Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF3E878ADC0C11EFB3A8C48E762E951A.roa
File: DF3E878ADC0C11EFB3A8C48E762E951A.roa (raw, json)
Hash identifier: 2oLfNtO2BH0+qNjzQQhi0BTZqvDi5OqXVVJG/3ktrwU=
Subject key identifier: 03:E7:57:E0:C5:06:37:C2:91:91:42:37:38:3E:B2:35:15:23:9A:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF3E878ADC0C11EFB3A8C48E762E951A.roa
Signing time: Sun 26 Jan 2025 17:42:11 +0000
ROA not before: Sun 26 Jan 2025 17:42:08 +0000
ROA not after: Tue 01 Apr 2025 17:42:08 +0000
asID: 63139
IP address blocks: 154.94.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84780 (0x14b2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 17:42:08 2025 GMT
Not After : Apr 1 17:42:08 2025 GMT
Subject: CN=679673f3-98b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:12:e9:7c:4a:1d:64:9c:85:bd:b9:0a:0a:b9:
f4:1a:c6:fd:76:a4:e3:dd:71:a3:62:f5:85:dc:f6:
25:60:17:aa:18:5f:50:25:b3:ee:73:3d:b1:a9:50:
da:09:a6:f5:d3:c9:83:b9:78:59:e3:b9:c6:c1:0e:
80:9c:8b:da:1b:bc:3a:5f:b1:37:d8:07:6f:36:d6:
b2:23:5d:49:51:2a:a1:da:c9:ea:47:d2:ee:53:c5:
26:e6:f0:55:46:b4:62:c0:3f:23:ff:ab:a6:a7:8b:
0f:c4:3d:6d:77:20:7f:c0:c8:0f:ff:8a:05:e8:7d:
29:95:dd:af:d3:81:55:f1:98:7c:e0:73:31:89:11:
7b:e1:0e:eb:95:82:ec:a6:04:8b:65:85:09:56:b7:
bf:8d:7a:0b:9c:13:26:07:c1:a5:19:3a:5c:61:84:
93:42:2f:56:98:4d:75:10:d5:3b:19:61:5c:00:c3:
9b:58:27:c7:dc:4b:c3:9a:db:27:06:b7:36:7c:6a:
9e:95:6e:ec:4a:51:d2:d6:70:db:0e:d6:3f:a8:98:
fe:da:a6:a4:e7:48:54:7d:dc:cd:30:98:9a:5d:cd:
2e:51:14:c6:1f:5f:ba:5a:55:70:f0:8f:0c:3e:d3:
f0:43:81:5e:68:0d:9a:21:9a:41:fc:69:a5:ec:56:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E7:57:E0:C5:06:37:C2:91:91:42:37:38:3E:B2:35:15:23:9A:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF3E878ADC0C11EFB3A8C48E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.80.0/24
Signature Algorithm: sha256WithRSAEncryption
be:a8:48:ee:db:9a:cf:fa:ed:fd:a6:7d:38:21:32:89:17:a2:
0e:88:fe:d1:73:0a:10:5f:c9:90:e6:18:22:b9:d7:ab:3f:29:
de:f7:40:be:99:f3:06:d9:db:98:44:9f:be:d1:81:62:1d:36:
3f:d5:7d:bd:3d:af:1a:38:1f:ff:32:79:ab:78:2d:ba:5c:52:
df:b7:28:f9:6e:43:c9:64:87:f4:f4:23:f2:9d:cd:b7:ee:ad:
8b:26:89:e1:58:0a:82:4f:8e:87:1a:9d:d3:34:12:ba:3f:1b:
47:d2:4a:ea:c0:f2:85:a1:63:ad:23:b5:cb:66:15:e0:32:49:
4d:f9:a8:0d:85:01:a0:d9:3d:bf:b5:37:7b:a8:95:19:5e:a6:
cf:06:7d:ad:59:b9:25:4f:f2:19:84:ed:93:86:5d:93:7f:56:
16:85:1e:f4:e3:38:50:c3:9d:79:71:16:01:d7:c4:08:ba:80:
6f:07:7b:d4:68:5e:b1:48:21:be:6f:29:dd:d6:92:de:76:02:
97:ff:36:9b:70:80:88:da:4a:06:9d:ed:e8:5e:3f:2e:eb:b8:
21:ba:b1:5c:26:8c:c8:57:2d:cb:13:44:0e:8f:7c:85:45:ac:
53:51:61:a7:8c:f6:ae:af:1d:8f:95:a9:3f:18:6f:9f:c9:9c:
42:86:35:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:47:24 2025 by rpki-client