Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62EAB256DAFB11EFAE04475F762E951A.roa
File: 62EAB256DAFB11EFAE04475F762E951A.roa (raw, json)
Hash identifier: Nc9pA3/zXbPdUiSQ0JIECeE2Lcx9XxFv+OxAeJqZXtA=
Subject key identifier: 0D:E0:5D:12:E5:BD:11:DB:87:DA:87:EE:A5:23:6F:64:6A:02:08:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014915
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62EAB256DAFB11EFAE04475F762E951A.roa
Signing time: Sat 25 Jan 2025 09:04:30 +0000
ROA not before: Sat 25 Jan 2025 09:04:27 +0000
ROA not after: Sun 30 Mar 2025 09:04:27 +0000
asID: 63139
IP address blocks: 154.94.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84245 (0x14915)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 09:04:27 2025 GMT
Not After : Mar 30 09:04:27 2025 GMT
Subject: CN=6794a91e-c4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fa:97:f6:04:50:de:89:bd:1a:51:1f:7b:37:
22:c0:cf:7f:c3:c2:a1:fd:7a:5c:05:15:54:b0:75:
b6:af:a4:2a:40:0a:af:d1:fc:79:0a:61:f5:87:3b:
f4:d1:0e:55:66:2e:49:ac:c9:e1:85:a5:24:2f:8e:
e1:98:11:a0:7a:63:0f:5e:47:3b:ad:d5:d5:fd:12:
f4:f0:5d:c0:11:43:d6:a0:d4:7e:bc:cf:0e:3a:10:
b4:88:b8:f7:12:f1:3b:c6:53:8e:a1:db:0c:b8:ac:
a4:7d:a1:8b:55:32:48:6f:85:4e:b1:3f:1e:ab:2c:
b1:6b:fc:df:0c:b3:7e:a7:19:42:7f:58:84:dc:27:
3c:04:11:a5:96:95:f7:76:7d:89:62:98:4a:02:3a:
4f:16:07:e4:65:17:61:c2:94:b0:ee:44:e0:99:25:
7b:32:7d:15:88:7e:98:13:91:30:27:f1:ef:b7:ae:
f3:d1:de:3e:c7:68:8d:3e:5c:02:d5:4c:9d:1a:da:
35:70:0e:3f:86:f0:e2:b5:eb:10:4a:c2:59:6d:5b:
b0:5a:3f:b1:3b:60:50:d9:db:17:94:23:d5:49:22:
4a:e3:c5:7c:64:fb:c9:d9:fb:a1:3e:8e:2e:e8:76:
47:35:52:19:a7:2d:e0:02:10:57:34:c3:a1:13:a2:
b6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:5D:12:E5:BD:11:DB:87:DA:87:EE:A5:23:6F:64:6A:02:08:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62EAB256DAFB11EFAE04475F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.117.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:35:91:da:19:b8:a4:e5:e8:93:dc:09:9e:c6:8c:55:aa:a8:
e0:7c:fc:4c:1c:f9:c8:f7:84:05:2c:75:80:70:05:8d:4f:aa:
d6:2a:4c:d6:1a:ee:ca:ac:b9:60:29:d9:69:f0:8f:96:6b:65:
0e:38:df:1d:bd:c8:15:4d:1b:63:9b:92:17:c0:ec:36:b5:08:
e8:ee:90:e3:eb:82:89:c7:4b:71:bb:a2:55:dd:cb:d4:cd:aa:
05:fc:f5:17:45:51:1c:52:03:1e:6f:55:11:86:02:48:e2:35:
08:d3:0b:60:15:9f:3e:2b:eb:aa:9e:b3:99:69:9a:cb:a6:73:
38:3b:ea:94:ea:54:52:65:4b:89:58:43:7a:5b:ca:45:4b:95:
75:e7:df:1a:da:ff:02:7d:70:58:a6:ac:be:b9:e6:49:95:8b:
33:fa:f4:28:9d:a2:6a:7c:13:03:b7:a2:72:b8:09:f8:50:0c:
24:21:ec:37:02:bf:13:19:75:f2:a0:d1:ce:e3:0a:34:ec:9f:
56:7a:8a:9c:86:7b:52:1a:a8:f0:94:1e:1a:70:fb:b9:0f:35:
ad:41:cb:6f:9f:c7:98:61:3b:83:45:85:91:bf:cf:0f:de:09:
a7:5e:d3:0b:1a:eb:cb:38:c5:b7:d4:97:f4:6b:e6:16:b7:f0:
f8:d2:8c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:49 2025 by rpki-client