:e2:63:
eb:97:ac:b3:77:e2:45:c7:73:34:ef:fb:48:51:8d:
d1:f3:47:fb:c5:fa:35:48:7e:64:69:8f:b0:ef:34:
98:64:2a:40:43:9c:26:31:94:c6:9c:e6:17:8a:18:
2d:04:45:5f:b3:a9:6a:56:d6:a7:66:6d:be:84:0b:
2a:ba:b0:af:ec:5c:c4:2c:10:31:0d:e7:da:8c:22:
ee:3e:c7:b9:02:53:46:b1:e2:d9:7b:6c:3b:7d:e1:
33:a0:30:55:83:d5:22:16:7c:c8:47:7d:34:c2:1f:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:08:12:3C:DB:AC:6B:56:69:91:65:B9:AF:69:B8:29:2F:BB:B9:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDEFE82EDCBE11EF9CD96CBF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.99.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4a:a3:aa:ef:b9:6a:8d:bf:cc:83:d6:48:b0:ee:e1:63:52:
0b:6f:dc:53:8d:b4:1d:dc:3e:5a:d0:4b:b2:5d:92:b7:ab:25:
de:61:85:c4:33:ac:72:e4:08:cf:4b:b4:5d:fb:d7:3b:6d:d7:
ce:00:2c:54:10:b0:e4:d9:dc:95:34:59:85:34:4b:07:ed:a8:
41:66:91:29:72:de:39:0f:39:c2:3b:21:e2:12:63:5e:88:96:
99:75:d4:df:df:37:f2:b2:bb:5e:dc:e2:04:08:4c:81:54:9e:
80:8a:41:28:56:11:88:3f:86:de:c6:b4:54:ae:8f:dd:58:45:
69:9a:28:5d:dd:62:3a:1b:a8:ce:0b:19:fa:8b:55:b5:7e:3f:
7b:6f:14:be:c8:3a:dd:73:62:4b:24:9f:09:dc:4b:f7:e8:5e:
cc:a9:0a:fa:8f:64:cb:64:5c:75:bf:43:5a:18:07:1d:64:c0:
33:06:e8:8e:28:87:b5:d7:ef:b9:92:eb:09:8c:f1:16:18:e7:
2e:ec:f7:a5:f5:67:33:71:af:b1:7d:65:dc:c4:be:85:b7:37:
a8:c4:13:c3:d2:c1:7b:13:cd:c3:b1:70:3c:3d:82:d6:5e:f9:
ce:6c:1f:85:c2:5f:e9:a6:17:cc:8a:a5:12:fe:b5:ee:49:27:
65:e3:2c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:49 2025 by rpki-client