Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F30B720DB1511EF95EDBF8D762E951A.roa
File: 7F30B720DB1511EF95EDBF8D762E951A.roa (raw, json)
Hash identifier: uaDXRcNQ9E5+nit1pRczAE78wGEUBNxKlfdFLqROmQ0=
Subject key identifier: 1A:50:A3:A3:8A:C1:76:4F:8C:1C:41:B4:A9:49:52:C8:CF:28:C6:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014934
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F30B720DB1511EF95EDBF8D762E951A.roa
Signing time: Sat 25 Jan 2025 12:11:25 +0000
ROA not before: Sat 25 Jan 2025 12:11:21 +0000
ROA not after: Sun 30 Mar 2025 12:11:21 +0000
asID: 140666
IP address blocks: 154.94.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84276 (0x14934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:11:21 2025 GMT
Not After : Mar 30 12:11:21 2025 GMT
Subject: CN=6794d4ed-eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b3:b2:ad:dd:45:0b:79:e4:a4:0f:48:a0:16:
cf:91:61:cd:4a:f4:0a:da:80:63:57:99:88:c1:64:
a5:2d:37:d3:a8:74:a2:66:4c:50:87:1f:bf:4e:4b:
6b:e3:e6:37:e0:54:5c:2d:fd:13:2b:55:1b:0a:3f:
31:ea:41:52:5a:7d:4b:71:46:c2:62:e4:6e:87:45:
52:13:af:3d:f9:2a:d6:79:a5:62:c4:f3:18:af:4c:
6b:3f:43:ff:db:4e:3f:b0:6f:70:12:c4:7c:f8:09:
c2:c3:a6:c5:f1:4f:da:52:27:05:fd:1e:3e:11:67:
1e:7a:51:e3:13:54:ea:7b:41:1a:19:ae:1c:f4:dd:
9e:c9:b1:06:98:03:8c:cd:63:44:d7:06:29:1f:7f:
00:8d:c0:33:b0:a4:8a:c2:7b:0d:c4:28:6b:dd:58:
35:de:af:e2:1f:db:82:c7:b7:9d:43:e8:93:83:29:
45:57:3b:28:58:f1:4d:c5:52:10:28:6e:ba:c7:c2:
44:6e:9e:83:d3:0c:95:53:1b:5c:c3:4d:e8:30:f7:
8d:e9:80:49:81:32:26:4f:b5:2a:95:ca:f0:bf:55:
10:11:54:12:5e:5f:db:de:9a:72:4a:ba:e7:92:39:
86:69:9b:e7:05:27:45:7d:e7:0c:a7:0a:30:79:da:
b2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:50:A3:A3:8A:C1:76:4F:8C:1C:41:B4:A9:49:52:C8:CF:28:C6:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F30B720DB1511EF95EDBF8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:61:76:57:37:3a:91:a2:42:39:17:24:b9:6f:72:bf:df:6b:
c0:4d:e9:fc:39:1d:be:03:e5:9d:63:04:d8:a9:05:d3:3f:2c:
72:be:f7:73:61:9f:2d:de:f2:b5:2e:e7:64:ed:1a:bf:c5:11:
48:33:29:1a:9a:5e:51:67:ae:0f:ee:f4:3d:ec:79:2b:82:ed:
81:8a:7b:63:2c:6b:45:f6:4c:50:ed:75:eb:75:d1:07:78:ea:
54:5c:1e:c1:04:fe:0c:3d:32:05:c2:da:21:2e:30:63:8f:2b:
8c:0a:95:93:a0:0f:5c:4b:ee:2e:9c:61:15:4c:c2:2e:5b:b3:
08:8c:be:6d:0f:24:fb:dc:59:af:d5:7d:72:67:f9:36:96:8e:
34:fd:5a:c8:8e:60:dd:ed:49:1e:e7:fb:a0:98:a8:9e:07:c4:
7c:e3:05:88:d1:e0:1c:53:f1:24:5a:14:ad:6a:3b:80:ad:5d:
b3:29:73:09:2a:c4:31:28:01:0e:6d:38:ba:c1:21:ec:e1:8b:
ed:47:93:6b:42:5e:58:17:af:17:d9:62:03:c8:e2:52:78:f5:
90:40:8b:59:51:8f:1d:7a:fb:e6:f2:f1:22:1e:6b:ae:96:e7:
b2:19:72:ba:1f:06:d1:6a:2d:bc:1b:e6:6a:46:40:86:4d:7f:
2c:b2:3c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 00:17:51 2025 by rpki-client