Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF17DF2DC0A11EFB2B5077C762E951A.roa
File: 5CF17DF2DC0A11EFB2B5077C762E951A.roa (raw, json)
Hash identifier: O11EG+GIKgjUGhHaVMyKxzskt499uZ5S8rn7lHweSeU=
Subject key identifier: C0:AE:68:31:EC:C6:DC:5C:E3:57:10:28:94:34:D0:5D:0B:04:5E:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B1C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF17DF2DC0A11EFB2B5077C762E951A.roa
Signing time: Sun 26 Jan 2025 17:24:14 +0000
ROA not before: Sun 26 Jan 2025 17:24:10 +0000
ROA not after: Tue 01 Apr 2025 17:24:10 +0000
asID: 138915
IP address blocks: 154.94.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84764 (0x14b1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:24:10 2025 GMT
Not After : Apr 1 17:24:10 2025 GMT
Subject: CN=67966fbe-a4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:9c:6b:ba:22:48:cc:a0:34:89:7d:e2:0e:
b6:58:6e:16:24:48:b2:06:e5:17:0b:09:16:f8:57:
66:59:86:8f:d6:43:21:4c:cd:7a:de:95:6d:27:0a:
a7:90:ad:6c:be:02:31:18:43:e2:9d:c8:2e:88:ff:
c6:8a:2e:4f:1d:e5:f6:e2:a2:8f:ee:fd:8d:4b:54:
b5:b4:04:1d:5a:47:95:38:dc:80:c0:ec:fb:39:5b:
87:68:7b:f4:84:3c:5e:ee:9c:0c:f5:27:72:2c:2c:
14:37:cd:6d:e2:30:ee:7a:61:0f:8d:76:72:7c:a8:
ea:b7:d9:5b:8e:53:d5:ae:55:42:84:63:9f:9e:ef:
7a:39:42:a2:bd:eb:32:1d:ef:70:11:b2:0f:46:ad:
6a:4c:43:33:32:1c:f7:ce:a3:25:1b:b7:49:75:b9:
6f:05:f2:84:be:99:65:11:6a:0d:eb:a1:89:f2:50:
bf:31:b3:29:15:72:47:f9:78:6a:76:49:3f:02:54:
46:11:24:c1:dc:a7:59:a0:b7:e4:32:fe:d0:fa:37:
ec:8a:2c:84:5e:21:9c:f4:52:fc:d5:11:09:d3:28:
d3:6f:c1:10:f5:1d:a2:fc:32:6b:c2:75:4f:8d:ca:
f1:2a:59:bd:61:ad:00:fd:8b:1e:0c:1d:4b:24:9f:
e3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:68:31:EC:C6:DC:5C:E3:57:10:28:94:34:D0:5D:0B:04:5E:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF17DF2DC0A11EFB2B5077C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.87.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:39:02:28:35:b0:b0:d2:5c:29:0d:f4:fc:99:32:64:04:38:
2b:1b:c9:bf:ef:16:a0:a9:d3:b1:74:c3:1f:60:89:e0:b0:5c:
07:8c:19:1a:e5:4b:c9:03:a7:4b:3b:7e:b7:f3:7d:c0:5c:3a:
f9:9c:38:c2:05:d0:cf:ff:53:09:1c:ac:59:89:16:d7:c7:41:
54:1b:84:36:6b:ce:fb:b6:fc:96:ab:90:c9:17:3f:04:a2:41:
46:6a:cc:ad:c7:45:7f:e1:a6:4d:1c:20:eb:2a:2c:ad:33:ae:
e0:82:b9:d4:c9:e6:2b:5b:e6:c2:11:12:38:55:91:6a:c3:cc:
3e:91:1b:06:df:b1:ce:f0:b0:e9:cd:87:16:f4:95:36:21:46:
35:fc:5f:ee:1c:31:a8:eb:0d:72:81:55:8f:cb:60:7b:42:fd:
0d:37:17:b4:47:de:97:d8:82:e3:2e:c7:90:17:e9:ff:bd:45:
fb:a2:b9:ab:64:e0:7a:bc:6d:b4:c6:14:e8:fa:6b:13:71:72:
b2:dd:49:02:87:47:1e:c1:f9:28:c2:42:c5:9f:62:9a:75:f0:
d1:08:31:31:28:2b:84:ed:e9:a1:5e:2b:82:93:37:2d:ee:2b:
32:65:0a:59:36:5f:58:bf:4a:a5:be:a4:46:03:93:e8:80:6e:
28:95:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:34 2025 by rpki-client