Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0884E28F80F11EF81D33A60762E951A.roa
File: D0884E28F80F11EF81D33A60762E951A.roa (raw, json)
Hash identifier: NzESCaTj45WLCDxyC0mc/mri2CQU5TNbW958F+8hcoQ=
Subject key identifier: 4B:80:FF:6D:38:39:07:EB:90:62:B2:DE:19:C0:EA:1D:E9:F4:9B:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0884E28F80F11EF81D33A60762E951A.roa
Signing time: Mon 03 Mar 2025 09:13:48 +0000
ROA not before: Mon 03 Mar 2025 09:13:44 +0000
ROA not after: Wed 30 Apr 2025 09:13:44 +0000
asID: 63139
IP address blocks: 154.94.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94128 (0x16fb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:13:44 2025 GMT
Not After : Apr 30 09:13:44 2025 GMT
Subject: CN=67c572cc-a088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:a1:f7:57:73:5b:3f:2a:05:29:c1:15:56:
14:6d:28:11:63:cd:04:ee:78:84:3a:53:a2:30:a5:
fb:8d:de:48:47:55:26:e0:b3:67:78:d2:6d:67:ab:
06:62:33:47:ab:01:d2:01:25:b8:8b:a4:4e:33:a0:
57:d3:f5:62:7a:6e:e8:fd:e4:3c:63:00:47:e8:03:
2c:63:7b:33:da:e9:92:9f:a6:01:68:c1:81:99:99:
8d:d9:80:9f:a7:71:28:51:6e:cd:fb:a2:27:e1:73:
1d:0b:a7:3c:da:0a:fd:92:3c:37:72:bd:73:16:ab:
f9:d4:90:46:06:b2:6c:0d:d3:6a:b0:ca:0c:52:80:
99:c6:57:de:af:34:26:b5:c8:ad:4c:18:87:33:8f:
46:51:79:33:8d:5b:aa:77:1b:6e:03:ac:e0:37:97:
8d:75:20:be:5e:f1:56:5e:dd:4a:89:a6:e9:47:6c:
6b:89:47:47:be:4e:46:d3:20:5c:82:97:fa:31:39:
ff:e5:48:78:dd:05:98:05:a7:dc:64:58:a0:e8:75:
dd:29:bd:55:a9:b8:a6:f2:5c:0a:79:d2:5c:94:6d:
a2:56:98:9d:3d:08:a6:4d:f3:02:b9:a9:3d:0d:1b:
0d:62:ec:db:19:8c:5d:c6:c8:53:cc:5d:56:dd:54:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:80:FF:6D:38:39:07:EB:90:62:B2:DE:19:C0:EA:1D:E9:F4:9B:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0884E28F80F11EF81D33A60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.104.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:8a:84:d9:ee:35:a8:0e:4a:28:0e:a8:8b:83:e4:f1:45:e4:
d3:7a:09:b5:75:ae:11:01:96:4a:3c:1e:cd:fd:68:93:ab:3f:
d5:cd:54:87:9d:0c:33:10:e4:fc:51:62:ce:dc:4a:9d:64:47:
85:eb:56:7e:79:09:9b:5c:2b:ed:5d:ba:e9:e7:a2:62:c9:d0:
93:3e:15:90:13:d5:91:59:a3:b2:ea:50:30:6c:3d:28:3e:e7:
37:db:95:01:0a:3d:73:f9:5c:69:61:f3:14:3e:66:99:ea:c1:
38:02:c6:9d:a9:ef:fc:cb:4a:d1:67:d8:0c:33:b4:da:87:94:
e2:77:a2:6d:a1:f2:67:df:b6:6b:d1:fa:44:f1:0e:56:65:88:
19:10:04:63:80:f6:97:4c:20:d4:3a:75:f9:64:59:3e:24:c4:
16:c4:8f:d6:f0:85:ac:2e:9d:24:b4:6a:8f:34:69:76:1c:7f:
c1:de:34:69:55:c3:3a:dd:f7:4b:f5:46:24:d3:74:42:ca:65:
0b:ff:af:82:81:b5:97:78:1b:ba:ec:80:e1:e0:8e:e8:25:89:
92:24:64:9b:ec:ec:32:4a:5c:ed:6c:3b:51:8a:bc:ee:3d:43:
0a:44:51:18:4a:04:77:2e:ea:17:11:9b:6b:d0:c2:eb:1f:bd:
14:0d:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:37 2025 by rpki-client