Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8388FCF3B811EFB8D93B96762E951A.roa
File: 5E8388FCF3B811EFB8D93B96762E951A.roa (raw, json)
Hash identifier: k67I9uhrR2wqoubSm8lvr+Z4LC2pnl4rBZR/ez2nKL4=
Subject key identifier: A3:67:C0:BA:65:94:97:AA:AE:CB:0B:D4:61:0A:60:4D:97:2D:86:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8388FCF3B811EFB8D93B96762E951A.roa
Signing time: Tue 25 Feb 2025 20:37:46 +0000
ROA not before: Tue 25 Feb 2025 20:37:42 +0000
ROA not after: Wed 09 Apr 2025 20:37:42 +0000
asID: 138915
IP address blocks: 154.95.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90093 (0x15fed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:37:42 2025 GMT
Not After : Apr 9 20:37:42 2025 GMT
Subject: CN=67be2a1a-2663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:91:17:1b:01:dc:99:7b:72:10:c9:b5:47:
1b:94:b3:ac:c0:65:9b:dd:58:15:76:97:a4:f2:0f:
92:fa:18:ab:09:7e:74:8e:1a:d7:ec:2f:24:55:85:
c2:dc:f5:a3:13:06:6c:e8:e7:38:d6:50:81:e0:4b:
c4:4c:ba:44:24:82:8c:74:d9:5e:a4:62:6b:46:c4:
a7:ee:ff:0c:e1:27:3b:66:67:ec:c5:5b:be:1b:84:
1e:f9:a3:a2:70:fd:23:ff:bf:3d:16:39:f8:47:3c:
65:70:dc:fd:ac:91:b8:9e:ce:73:ef:71:e2:5e:18:
4f:77:c3:e9:37:f5:ac:d2:2b:8d:c8:22:8c:8c:f2:
91:c1:54:2b:ec:ec:df:b7:e2:28:8e:73:ae:f3:67:
e4:26:84:8d:fc:4b:5e:cd:53:08:ca:81:0d:f7:36:
f4:a2:4a:68:80:72:e4:fc:ab:cb:39:4e:d7:43:d9:
12:96:6c:7a:36:e6:bd:20:98:4d:a8:ec:a1:07:be:
e3:78:54:1e:03:b1:f6:5e:67:61:57:b6:60:c5:4b:
77:51:77:79:98:da:1c:0d:28:ec:b5:0a:91:c7:0b:
60:d6:8e:a7:af:6b:89:e4:84:6d:ed:64:24:9d:d9:
9b:c9:0f:ae:67:01:f0:05:67:f5:81:7e:18:0f:c2:
ec:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:67:C0:BA:65:94:97:AA:AE:CB:0B:D4:61:0A:60:4D:97:2D:86:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E8388FCF3B811EFB8D93B96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.79.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e6:f7:ca:20:8e:42:db:e4:d9:00:bc:18:00:8b:3f:fd:3a:
ec:73:02:02:5e:fc:76:15:f6:d8:06:00:f5:0e:0d:08:2f:cf:
ee:e5:e9:11:b0:ce:4e:48:18:bc:4b:96:ef:39:71:4c:97:34:
fc:32:3f:97:f9:c3:66:cb:ba:c1:1a:65:5f:3c:c6:df:35:07:
5b:11:69:83:7c:11:41:2b:b2:5b:7e:e4:53:f9:d0:a3:c3:2d:
f2:c8:0e:24:a0:c7:1e:7e:99:64:f9:16:fe:22:79:57:49:84:
b6:ba:ec:6b:a8:90:34:34:3b:bd:d4:01:13:f8:e5:1a:74:6d:
95:be:be:1e:bd:a1:5c:fc:de:d4:9c:d4:c8:f5:f7:4f:18:82:
a2:5d:cf:d7:1a:b1:7b:34:7f:99:4a:db:95:62:bc:f1:41:70:
64:bf:d2:ff:7d:82:9b:f1:b0:38:41:e1:09:2b:31:39:f2:18:
7b:0f:86:e8:fe:d3:6a:35:9d:8e:08:e6:b3:5f:70:07:5d:4d:
f2:81:6a:7f:f8:7d:c3:4b:46:ef:e1:0e:f1:70:50:b1:01:de:
29:06:3f:c8:de:72:ca:d3:f0:59:f8:84:09:a3:b2:aa:f3:cf:
ca:f7:ba:89:50:a6:6d:f9:0a:c0:48:23:40:7e:de:6a:d5:6e:
3c:26:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:52 2025 by rpki-client