Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/245186B0DC1211EFBB1A00AF762E951A.roa
File: 245186B0DC1211EFBB1A00AF762E951A.roa (raw, json)
Hash identifier: hr6oY6UFSOtkgDwg3EaVfST3U60iPTiON4vxOR3K1so=
Subject key identifier: 9F:2D:04:F0:1D:62:BF:99:0A:EC:A4:0A:96:8F:E7:6C:8F:A1:5A:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/245186B0DC1211EFBB1A00AF762E951A.roa
Signing time: Sun 26 Jan 2025 18:19:55 +0000
ROA not before: Sun 26 Jan 2025 18:19:51 +0000
ROA not after: Tue 01 Apr 2025 18:19:51 +0000
asID: 63139
IP address blocks: 154.94.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84814 (0x14b4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 18:19:51 2025 GMT
Not After : Apr 1 18:19:51 2025 GMT
Subject: CN=67967ccb-96a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e4:79:ff:3a:db:26:39:a9:04:c0:34:57:09:
20:1e:72:a8:1a:7c:a2:9e:a8:c2:49:0b:cb:77:63:
69:fd:5d:97:88:98:df:25:11:4d:15:6b:22:8a:98:
cb:05:4e:bb:ca:3e:66:2e:f9:69:a9:35:1f:b4:ad:
6f:c1:e1:10:cd:50:4a:33:8a:dc:af:f7:f2:8a:d5:
d4:e5:80:b6:00:db:65:15:20:51:c9:eb:a4:b2:d9:
02:60:82:cb:ff:23:08:45:78:82:97:8f:04:ef:27:
d1:92:ce:6b:39:31:78:f3:2f:ea:9c:a7:3a:6c:0e:
63:ca:e5:ba:39:a2:f5:c5:49:78:de:46:e1:84:9b:
b0:48:e8:a2:3c:e1:1a:13:b9:53:e8:4b:b1:e1:c8:
29:44:da:01:1f:bc:5b:e5:d4:23:0f:66:e6:5c:c8:
15:94:73:7f:40:4c:03:40:d9:4f:ea:26:40:7d:2c:
db:c5:22:1b:1e:a6:58:38:d4:d8:6b:1a:17:3b:c2:
06:cc:d2:4e:32:93:7f:19:8a:34:16:02:df:ec:cd:
67:ce:c7:47:24:b8:63:58:12:0b:60:ef:c0:a2:eb:
3e:cd:be:c7:65:c7:91:b7:0d:ad:05:ab:a5:3d:87:
db:dc:d1:50:1a:5a:9c:ff:27:1a:fc:44:3a:96:b7:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:04:F0:1D:62:BF:99:0A:EC:A4:0A:96:8F:E7:6C:8F:A1:5A:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/245186B0DC1211EFBB1A00AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.70.0/24
Signature Algorithm: sha256WithRSAEncryption
33:99:29:5d:27:b3:db:20:a3:a9:72:8b:4e:ca:4d:56:db:be:
83:38:44:91:42:8d:31:35:16:4c:d1:94:2f:e6:40:f6:63:8e:
c2:ce:05:bb:4f:ec:06:5f:a1:97:77:15:25:9b:a6:a6:cc:46:
b8:f9:c1:3c:71:7a:73:35:1f:81:41:5f:59:e2:8c:f6:3a:e9:
14:c6:dd:9f:d9:47:91:b1:06:0f:cf:a8:0d:4c:c2:76:da:c2:
3c:33:88:5d:c3:e5:d9:9a:ea:e4:eb:49:82:b4:2d:6d:76:74:
e8:f2:d9:0d:a1:dc:d3:3b:fb:e0:51:6c:81:4f:7a:7b:1f:8a:
ec:e6:5a:aa:62:e8:3b:39:eb:e3:45:e6:65:ee:79:e0:b7:45:
e3:16:60:63:4a:9c:42:b9:d0:b9:69:16:a2:86:63:dc:8d:9f:
26:28:24:d9:c1:05:09:a6:fc:3a:05:c7:78:80:e1:90:1a:ea:
26:e0:bb:3e:32:ee:b7:15:d4:f8:0d:36:8a:9b:38:45:cd:4d:
59:9a:e2:88:f1:31:f3:df:5b:90:7f:aa:a2:7a:7c:3d:27:a2:
71:69:3f:5b:a5:9b:cd:93:dd:1f:98:8c:ca:24:29:90:e3:d0:
91:5b:e5:59:f1:8c:a6:8e:e9:28:65:d8:fe:4a:78:05:22:0d:
6f:07:40:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:58:24 2025 by rpki-client