Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3B69DFADC0311EF913F8C52762E951A.roa
File: F3B69DFADC0311EF913F8C52762E951A.roa (raw, json)
Hash identifier: BURObKMHVs+OmfyBQjOxVRQXIxCFt1XiPFeyeCJHoBk=
Subject key identifier: C3:1C:29:D3:92:33:75:BF:5F:16:88:B9:1B:B0:6F:6B:3C:DB:3E:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AF2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3B69DFADC0311EF913F8C52762E951A.roa
Signing time: Sun 26 Jan 2025 16:38:20 +0000
ROA not before: Sun 26 Jan 2025 16:38:17 +0000
ROA not after: Tue 01 Apr 2025 16:38:17 +0000
asID: 63139
IP address blocks: 154.94.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84722 (0x14af2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:38:17 2025 GMT
Not After : Apr 1 16:38:17 2025 GMT
Subject: CN=679664fc-5a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:7f:3e:12:16:81:02:72:e9:8c:00:a6:01:
1e:00:0c:fe:bf:64:a9:23:7d:c7:82:a9:2a:b4:d3:
74:72:4c:cc:d8:24:59:21:4b:86:96:b1:6d:87:d6:
38:3c:dc:41:a6:27:91:9c:b2:7f:ee:d6:cf:26:42:
98:f6:bb:0f:1a:84:c8:1c:3f:ca:59:b4:23:df:78:
e2:44:7f:2e:d8:2e:54:a6:e9:f4:84:65:c7:5c:52:
6e:26:b1:ba:63:64:f1:dc:41:a7:4f:64:cb:d6:43:
d3:e3:84:5d:2f:4b:0c:9b:13:0f:c1:fc:37:3f:ca:
c9:e2:32:4b:8c:d5:ab:b2:4f:cf:f5:18:90:b6:08:
72:a8:e4:a1:35:0a:93:9e:22:87:c4:15:fb:ca:a6:
98:65:d8:08:f2:a9:74:af:2f:57:fe:4b:27:5f:d4:
e9:0b:c5:df:76:6e:0c:38:12:01:96:11:a7:59:29:
95:2f:a5:24:d9:3b:5c:c1:ca:33:47:f7:4b:25:2c:
68:3d:bd:0c:b0:6a:74:97:69:80:61:23:06:40:50:
9f:6e:c2:98:d0:ee:50:4e:d0:8a:81:1e:99:ed:d3:
24:20:8e:a0:1a:55:d9:00:26:db:8a:54:b7:85:b0:
0a:59:d3:9b:0e:ec:c9:29:8c:e3:f4:4a:74:29:e3:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1C:29:D3:92:33:75:BF:5F:16:88:B9:1B:B0:6F:6B:3C:DB:3E:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3B69DFADC0311EF913F8C52762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.97.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c5:d0:32:2f:41:af:dd:37:01:a2:91:67:40:4b:4a:2b:b1:
a2:23:1b:18:af:cf:bc:40:87:94:33:3c:12:9c:5b:25:2c:01:
5d:b8:38:4c:88:0d:94:a7:d3:fa:62:b0:48:17:97:18:9f:0e:
bf:44:ba:8e:04:08:77:06:6c:e4:34:fa:68:7d:4b:9c:39:f4:
ee:79:f5:f0:c7:d8:0f:eb:aa:5d:7b:6d:bc:a1:34:35:2d:93:
c7:ad:7a:fb:39:cb:0c:de:32:00:75:e6:13:b6:de:44:ff:df:
15:e9:cb:18:d5:97:92:8b:a7:ea:95:2b:4a:40:b7:d2:cd:e0:
ad:55:ed:3b:3e:8e:0c:4a:18:c9:46:18:d0:b5:62:de:01:04:
68:bb:8b:ad:ef:a4:47:3f:8b:5a:d1:c5:9a:c6:6f:17:d2:f2:
71:ef:b1:fd:b9:bb:1b:f6:d3:48:3b:e1:e2:df:20:30:d8:5d:
34:fa:76:e4:76:95:4c:af:e5:27:a1:80:84:7b:b8:5c:d6:3f:
8f:fe:35:2d:8c:06:19:24:70:53:4a:92:26:46:6d:0c:68:be:
65:a9:09:77:f9:08:78:b7:80:4d:8b:4e:fc:39:55:19:fc:df:
24:83:da:b4:79:60:ee:63:05:de:73:3f:8f:bf:47:ec:31:b1:
40:da:02:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:50 2025 by rpki-client