Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1041145ADAFB11EFB95EC45E762E951A.roa
File: 1041145ADAFB11EFB95EC45E762E951A.roa (raw, json)
Hash identifier: Vfu1nw1Jj/OiSgalHbTPuu4gawexeNklZGoHLNd5WMA=
Subject key identifier: 84:B3:E7:8D:24:C3:C2:3A:A0:54:DC:37:5A:93:43:76:DB:EA:96:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014913
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1041145ADAFB11EFB95EC45E762E951A.roa
Signing time: Sat 25 Jan 2025 09:02:12 +0000
ROA not before: Sat 25 Jan 2025 09:02:08 +0000
ROA not after: Sun 30 Mar 2025 09:02:08 +0000
asID: 63139
IP address blocks: 154.94.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84243 (0x14913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:02:08 2025 GMT
Not After : Mar 30 09:02:08 2025 GMT
Subject: CN=6794a893-9a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f7:da:bc:11:3b:2f:6e:24:52:5d:90:a3:ec:
2e:b8:e9:fa:fa:f0:46:2d:ae:f8:9d:64:49:48:85:
45:4f:a9:71:82:d9:f2:53:a9:c2:bc:0a:cb:7c:8e:
e5:32:e4:9b:5b:a1:15:57:27:86:2c:55:30:27:52:
3a:60:c2:b2:d0:be:b2:8c:ea:63:c6:d7:ac:4f:0d:
29:7e:f1:b0:c7:44:d9:e2:97:e3:d0:55:e7:83:f7:
b2:d5:6d:ae:f9:b7:59:9d:22:01:81:f9:5a:3a:aa:
fb:75:10:f0:03:3a:ea:47:ff:aa:ec:18:bd:48:a4:
39:66:c6:3c:d7:70:00:ea:41:79:36:35:4f:86:e0:
9a:92:75:6d:f7:84:f7:7b:1b:2f:d4:04:ca:af:c4:
1d:ad:82:f0:c1:8d:3f:3f:9a:41:67:6d:21:5b:c7:
a9:60:58:88:9d:d5:2f:4b:07:bb:b9:1c:91:2c:eb:
55:ef:d5:e1:7f:f7:72:dd:04:e7:6c:6a:bd:61:f0:
14:4c:b8:cd:4a:02:54:c2:d9:7e:8a:26:5b:a2:d8:
53:29:ff:4d:fc:ee:77:b0:ab:13:a7:9b:7f:a8:b9:
f7:5e:59:93:1d:04:c8:7e:10:e9:09:ac:c2:56:a8:
c3:01:16:59:55:26:35:f9:cd:07:a7:0f:28:39:a2:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B3:E7:8D:24:C3:C2:3A:A0:54:DC:37:5A:93:43:76:DB:EA:96:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1041145ADAFB11EFB95EC45E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.116.0/24
Signature Algorithm: sha256WithRSAEncryption
83:e9:47:5a:5a:56:8b:73:16:2a:30:31:f2:4d:79:35:64:7e:
38:18:34:9a:7b:9c:fa:25:9d:cb:ea:d8:b7:0d:df:7e:81:2c:
74:46:07:12:d1:f7:b6:e2:1a:94:d9:67:0a:52:af:a6:0b:0a:
e7:e1:3d:f5:8d:15:10:7c:81:92:da:f9:71:9f:40:52:c5:7c:
e4:39:64:f4:ad:67:1a:35:14:fe:be:3c:d6:18:13:16:04:ac:
42:1c:a3:be:8d:93:a8:50:81:71:68:1e:51:22:a2:c5:4c:d2:
8a:bc:63:84:cc:1e:74:6d:09:71:ba:e9:69:09:c5:cc:69:ac:
9a:8f:d5:75:3f:e4:8f:1b:1b:09:e4:ca:07:6b:3a:7b:e8:03:
f9:28:be:24:47:2e:72:b4:e8:6f:e0:bd:ff:85:6e:03:3b:ae:
26:1a:ef:3b:47:30:b9:f6:e3:99:41:37:6a:71:a5:59:b4:0d:
99:01:0b:69:fc:92:5c:19:87:f5:f9:a9:e8:80:4a:a1:5b:0a:
e9:86:bf:a5:0e:a2:dc:da:fe:c7:cf:8d:89:ca:55:25:3e:5f:
55:fd:93:b2:3f:eb:40:22:3a:80:7a:f6:6e:2d:14:c5:e5:20:
80:3b:ca:68:36:40:11:13:d4:8a:af:89:20:6b:29:85:8a:14:
2d:fc:4e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:00:34 2025 by rpki-client