Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0376DAB6F81A11EF94329AA5762E951A.roa
File: 0376DAB6F81A11EF94329AA5762E951A.roa (raw, json)
Hash identifier: 82wFG8YwxuIaq/HA0lcDDCEiB4DcLLRUNmipo23FvbQ=
Subject key identifier: E4:68:56:9E:05:7B:48:CE:5B:78:F8:39:77:C2:D6:4E:6E:79:F0:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017013
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0376DAB6F81A11EF94329AA5762E951A.roa
Signing time: Mon 03 Mar 2025 10:26:48 +0000
ROA not before: Mon 03 Mar 2025 10:26:44 +0000
ROA not after: Wed 30 Apr 2025 10:26:44 +0000
asID: 138915
IP address blocks: 154.93.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94227 (0x17013)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 10:26:44 2025 GMT
Not After : Apr 30 10:26:44 2025 GMT
Subject: CN=67c583e8-d08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:47:55:c1:dc:f9:38:19:04:6d:82:01:87:
5f:9b:a1:37:77:0c:82:b1:6e:18:35:7b:62:e8:e5:
00:e0:a2:65:c8:c4:75:11:e8:75:32:be:2e:ea:f5:
cb:67:1e:2b:a6:c0:17:d0:29:28:d0:aa:cc:cb:14:
7a:37:b0:27:bb:c6:aa:a8:9d:15:da:7e:06:f5:ee:
bb:db:d9:f5:8a:be:eb:b0:69:68:76:7c:34:0d:0b:
42:f3:f5:61:a0:00:96:b6:e3:ac:9b:e3:95:a1:7d:
2f:f6:c4:68:88:3e:ff:05:b8:c3:bf:19:99:2d:e2:
34:c1:a4:f6:8c:d1:fe:0a:ff:55:3b:0c:6b:c5:b8:
eb:94:40:11:48:d1:6f:10:16:78:9a:ca:65:97:6d:
54:6e:58:d9:16:d2:2a:5d:e9:42:cb:60:f9:8b:ee:
8b:ee:11:c0:47:34:c8:76:a4:14:3e:c7:59:6c:46:
e2:4d:9a:0c:26:b6:28:10:4f:57:4f:e4:30:8c:ee:
61:5a:65:5c:2c:61:2f:a6:81:d6:2e:4f:cc:6c:77:
e7:3a:c5:47:40:c1:d9:24:92:4e:05:f2:47:76:2d:
b6:a9:d4:c6:6d:3d:36:0b:8a:c4:77:36:9d:bf:d9:
49:4f:9f:ef:83:16:53:7d:a3:42:bb:b6:c5:12:3e:
91:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:68:56:9E:05:7B:48:CE:5B:78:F8:39:77:C2:D6:4E:6E:79:F0:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0376DAB6F81A11EF94329AA5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.126.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:59:fc:bf:e6:76:b8:54:22:6d:65:dc:0f:6a:9f:d7:f0:98:
92:75:f8:5f:d6:3a:dd:9a:49:75:be:93:c4:45:43:20:8b:8e:
bc:37:34:56:75:e2:31:d0:c9:97:f3:59:ab:55:15:4a:61:81:
7c:e2:12:db:81:9a:e7:68:14:3f:5d:ec:4a:ad:35:3b:1f:a1:
2c:b2:ea:53:d0:f5:ab:ea:2b:12:c2:36:0a:b9:bc:32:7b:e7:
4c:6a:16:87:08:d9:1d:1b:c2:90:49:48:90:00:c4:31:3b:89:
d9:64:dd:bc:e2:3d:59:c2:c8:09:2c:5f:77:5c:fe:ad:97:d9:
1c:e5:16:03:71:a3:78:b7:c5:17:24:12:c5:38:4a:87:64:62:
87:69:55:cd:7c:3e:77:fc:c1:a3:34:a0:8f:94:07:87:cb:60:
f8:50:30:d8:e5:b3:83:a8:f9:32:cd:24:2c:d4:74:dd:e6:a7:
39:fa:f8:38:5b:99:34:45:74:51:3a:5c:29:46:87:81:49:72:
f0:df:87:c8:9a:08:82:3c:75:bb:df:ee:9a:55:cf:68:d0:51:
43:1b:5d:57:2b:c9:7a:ff:6b:d2:72:dd:2f:dc:59:de:e5:5d:
e2:e7:a8:d7:da:f8:ef:3c:c0:ae:33:bf:2f:49:2e:e7:f2:6d:
63:dc:0a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:47:26 2025 by rpki-client