Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B0E02CDC1211EF942982B3762E951A.roa
File: C1B0E02CDC1211EF942982B3762E951A.roa (raw, json)
Hash identifier: vkr3luncDKaUoWFQ08PjHUq28sTDbzQAbwrqPOVMAN8=
Subject key identifier: F3:59:4A:FE:BE:B6:C8:C0:C2:55:4A:32:36:E0:22:67:47:BF:C8:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B0E02CDC1211EF942982B3762E951A.roa
Signing time: Sun 26 Jan 2025 18:24:19 +0000
ROA not before: Sun 26 Jan 2025 18:24:15 +0000
ROA not after: Tue 01 Apr 2025 18:24:15 +0000
asID: 63139
IP address blocks: 154.94.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84818 (0x14b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 18:24:15 2025 GMT
Not After : Apr 1 18:24:15 2025 GMT
Subject: CN=67967dd3-07f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:ee:aa:1d:08:7e:54:52:41:f9:ee:0c:27:
40:30:67:70:76:0e:fd:a5:4b:5e:b7:5b:48:76:06:
6a:e9:c5:81:68:08:65:82:40:31:13:ed:d3:07:25:
09:35:b5:32:ab:35:55:11:d5:10:e3:a5:25:35:e4:
51:c9:29:13:41:76:fe:ff:c7:2a:42:ef:bb:20:4c:
a9:59:34:c8:99:78:79:03:1a:71:77:98:9e:05:f2:
15:f8:d2:c5:b0:77:25:fe:62:9d:61:f0:04:a6:7b:
c8:c5:5f:6c:76:3b:4b:90:1d:9f:5c:f3:ca:3a:07:
06:3a:37:e8:89:f9:47:51:ba:41:17:18:74:fe:a7:
84:5e:f0:18:02:27:0a:f4:0b:54:d2:e6:a0:5d:02:
79:e5:61:44:89:cd:5d:7d:0e:c0:42:97:2a:27:b0:
8a:8f:ec:21:03:d6:df:82:53:c5:c1:44:11:fa:bd:
5c:79:78:5c:09:ca:ea:1f:98:2c:81:7d:a4:73:b0:
db:fb:f5:74:81:a8:73:87:e2:cb:6a:8e:f8:35:da:
c8:19:2a:a7:1f:1a:68:f1:13:d2:6c:e6:9d:dd:ed:
bd:53:c0:a5:0e:2c:75:7e:7a:81:52:23:d5:ba:54:
de:ee:c0:7b:f9:46:bb:78:31:3f:b2:9b:56:47:0d:
39:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:4A:FE:BE:B6:C8:C0:C2:55:4A:32:36:E0:22:67:47:BF:C8:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1B0E02CDC1211EF942982B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.72.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:af:3e:f2:00:3c:89:ed:02:49:79:d7:5b:88:62:fd:d0:c5:
57:ec:a2:2c:22:a1:2c:49:69:94:7f:fb:80:6b:e1:78:fc:c3:
1d:ae:91:b2:b1:1b:2b:39:fa:25:0a:41:a8:7a:4b:6e:be:96:
09:4b:24:c5:d8:b2:60:dc:45:8b:b9:e6:3c:d4:f7:7a:c4:39:
bb:4f:33:53:f7:00:04:90:5e:48:09:06:19:1d:3f:f6:97:9c:
5f:69:d2:35:1d:d7:02:10:2e:7a:1a:0e:b5:8b:18:24:9c:88:
6a:8e:cb:b3:02:e8:52:17:78:05:35:d9:2f:b1:68:2e:50:95:
1a:ef:ca:ec:f5:da:26:20:63:9f:dd:ea:e6:6a:ff:5d:50:98:
43:cb:ea:53:f7:f2:ff:49:90:3e:67:75:82:19:5e:c8:63:92:
ed:17:2a:df:95:2b:bd:1f:9a:d7:64:1b:18:0e:7b:40:9e:a8:
a4:60:fb:64:ea:4b:d4:a2:7a:78:e5:e7:34:d0:3d:7d:30:16:
d7:79:50:99:99:a7:47:7e:6e:a3:f3:00:87:29:f6:06:53:03:
3f:17:e5:f0:dc:4a:d5:3c:ad:73:16:5a:ad:51:a3:c4:d4:02:
36:52:47:42:18:d7:ae:56:43:58:06:0e:23:76:73:ef:14:0e:
78:8c:41:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:05:42 2025 by rpki-client