Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B53AA6ADC0F11EF884BD69C762E951A.roa
File: 5B53AA6ADC0F11EF884BD69C762E951A.roa (raw, json)
Hash identifier: aqVDNmXJPybe+WhBswCIg97XNseO0N2wJ7wMBCozLVQ=
Subject key identifier: F7:E2:42:CB:53:6E:E0:1E:15:C6:58:9D:15:E4:22:51:D9:EE:37:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B53AA6ADC0F11EF884BD69C762E951A.roa
Signing time: Sun 26 Jan 2025 17:59:59 +0000
ROA not before: Sun 26 Jan 2025 17:59:55 +0000
ROA not after: Tue 01 Apr 2025 17:59:55 +0000
asID: 63139
IP address blocks: 154.94.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84796 (0x14b3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:59:55 2025 GMT
Not After : Apr 1 17:59:55 2025 GMT
Subject: CN=6796781f-2db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:36:6e:f9:ae:f2:e0:65:d8:83:40:97:78:
bf:2a:ac:e7:a8:7c:48:9c:c5:25:2d:ac:e7:e5:42:
68:db:f2:4d:3c:12:75:52:5b:65:3a:f4:cd:0e:23:
1d:93:8a:75:01:23:cb:64:8d:28:02:b5:c3:8d:52:
c1:8f:ad:10:c0:1c:68:2b:17:dc:9a:34:1e:18:fe:
79:9b:31:54:18:11:d9:fa:5d:63:84:e6:ca:bb:48:
93:77:b9:ee:1f:b1:52:2a:65:63:40:c4:9d:9a:5a:
c4:d3:14:d3:51:66:00:36:05:32:cc:21:f3:26:ac:
30:8b:f2:41:ad:2a:bb:df:74:27:c7:1a:2f:ef:3d:
16:67:8e:f3:22:ff:64:5d:1a:9c:b7:47:a0:62:71:
6d:ef:07:b4:2a:6c:0b:ea:93:49:66:97:5d:51:01:
97:e1:32:4b:9d:99:e4:10:d4:2f:3b:9a:7b:00:6d:
b0:07:9a:4f:ff:b4:d0:a1:48:5d:49:99:75:94:d0:
b9:58:16:7f:2e:60:48:5e:43:79:6a:51:17:7a:79:
c0:5d:4e:09:c2:08:18:fa:d8:49:ef:97:04:c7:d9:
61:50:c9:fb:d1:81:5d:04:f6:f0:ba:22:1b:31:dc:
87:be:d0:91:38:d0:f4:ad:73:df:a4:ea:c7:f3:8c:
ec:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:42:CB:53:6E:E0:1E:15:C6:58:9D:15:E4:22:51:D9:EE:37:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B53AA6ADC0F11EF884BD69C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.88.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:f7:5a:c5:7b:4d:ac:9a:4f:d7:44:cf:ef:ea:2f:00:30:41:
9f:b5:ee:cd:df:93:a6:8d:a1:35:16:5c:01:5f:a7:55:2d:ad:
69:e6:f9:26:ea:ba:56:1a:25:50:e9:04:34:f8:a7:a1:65:98:
28:15:e0:72:0b:85:8c:c5:2e:eb:b9:5e:23:e9:08:f5:8d:51:
a3:0b:88:f6:e6:d6:76:8b:e4:32:21:72:aa:a7:33:ec:9b:88:
98:1d:d0:76:b2:f5:01:a4:fe:b9:14:19:c5:55:5b:c1:6e:db:
6b:79:4e:14:03:20:c1:48:0f:f3:d1:50:f5:9d:08:b2:99:ea:
15:72:28:a7:36:c8:b3:a2:fb:e6:ab:e7:f3:94:38:a1:0a:26:
67:60:eb:7c:0e:be:2c:65:6b:fe:75:0d:79:b1:6a:57:54:59:
3c:b4:80:3c:bb:65:51:86:de:54:24:06:e3:4f:47:89:5b:fb:
01:b5:56:ff:74:5c:f9:34:99:6b:96:02:a1:c6:24:60:dd:75:
ea:44:9c:ab:30:df:33:d5:f5:02:07:b6:65:08:aa:94:4d:1d:
2c:fc:c5:f6:1c:e4:c0:da:54:78:8c:3e:8a:d4:ac:a8:4e:3d:
7b:0f:b0:78:d3:b4:62:2f:87:a2:71:01:d0:15:07:5c:98:a7:
86:66:95:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:43 2025 by rpki-client