Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B770B0E8F3B811EFA3E2DB96762E951A.roa
File: B770B0E8F3B811EFA3E2DB96762E951A.roa (raw, json)
Hash identifier: lSgI3g/fxmFJxKK1IGeIRUr1JHYBgv/ic+7qNMdHaug=
Subject key identifier: 3A:86:EC:26:06:71:40:F1:7A:58:81:35:DB:BF:BB:9B:84:6F:0D:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FF1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B770B0E8F3B811EFA3E2DB96762E951A.roa
Signing time: Tue 25 Feb 2025 20:40:15 +0000
ROA not before: Tue 25 Feb 2025 20:40:11 +0000
ROA not after: Wed 09 Apr 2025 20:40:11 +0000
asID: 138915
IP address blocks: 154.95.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90097 (0x15ff1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:40:11 2025 GMT
Not After : Apr 9 20:40:11 2025 GMT
Subject: CN=67be2aaf-2c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:84:4f:c9:57:57:c1:c4:dd:ab:27:56:58:
49:45:43:b6:03:4d:d2:f5:1d:7e:7a:85:74:af:57:
95:d3:ee:22:4f:4d:2c:42:ef:ad:70:fd:f1:15:2a:
e0:1f:25:16:12:d4:b8:21:a8:8b:74:36:d5:71:21:
16:5c:f2:bf:a1:db:97:bb:e4:de:ba:f7:b1:c0:93:
6b:d9:b1:a3:ac:07:ef:0a:17:4a:58:6b:75:82:ec:
57:b7:43:69:08:c3:d9:0b:1b:4b:f2:e0:f3:c8:f3:
87:32:e1:55:1f:77:e5:cc:7b:3f:4f:85:2b:2e:6d:
6c:d1:ee:19:68:14:0b:9b:a5:6f:63:21:a9:28:57:
2f:4c:6a:bc:a4:d9:3d:5d:88:0c:f0:09:38:cc:c9:
9a:20:f6:4b:0d:cd:aa:f8:0f:c1:1e:87:ef:a7:8d:
77:ba:fa:ca:75:80:7c:5b:09:6f:58:ff:24:97:7d:
51:b5:26:f9:e7:df:27:b1:bc:2d:0b:80:4a:aa:f7:
f4:be:68:42:27:08:f5:d3:80:a1:48:6a:cd:6f:f7:
d0:b8:09:d1:c8:17:af:20:c4:95:67:d9:5b:be:74:
0b:ee:34:99:9d:4c:d6:92:f5:d1:57:05:d3:ba:bb:
ee:c7:f2:9d:cd:4d:f6:90:ef:ee:1d:c1:24:99:d4:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:86:EC:26:06:71:40:F1:7A:58:81:35:DB:BF:BB:9B:84:6F:0D:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B770B0E8F3B811EFA3E2DB96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.78.0/24
Signature Algorithm: sha256WithRSAEncryption
be:43:75:98:a0:e1:0b:e3:70:1e:1a:41:da:71:a3:8c:7d:53:
4a:ba:60:4c:03:a6:9b:1e:51:58:14:47:1c:66:aa:4f:d1:c3:
21:8c:e5:9f:4b:98:25:bd:fc:10:dc:58:33:45:0e:38:81:0c:
96:39:20:8a:e6:8c:d3:0f:45:39:92:a4:b4:0f:2e:a5:01:7d:
1c:5d:58:50:8b:2f:a3:45:7b:c7:a2:b8:ee:70:84:9e:20:dd:
96:bc:5e:6c:1a:ea:81:92:e1:a5:89:25:de:29:aa:12:5d:04:
93:6e:f3:ce:9a:84:57:12:21:43:97:b8:4c:0d:2c:71:41:04:
b1:18:09:af:d4:7f:be:3b:82:be:22:6d:ba:14:34:c2:94:99:
d1:58:96:f4:c7:79:35:9c:07:07:84:a1:c2:a4:dc:a1:68:e9:
35:be:7b:c8:3e:22:61:d7:25:29:2c:29:d6:46:a5:a1:07:ba:
a4:e4:0f:8a:81:34:b6:3d:be:0d:f4:cc:e4:b3:96:c9:b8:3a:
e3:05:88:a7:20:09:f6:05:89:18:e7:e8:73:58:f5:af:cc:19:
29:32:30:c6:53:ad:07:72:1b:4d:97:f5:01:19:48:33:15:4a:
ae:b0:c4:df:bc:d1:fe:21:5a:50:35:6e:39:b5:87:94:ca:db:
9c:80:95:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:47 2025 by rpki-client