Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E98988F39911EFAA63F64A762E951A.roa
File: C1E98988F39911EFAA63F64A762E951A.roa (raw, json)
Hash identifier: CQNSrnfHiFsnPQJ0rmDRY4ga+ngLBiw1vtQ+UUgkeyY=
Subject key identifier: BA:9C:63:7F:18:4F:86:DC:68:D9:4B:8C:64:DC:67:D6:64:E5:9A:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015F9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E98988F39911EFAA63F64A762E951A.roa
Signing time: Tue 25 Feb 2025 16:58:38 +0000
ROA not before: Tue 25 Feb 2025 16:58:34 +0000
ROA not after: Wed 09 Apr 2025 16:58:34 +0000
asID: 138915
IP address blocks: 154.95.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90014 (0x15f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 16:58:34 2025 GMT
Not After : Apr 9 16:58:34 2025 GMT
Subject: CN=67bdf6be-1394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:5e:f8:d0:a3:86:ea:e9:f9:e6:82:ce:46:
2b:20:90:42:9f:b3:d3:0e:6e:8b:ad:a6:af:f4:85:
3e:3d:e8:b8:a6:5e:a0:ea:65:e0:ba:85:37:3f:59:
b2:17:fe:f6:65:61:49:95:da:f1:e4:46:18:af:78:
68:14:01:1d:af:2a:d5:2b:4c:77:7f:35:a7:28:48:
0e:b9:ec:3c:73:10:e2:c8:8d:95:e3:34:a9:c7:bf:
f7:b4:00:cd:08:79:de:48:22:cf:b9:0d:91:9b:72:
a2:26:3e:b1:0e:d2:5e:69:dc:fc:c9:cd:a8:6f:e3:
85:0f:26:8d:56:cf:71:38:3e:f6:9e:d3:b8:2d:86:
05:fa:a5:b7:26:58:e7:9e:f5:6b:9c:47:41:aa:4d:
1b:4c:3b:5b:31:b6:80:0e:e6:f8:e0:b4:8b:dc:8a:
00:73:9f:87:11:31:e5:83:81:6f:f0:50:5a:42:0a:
a7:70:68:17:b8:44:99:fe:82:bf:43:96:0d:46:90:
56:40:8f:d0:91:8d:1c:19:8f:1e:02:5e:58:8d:16:
23:4c:bc:fc:67:fc:f1:26:5a:85:c8:58:26:13:d9:
07:22:03:5d:4a:d6:37:35:72:89:9a:e0:b4:1e:5e:
a6:b9:b0:31:f0:e0:c6:53:39:e6:60:87:29:d5:81:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9C:63:7F:18:4F:86:DC:68:D9:4B:8C:64:DC:67:D6:64:E5:9A:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E98988F39911EFAA63F64A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.94.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:21:9d:d8:71:37:00:43:db:64:a6:bf:34:5b:3b:c1:a8:bb:
15:12:c3:dd:14:64:62:25:b0:3b:ae:e9:4c:81:55:47:8a:d0:
ba:8c:8b:4f:3a:93:b4:74:62:7e:7a:ed:ad:e2:24:4c:dc:ac:
3a:34:71:5a:ce:50:df:92:bd:3a:e0:78:4d:b5:9f:6d:d1:a5:
fd:be:e1:b9:44:be:15:1a:a1:92:fe:aa:e4:74:e6:3c:6c:15:
66:89:15:0c:b0:ca:ad:37:f9:b1:5c:3c:9e:f5:d8:aa:c4:58:
76:43:72:8e:5b:f4:48:ef:67:e4:99:d8:00:38:95:0e:7d:4d:
08:1a:5b:31:e4:7c:2f:21:80:af:23:00:08:d5:6a:8c:ca:a9:
b4:e3:da:66:71:ce:d6:9a:a6:d0:49:09:63:4e:f9:49:db:61:
16:88:c6:e3:e4:28:d1:7c:ee:27:4b:b1:e5:f7:2c:bd:a3:4c:
ad:cb:e0:ad:6c:ca:b2:02:da:30:19:37:00:e5:bd:5b:cd:1c:
f4:70:98:e2:80:10:ca:eb:3e:a2:e4:08:c0:83:8b:7a:4d:d0:
67:14:e1:87:c8:d7:50:3c:de:cf:69:a6:55:d6:89:46:ef:60:
04:8d:a7:ea:e3:77:97:16:09:03:59:6c:74:4b:ec:bd:5e:3c:
c9:49:77:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:45:42 2025 by rpki-client