Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F56075CDC0D11EF93DD3C8F762E951A.roa
File: 2F56075CDC0D11EF93DD3C8F762E951A.roa (raw, json)
Hash identifier: SC8HF+0IWmbmRXTP/GQGJsdpJalWzioymw92VM2OKh8=
Subject key identifier: 76:2C:0D:94:1B:72:9B:2F:F8:1A:73:C8:3B:BF:09:10:AF:F5:ED:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F56075CDC0D11EF93DD3C8F762E951A.roa
Signing time: Sun 26 Jan 2025 17:44:26 +0000
ROA not before: Sun 26 Jan 2025 17:44:22 +0000
ROA not after: Tue 01 Apr 2025 17:44:22 +0000
asID: 63139
IP address blocks: 154.94.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84782 (0x14b2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:44:22 2025 GMT
Not After : Apr 1 17:44:22 2025 GMT
Subject: CN=6796747a-e6b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:13:cd:4d:8e:0c:96:77:4a:b6:3f:2a:3e:
23:c6:6e:9c:95:f6:92:f8:3d:cc:84:62:2b:7a:e6:
cf:e6:10:54:8a:17:69:07:f4:23:ef:8f:5a:3a:fc:
71:a3:97:19:e3:6b:e0:fd:9f:b7:67:0e:d9:b5:c2:
9b:ec:5d:f5:19:34:e8:5d:18:a5:28:db:8d:9f:f0:
b4:d2:40:29:fd:ed:97:af:e9:99:8e:7d:71:ea:63:
f2:35:12:b7:97:e8:c4:25:ff:52:71:b2:2b:79:7f:
7f:73:ca:97:a6:50:4e:c2:b2:87:88:d8:ca:62:30:
4a:25:39:85:ab:b0:c8:93:11:54:e1:6a:3f:f6:bd:
8d:ce:0b:12:b5:14:60:a7:ab:e4:2a:fa:41:e5:68:
74:48:27:e6:a6:e0:92:2a:d0:17:a2:45:19:03:50:
a3:b2:d7:bc:e5:7f:97:dd:85:38:47:4d:f3:8a:35:
f4:90:84:f2:71:3a:4a:b7:63:23:d7:81:ec:ad:75:
2d:e1:6c:4e:d3:56:de:86:df:f5:bd:7c:45:e9:7b:
36:d9:4e:6a:88:7f:22:3c:e0:e3:e4:e7:86:45:62:
7e:7b:40:93:a4:53:5c:46:01:81:59:a0:83:f5:f0:
06:26:75:6b:6d:7b:99:bc:0a:06:d7:54:b3:e2:f5:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:0D:94:1B:72:9B:2F:F8:1A:73:C8:3B:BF:09:10:AF:F5:ED:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F56075CDC0D11EF93DD3C8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:68:46:e9:ca:ef:f8:4b:b7:f6:54:5f:09:61:da:c1:5a:9a:
cb:74:4a:56:fc:a7:ca:28:da:84:76:f8:e8:e1:a2:35:1c:59:
96:a8:fb:a8:f5:72:b7:fd:b3:fd:3c:0c:8f:af:13:f5:96:e3:
ef:c0:3e:31:d0:00:c9:e6:bb:53:d9:aa:f7:96:ac:77:e4:52:
d0:22:93:1f:0b:d5:53:46:26:6e:7c:c0:83:83:11:b2:c9:7d:
5f:04:7f:fe:7d:5c:04:6d:51:7a:1c:a7:89:08:00:70:24:5e:
38:5c:e1:a8:af:98:18:f7:93:2c:a3:b4:23:92:ac:4f:26:a0:
9e:f3:8a:35:4b:1b:e8:05:4c:41:7e:00:b8:b4:b5:13:99:9d:
9b:00:53:9b:01:8a:af:3d:32:e1:1e:ce:0c:60:2b:98:51:4b:
35:5f:21:35:2c:7a:dd:a6:cf:1b:68:23:1d:3e:35:19:ea:12:
ed:37:4a:c8:20:a0:24:dd:bf:a7:c3:03:a9:ea:9a:1e:66:34:
f3:e5:d6:1a:8f:a8:c2:68:d0:f8:93:e8:f6:88:43:63:2f:ff:
53:fa:3d:1d:42:7d:21:cc:33:a8:1d:ed:34:96:d7:31:b1:d8:
7b:73:81:db:f4:5c:f4:60:69:e8:a0:ae:3a:28:55:29:8a:7c:
7f:1e:83:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:55:02 2025 by rpki-client