Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D405FC68DC1111EFB85B8FAE762E951A.roa
File: D405FC68DC1111EFB85B8FAE762E951A.roa (raw, json)
Hash identifier: zhDw0h77OKo7FGdOPL510EWvvRSOfHLJvz4EtItkCGo=
Subject key identifier: B8:6A:FF:DC:A5:82:1A:6E:44:53:19:03:6C:78:BD:C5:EA:65:B2:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D405FC68DC1111EFB85B8FAE762E951A.roa
Signing time: Sun 26 Jan 2025 18:17:40 +0000
ROA not before: Sun 26 Jan 2025 18:17:36 +0000
ROA not after: Tue 01 Apr 2025 18:17:36 +0000
asID: 63139
IP address blocks: 154.94.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84812 (0x14b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 18:17:36 2025 GMT
Not After : Apr 1 18:17:36 2025 GMT
Subject: CN=67967c44-352c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:30:4a:50:46:a7:c3:47:1d:2d:84:24:98:
a4:25:2a:5a:8a:4b:03:68:fb:23:a8:2b:88:9d:86:
92:39:bd:e5:03:22:6b:05:81:87:1f:b4:83:da:1d:
67:0e:6f:59:76:fa:9d:56:c1:b3:35:69:42:93:1c:
1e:f9:2c:d1:7c:29:9d:80:14:54:2c:08:9f:54:b6:
dc:a1:d7:58:c7:14:5f:c0:3d:d7:66:9d:f9:fb:93:
5e:9b:f5:b7:74:eb:04:ea:77:a5:74:b2:d0:33:c9:
ba:74:54:a9:82:ed:bf:23:a0:6e:6c:f9:26:07:e9:
d9:00:9f:2c:2a:f5:47:b2:40:fc:db:cc:69:e6:95:
07:ca:e2:4f:01:9e:e4:cb:df:47:d2:bf:73:8a:7e:
13:a7:8f:30:7e:ae:64:c6:a5:ab:50:b3:27:d9:4d:
15:5a:d9:aa:14:d6:53:b4:70:b2:50:a5:c1:2c:34:
57:92:a7:d4:15:a7:1a:fe:0b:91:6b:1b:68:e3:18:
9f:8d:6d:3e:b8:36:86:c6:03:ef:21:b8:36:3d:dd:
e6:a4:ba:50:fb:55:97:c1:6c:a4:9b:f2:32:e6:b3:
df:42:1a:d4:1b:d6:8e:43:70:bd:de:dc:c7:bd:15:
98:88:ae:5b:74:14:75:4b:da:f5:cb:15:9f:41:cf:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:FF:DC:A5:82:1A:6E:44:53:19:03:6C:78:BD:C5:EA:65:B2:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D405FC68DC1111EFB85B8FAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.69.0/24
Signature Algorithm: sha256WithRSAEncryption
61:05:73:2a:be:dd:6e:ad:56:c8:a1:9a:37:bc:32:51:49:07:
c8:4d:84:18:64:f3:ee:59:2e:81:19:87:18:cf:13:d7:07:2d:
63:57:62:2c:8e:15:1b:ef:1a:1d:d4:98:7f:d7:56:fe:dd:1a:
7a:b0:29:a2:12:d7:bf:e1:44:2a:16:f7:91:fe:f4:70:a4:8e:
a2:a4:c8:95:3a:77:a0:99:7c:f2:3e:b9:e3:d4:30:70:5d:50:
25:57:9a:94:f2:39:9e:ad:71:45:ba:c7:2d:49:ea:6f:d1:bb:
81:15:cb:53:18:c2:24:02:f4:72:d6:ec:40:ea:4a:0f:4a:10:
05:e5:b3:29:bb:99:1e:b1:98:c2:30:07:93:9f:98:fb:df:cb:
77:64:01:b2:72:c4:6c:9e:11:ef:01:30:3d:2d:28:e9:37:44:
6f:8e:fd:f2:13:21:c3:88:d5:1b:0d:e9:70:b9:1a:1e:9b:da:
08:b5:66:7e:6b:4d:a7:62:a9:53:d0:be:92:29:26:6f:43:d3:
df:f6:fd:a0:1d:e2:ec:3e:29:e1:c9:3a:a8:50:39:3f:10:a2:
cd:0c:b9:49:dd:93:81:7e:99:9c:62:3a:01:0e:67:03:c9:58:
e8:01:20:14:96:91:81:c9:c3:f2:5d:4c:4b:4d:d2:1a:05:8e:
9c:ed:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:32 2025 by rpki-client