Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D7B70ACDB1411EFADBCC386762E951A.roa
File: 6D7B70ACDB1411EFADBCC386762E951A.roa (raw, json)
Hash identifier: v5RcuaSjxOt46X/sSYbvPEGKTEjAPQpG7ZCmdlhxpL4=
Subject key identifier: EF:EE:79:C1:14:5B:A7:42:F7:49:7A:C1:6E:0E:EE:D7:CF:77:2F:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014927
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D7B70ACDB1411EFADBCC386762E951A.roa
Signing time: Sat 25 Jan 2025 12:03:46 +0000
ROA not before: Sat 25 Jan 2025 12:03:42 +0000
ROA not after: Sun 30 Mar 2025 12:03:42 +0000
asID: 63139
IP address blocks: 154.94.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84263 (0x14927)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:03:42 2025 GMT
Not After : Mar 30 12:03:42 2025 GMT
Subject: CN=6794d321-00c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:35:ae:ef:71:34:f7:59:d4:ff:e1:2f:b3:75:
02:02:a2:00:96:75:f0:24:d1:c3:8f:91:7c:4b:7a:
ce:e1:ad:6a:ad:d4:49:19:08:3b:e9:a9:08:e6:6c:
97:d5:df:08:c4:a4:39:88:f6:54:51:84:85:3e:7c:
37:bb:c9:66:c1:8e:bc:03:78:4f:69:77:3f:b5:c7:
a7:9d:9d:53:8a:eb:38:2e:d1:f9:dd:60:0c:b3:38:
65:d4:50:03:bb:bb:06:8e:16:bf:01:60:04:8b:ad:
ea:e3:55:ed:aa:93:53:7b:2a:1a:77:cb:82:3b:ef:
29:3b:da:50:c4:e4:af:b1:d9:54:4e:e2:d4:db:5b:
f3:03:cb:20:ef:d4:d1:3c:84:90:65:5a:c3:af:9a:
91:f0:04:57:25:a3:96:06:9c:63:ca:6e:f3:51:7b:
c3:62:6b:42:43:32:9f:b1:9c:a0:bb:14:ee:9e:5c:
c5:bd:54:47:77:a3:e5:fa:a7:d3:f8:89:63:7e:76:
0e:22:dd:c2:13:00:1f:0c:12:e6:28:78:ab:96:7e:
db:5c:19:af:4b:88:8f:be:ad:90:37:08:4b:2f:44:
6c:14:eb:38:a6:f6:a2:af:0c:82:8a:74:8d:9a:73:
6f:d7:40:ed:8e:c9:76:24:69:6a:70:1b:c1:22:21:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:EE:79:C1:14:5B:A7:42:F7:49:7A:C1:6E:0E:EE:D7:CF:77:2F:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D7B70ACDB1411EFADBCC386762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.124.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e1:a5:83:49:11:7e:2c:19:00:32:4c:fb:f1:ec:a5:5f:75:
f2:55:3e:af:b9:35:01:b4:f6:96:c2:4e:8b:17:f1:fb:b1:8e:
31:85:bd:5b:51:db:ce:22:89:65:aa:32:82:7b:de:b5:f8:21:
16:9f:50:70:73:34:54:6b:42:8f:d8:b6:91:08:e0:1b:16:8e:
9e:2d:1c:03:28:b0:74:57:49:e5:95:0e:ba:e4:13:85:df:25:
42:5d:4e:4e:d2:9c:79:4e:b5:f5:1f:0b:d4:3e:28:a1:ee:85:
22:ae:fd:71:6b:ea:9b:73:1b:f7:c5:df:ef:71:40:58:6b:47:
2c:c7:38:3e:48:0d:7d:c1:6a:31:70:02:e3:43:3d:f4:c1:7c:
08:a7:9b:56:bd:42:f3:ad:c0:0d:af:79:e1:b0:3b:70:7b:ed:
24:c8:f6:ad:26:41:eb:a4:bb:0e:eb:8e:12:89:d1:d8:0b:e5:
8b:d2:2e:8c:8d:48:f9:0d:45:a0:85:c3:be:85:e9:cb:46:73:
15:b3:54:15:65:d4:ca:80:54:73:20:dc:09:dc:ac:94:c4:7e:
25:64:59:5c:b0:da:32:9a:17:f6:96:48:e3:e8:98:da:b2:aa:
02:4b:81:ca:78:51:9f:1b:b1:fc:04:db:36:bc:26:73:44:bd:
07:f0:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:02:44 2025 by rpki-client