Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCF48A2DAFA11EF9CC85E58762E951A.roa
File: 5BCF48A2DAFA11EF9CC85E58762E951A.roa (raw, json)
Hash identifier: +ykGDTCTr9e8gByf2cDK/wievi7lsjhUWoe8lKYob90=
Subject key identifier: B2:9F:C0:62:F0:F8:09:6F:ED:33:41:F1:7F:04:AB:4E:11:7C:EA:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01490F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCF48A2DAFA11EF9CC85E58762E951A.roa
Signing time: Sat 25 Jan 2025 08:57:09 +0000
ROA not before: Sat 25 Jan 2025 08:57:05 +0000
ROA not after: Sun 30 Mar 2025 08:57:05 +0000
asID: 63139
IP address blocks: 154.94.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84239 (0x1490f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:57:05 2025 GMT
Not After : Mar 30 08:57:05 2025 GMT
Subject: CN=6794a765-50e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:dc:d6:6d:82:61:5d:0b:e7:fa:56:9d:54:
20:18:d8:78:38:b6:97:85:bf:6c:5a:f5:cb:ea:db:
af:21:59:df:9f:ed:2e:ac:6b:0f:dc:e5:41:20:3f:
da:a5:b1:9b:f1:04:23:cd:0f:26:3e:3a:f1:15:c4:
28:51:23:6a:07:8b:a3:aa:22:01:df:e6:78:13:b3:
07:85:f4:69:5b:b4:3f:9c:d6:74:4c:d3:70:b6:e3:
2a:8a:25:3b:3f:95:4e:2a:f5:51:3c:48:98:9b:a8:
96:d6:6e:10:47:95:df:f5:64:8c:9c:9e:48:fa:96:
50:ca:da:9b:25:b5:31:4f:85:02:cd:37:91:d2:bf:
9f:93:6b:3f:1e:f6:13:94:3f:4e:55:cc:77:9f:97:
d9:9c:8f:57:8a:24:b9:6b:1f:67:27:24:30:3f:94:
f5:58:55:c9:92:3d:60:15:8e:7c:6f:4e:ce:4f:e1:
fd:79:3b:27:2f:17:61:24:7a:bc:07:df:50:8a:ee:
d8:67:a0:11:5f:2e:ed:b8:8f:92:f9:bf:bb:83:57:
6e:65:20:f8:27:7d:b9:49:39:f8:ad:00:ae:9a:23:
2a:58:a2:76:48:34:8a:0f:66:65:4e:1c:40:31:e4:
b2:d2:bb:5a:e6:30:f5:63:1a:8e:d2:c3:7e:7c:06:
13:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9F:C0:62:F0:F8:09:6F:ED:33:41:F1:7F:04:AB:4E:11:7C:EA:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BCF48A2DAFA11EF9CC85E58762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:70:3c:98:0e:44:21:ca:a4:37:a9:41:c5:0e:8e:4e:64:7f:
97:b8:6f:89:0a:4f:66:b4:9e:dc:58:cc:1e:f3:a2:55:d5:1a:
24:9d:5d:96:19:3b:73:3f:a3:43:66:f2:9c:db:b1:03:8d:f9:
57:75:2d:64:9f:1d:c0:54:97:a1:c0:b9:3e:0d:66:b6:96:59:
2b:06:46:df:41:b6:91:24:0a:94:48:33:c7:2c:d1:5c:f1:f1:
54:0a:0b:88:8b:b1:c0:cc:ff:d4:7f:98:7b:44:88:35:69:1a:
4c:55:d7:70:3b:83:5e:97:91:aa:9a:82:02:80:08:d6:2f:74:
a9:e6:f7:e3:b3:e0:f4:ef:ef:f6:32:b2:53:74:99:5f:c2:74:
96:8a:7e:d2:33:dc:b7:8f:19:11:1c:86:2f:3a:12:9e:62:aa:
6c:46:17:05:b0:6a:90:4c:85:59:b7:19:51:d6:fb:f8:5c:45:
d3:a6:0f:78:ce:bb:fe:cb:7f:56:56:bc:76:d5:1e:87:97:41:
5b:76:1b:bb:70:dd:98:06:22:c0:4a:7e:ef:7b:82:51:b0:0a:
6b:42:02:f0:15:ce:8a:8b:22:e1:4e:dd:bc:1d:be:1f:28:7a:
b7:0f:c7:38:fb:e8:5b:aa:6d:b2:a8:da:61:25:4a:e0:42:cb:
70:ca:ad:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:44 2025 by rpki-client