Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F7D22ADC0311EF9224C74B762E951A.roa
File: 08F7D22ADC0311EF9224C74B762E951A.roa (raw, json)
Hash identifier: oN5dzuQ7hzw4cgxm/PVdX7TkD0/MhVsqk2xkRmf+VuA=
Subject key identifier: 71:B8:CC:ED:7B:0E:D1:FF:29:B9:E4:30:2B:8B:2C:8A:51:95:01:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AEC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F7D22ADC0311EF9224C74B762E951A.roa
Signing time: Sun 26 Jan 2025 16:31:47 +0000
ROA not before: Sun 26 Jan 2025 16:31:43 +0000
ROA not after: Tue 01 Apr 2025 16:31:43 +0000
asID: 63139
IP address blocks: 154.94.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84716 (0x14aec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:31:43 2025 GMT
Not After : Apr 1 16:31:43 2025 GMT
Subject: CN=67966372-c7bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:c4:30:4b:03:cc:50:32:26:6f:da:d3:b2:
3f:6d:df:26:54:5b:eb:c4:96:6f:df:cb:0f:f1:2e:
bb:cf:56:aa:7a:1e:a2:56:9d:4e:cc:86:5e:74:be:
1a:56:bb:c2:80:39:a6:e0:57:b8:31:c9:70:30:13:
99:71:e4:b1:e3:d1:a9:e6:a1:dc:db:8c:5c:46:62:
31:60:61:fc:03:56:bf:fb:55:60:da:01:91:b7:87:
5a:af:9c:40:15:be:85:0d:1e:6b:10:d6:d3:23:53:
83:ca:f4:b1:5a:04:67:77:f3:ca:4c:e3:c4:6e:84:
d1:f7:26:dd:50:23:a5:f5:88:72:0e:7b:e0:08:b3:
b2:c5:d6:19:71:77:bc:29:96:0e:5a:ed:fd:a4:4d:
02:18:74:7c:10:3d:21:67:93:5e:26:8c:43:8e:43:
cf:14:c1:2f:cb:58:a5:31:a6:38:16:4a:36:53:e8:
2a:43:b1:cd:07:71:8c:c4:9d:30:dc:48:07:2c:69:
4a:71:e6:87:0f:c4:5c:d6:65:01:46:51:f3:98:9e:
52:66:d3:2a:32:77:9f:29:7c:37:3c:62:01:84:bd:
87:c8:ce:ba:33:41:c2:91:54:72:55:af:8d:f7:df:
23:09:75:22:6a:3f:c7:cc:59:6a:2d:65:1a:24:55:
d2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B8:CC:ED:7B:0E:D1:FF:29:B9:E4:30:2B:8B:2C:8A:51:95:01:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08F7D22ADC0311EF9224C74B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.78.0/24
Signature Algorithm: sha256WithRSAEncryption
95:90:e6:5a:ab:b6:f1:91:d9:2f:f9:99:91:7e:45:e3:45:cc:
ba:b2:ab:66:de:55:c4:36:3e:a0:e6:0a:57:dd:ab:08:a6:44:
15:af:0f:da:d9:bd:ea:4d:91:87:54:f5:6b:40:e0:ed:a3:0f:
f3:11:4d:68:b5:5a:c1:a0:86:8e:6e:46:7f:10:b8:26:4f:64:
d8:97:26:33:50:f7:8c:2e:42:78:99:c3:49:e1:cb:77:71:c1:
50:f9:66:f3:14:49:81:96:af:d2:46:ec:d2:3a:1e:9a:da:53:
14:a7:f6:ad:b5:52:73:32:30:02:37:43:d8:70:cc:1f:d0:74:
b4:80:1e:4f:19:3c:09:f5:7f:ba:a5:28:cd:c5:6b:a8:69:8e:
1a:09:4b:71:8b:a2:5d:ff:83:6b:a4:96:06:29:82:e3:7b:41:
0c:2d:84:ac:f0:41:81:7d:7d:dd:22:71:23:c3:9e:5e:73:51:
4a:2d:6b:32:4f:39:4c:a9:60:09:55:5d:ab:13:c2:97:ca:3b:
81:df:f7:a3:a8:79:b4:7c:a1:c6:94:96:c9:d0:6a:c7:39:92:
54:3a:fe:01:d5:62:6c:01:f5:83:3e:fe:30:75:9c:72:d3:e7:
bc:a9:80:b7:88:ab:79:0f:1f:f2:04:f1:3d:2a:cb:9d:1a:15:
7d:54:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:04:44 2025 by rpki-client