Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC56D05ADAF711EF967E2848762E951A.roa
File: EC56D05ADAF711EF967E2848762E951A.roa (raw, json)
Hash identifier: zHuP0DKkOXkVbN70DZYjV6jAXuks+qXwjsgy+dHisw0=
Subject key identifier: B3:6C:5C:27:93:F0:FE:0B:DD:EC:67:8E:40:EE:5A:8C:DA:52:19:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014901
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC56D05ADAF711EF967E2848762E951A.roa
Signing time: Sat 25 Jan 2025 08:39:43 +0000
ROA not before: Sat 25 Jan 2025 08:39:39 +0000
ROA not after: Sun 30 Mar 2025 08:39:39 +0000
asID: 63139
IP address blocks: 154.94.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84225 (0x14901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 08:39:39 2025 GMT
Not After : Mar 30 08:39:39 2025 GMT
Subject: CN=6794a34f-02fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:51:55:c6:15:ef:54:c9:7a:c1:b9:9b:41:97:
31:a1:4a:bf:db:43:35:93:59:f7:30:78:8b:e2:01:
8a:06:f0:15:d9:d4:53:86:d6:32:92:f4:9d:8d:74:
f1:dd:bb:67:fc:68:42:2c:31:37:91:ef:57:cc:97:
f6:38:47:c3:b9:c6:a6:3b:95:aa:e6:cb:c1:76:2a:
fb:77:3a:02:98:d2:f9:bd:8f:f8:c2:49:48:fc:e2:
be:d5:0e:d4:4d:40:5f:b0:f8:1a:8d:8c:64:6e:40:
25:e0:0a:72:ee:21:48:27:ed:4e:2c:7d:c7:f2:d9:
55:15:dd:d9:04:4b:88:a0:00:22:fc:47:98:a3:53:
df:8f:2e:22:9d:80:e3:f8:51:f2:2a:44:dc:ce:78:
be:e4:6f:ea:26:4a:60:a0:08:a5:35:28:27:11:95:
af:08:5b:79:3e:ff:f6:42:69:fc:b3:dc:1e:33:f3:
31:17:ac:f4:eb:5a:07:1f:37:5c:48:2a:11:41:0d:
33:f6:73:05:f7:22:96:b4:9a:61:0c:6f:60:34:00:
df:f0:a4:22:c2:b0:21:0a:36:a0:48:02:d3:8f:a7:
ce:1c:fc:07:6e:0d:c9:53:c0:28:1e:30:91:d1:b7:
3d:9c:f1:ab:9f:f4:95:b7:2b:a7:62:f1:50:90:7a:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:6C:5C:27:93:F0:FE:0B:DD:EC:67:8E:40:EE:5A:8C:DA:52:19:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC56D05ADAF711EF967E2848762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.107.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:8f:4b:82:11:70:1b:1a:99:81:49:e8:46:f6:37:2b:c9:6e:
ee:51:1b:a2:e4:f2:08:e7:eb:44:6a:a0:51:38:02:ca:78:3c:
aa:8c:e6:27:18:a5:83:b1:11:65:49:38:ed:83:88:06:00:ad:
51:2f:0c:00:54:4f:1b:34:98:89:c8:9b:89:96:df:33:f4:a7:
70:78:42:9a:53:92:b6:af:cc:27:93:e0:9d:62:c6:db:0a:94:
17:e2:e2:39:b6:71:a1:b3:41:42:85:74:81:c3:a5:35:ea:31:
0f:62:e6:a3:75:13:c4:8c:77:dc:28:f8:df:6b:cf:6a:ce:1d:
34:d9:84:91:38:dd:c2:e1:1d:14:14:cf:aa:c4:7e:57:26:3e:
d4:90:3b:90:6a:42:a1:f4:f4:79:6a:41:f7:0a:61:84:ce:65:
a3:d6:f9:1c:5f:8b:55:6a:47:19:ca:6c:54:29:6c:6b:9c:26:
54:e7:d6:d7:96:c7:f7:fd:6e:13:db:fa:93:0f:a4:44:28:d6:
6a:10:b5:ca:80:e2:67:5e:8d:87:74:ab:ee:0b:7c:36:11:de:
bb:d9:97:da:84:0a:f0:9a:12:d5:07:05:f4:0e:c0:aa:f9:82:
ee:0b:da:dc:77:74:a3:b7:c9:fa:ab:46:fa:7f:a0:75:9c:ef:
51:38:11:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:31 2025 by rpki-client