Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC01C6E4F3B711EFA5BB9391762E951A.roa
File: AC01C6E4F3B711EFA5BB9391762E951A.roa (raw, json)
Hash identifier: T/lvVYww8+T4s8dKXEiWPynAFj0pGgQuIRhNK1zCmUM=
Subject key identifier: AA:67:85:55:23:21:58:4D:58:84:40:54:F7:F7:7A:1F:73:0C:86:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FE5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC01C6E4F3B711EFA5BB9391762E951A.roa
Signing time: Tue 25 Feb 2025 20:32:46 +0000
ROA not before: Tue 25 Feb 2025 20:32:43 +0000
ROA not after: Wed 09 Apr 2025 20:32:43 +0000
asID: 138915
IP address blocks: 154.95.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90085 (0x15fe5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:32:43 2025 GMT
Not After : Apr 9 20:32:43 2025 GMT
Subject: CN=67be28ee-dd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:0c:48:2e:e7:17:3b:4f:8e:be:26:82:8d:
04:69:1d:12:7f:de:c3:ad:dd:8d:c0:41:c0:ec:7a:
b2:81:51:f6:73:08:7e:14:97:1a:90:bb:79:17:a2:
93:8f:6b:59:71:51:33:6c:0d:69:69:85:f2:fa:76:
bc:8d:5e:bf:ce:3b:e4:13:46:7a:74:98:ec:41:1e:
7f:3b:7a:8f:33:7f:7e:54:80:dc:98:7d:53:c6:28:
8c:97:c2:b3:b8:94:07:87:b6:46:51:f1:19:b1:c7:
35:4c:49:e6:f0:80:6b:84:1f:5b:0d:ba:72:c0:39:
81:3d:5d:93:21:66:2d:c2:e3:bd:e7:65:84:8f:6c:
1c:c7:d3:70:20:9f:58:b5:8f:70:99:f0:f9:59:85:
c8:8a:2f:2f:3f:67:ef:4d:f2:e1:45:73:fb:ee:33:
07:16:b5:ba:81:cd:d1:83:6d:44:0b:a0:ef:6f:6f:
eb:74:9f:b7:25:e1:24:0c:48:54:26:6b:8f:17:d9:
33:d2:db:e9:27:bc:cc:f8:92:6a:29:fb:52:9a:f5:
2d:75:96:8a:48:18:26:b4:cb:31:7b:0d:c8:cc:e6:
b8:6a:74:ad:0e:1b:32:71:f7:c6:2e:43:18:9b:55:
44:ca:14:b4:be:17:2a:c5:4d:b2:8e:8c:53:8c:b7:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:67:85:55:23:21:58:4D:58:84:40:54:F7:F7:7A:1F:73:0C:86:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC01C6E4F3B711EFA5BB9391762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.81.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e4:47:57:32:eb:11:aa:35:4c:b3:26:d5:39:56:b8:7d:26:
34:ae:f9:ca:b4:05:8a:7e:a5:57:14:07:ff:ab:a4:64:9c:28:
0b:ac:1d:9f:3c:02:10:d6:15:43:52:6e:92:3c:3f:63:ce:41:
12:45:fb:8b:aa:1d:77:17:68:db:86:97:89:f7:a8:cb:35:ea:
b5:30:5e:04:3a:b5:eb:c2:81:0a:28:49:c3:4b:58:c3:c0:6c:
4a:f8:4c:ae:e0:d0:32:9f:96:dd:c0:f2:93:9d:87:60:53:bf:
50:09:bd:3d:52:3e:86:93:bb:2f:f8:7e:8a:22:59:3e:d6:35:
e5:8a:19:23:83:6c:77:67:8e:d9:35:b4:01:96:8e:dd:c2:13:
d5:cd:fe:84:e8:80:30:7b:00:89:10:02:6b:16:d3:24:e7:34:
3d:cb:d2:50:41:be:cc:58:49:b0:eb:2e:00:33:c0:ce:3c:67:
f2:55:bb:c6:19:b0:76:dd:de:03:5f:a1:d0:9c:b9:bc:48:00:
9f:69:5f:cc:6d:90:fa:48:42:84:18:d2:e9:3d:80:40:50:f7:
24:db:f6:a1:af:2b:c8:65:a3:d9:af:bf:ad:62:21:65:74:8e:
64:de:54:79:60:3e:7a:79:9a:1b:f3:1e:0f:6b:e4:bb:a2:27:
42:c9:c2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:55 2025 by rpki-client