Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/626279E0DC1311EFABBF01B8762E951A.roa
File: 626279E0DC1311EFABBF01B8762E951A.roa (raw, json)
Hash identifier: HjbtKFhM6tPrMkceRjJAsDuyTi9ChsJhBMAO4k5Av20=
Subject key identifier: 53:5C:38:E0:35:5F:CB:66:F6:28:3A:9B:27:0E:06:BF:F4:9A:4B:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/626279E0DC1311EFABBF01B8762E951A.roa
Signing time: Sun 26 Jan 2025 18:28:48 +0000
ROA not before: Sun 26 Jan 2025 18:28:45 +0000
ROA not after: Tue 01 Apr 2025 18:28:45 +0000
asID: 63139
IP address blocks: 154.94.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84822 (0x14b56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 18:28:45 2025 GMT
Not After : Apr 1 18:28:45 2025 GMT
Subject: CN=67967ee0-e395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cd:4a:59:be:61:32:dc:28:3c:c4:6d:b0:e3:
4b:33:ca:33:82:22:5e:96:06:9f:67:f1:66:96:84:
ec:d0:3f:a0:83:4f:9a:33:9b:73:4a:42:d2:42:34:
7e:1f:b0:19:dc:7e:20:41:b2:26:76:e8:f9:74:bd:
c0:28:0c:c5:fd:4f:34:5e:f8:f2:21:c1:20:df:88:
a9:f8:cb:f6:b6:f4:68:c0:8e:74:3d:a7:bc:e2:cb:
e6:e1:d4:40:6c:12:90:f0:14:88:24:68:16:0a:99:
9d:42:e6:b8:09:72:87:de:87:98:57:1c:56:9f:cb:
62:48:b5:f0:b1:aa:b4:92:59:b7:25:2a:90:4d:9d:
b4:03:6f:d5:aa:ed:25:ab:60:20:36:88:37:df:bb:
f2:ff:eb:db:70:23:a8:6c:4b:1d:0c:af:b9:96:ad:
03:f4:21:ee:fd:40:da:50:74:73:fd:f3:b6:4b:69:
5f:ae:a5:54:bf:8b:68:36:73:da:5b:68:10:76:b4:
32:2a:5b:d1:36:42:b9:20:ea:fa:e1:47:5e:d2:f5:
fe:17:20:96:d3:27:b6:a6:42:03:db:d9:de:9e:2c:
a7:4b:43:d6:59:97:f4:3a:ad:a3:2e:c8:b4:05:ba:
17:cc:30:35:61:15:7f:d4:db:c4:e2:89:3a:b6:05:
fc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:38:E0:35:5F:CB:66:F6:28:3A:9B:27:0E:06:BF:F4:9A:4B:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/626279E0DC1311EFABBF01B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.74.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:46:95:be:b4:f7:d0:94:9f:30:2f:95:10:39:b3:9d:24:06:
fc:62:3e:51:19:31:d3:f8:eb:5b:c0:b4:1e:87:c0:f2:5b:e9:
4e:2d:86:f4:1d:e1:eb:1b:f9:36:c4:83:6a:59:3c:20:95:17:
76:59:07:6d:0f:aa:01:1a:c5:0c:3e:bc:40:60:3b:38:45:43:
e8:a5:12:7b:96:d8:09:2a:02:89:79:bc:00:e8:e8:5f:7c:58:
f9:e0:b6:ba:24:ca:ff:9c:88:17:34:96:ca:01:63:2e:ff:50:
c0:ba:bc:7a:38:33:78:2d:3b:b8:c1:34:5d:da:36:06:99:87:
9b:c5:c2:f4:2e:4a:bf:55:98:a8:56:92:81:10:bc:bb:7c:99:
a5:0d:74:7c:2d:08:50:42:91:06:70:a8:de:18:19:cb:ce:62:
9e:40:6b:68:26:28:9c:ee:7a:f2:fa:07:bd:0c:06:d4:ba:60:
53:d0:44:fe:54:57:a6:cc:89:36:ea:a1:58:47:d8:f2:f7:7f:
e7:87:be:05:e8:9a:31:43:d0:50:bb:45:6d:3b:21:0a:8d:d8:
cd:de:60:d3:0e:d9:e1:56:09:59:9f:b1:1b:c8:ed:2d:95:ed:
fb:d5:1d:5b:d3:64:17:9e:1e:2b:bc:14:8f:0f:93:c8:af:64:
bd:c4:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:09:24 2025 by rpki-client