Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D255026D8D311EF89AF5D48762E951A.roa
File: 0D255026D8D311EF89AF5D48762E951A.roa (raw, json)
Hash identifier: H37ykNgC8+bh95rdFkVrmSXt+riBq+EvR2EQOLDe9FM=
Subject key identifier: 7C:8A:78:89:8A:17:81:A2:EB:11:17:52:D7:B6:30:C1:D5:DF:26:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D255026D8D311EF89AF5D48762E951A.roa
Signing time: Wed 22 Jan 2025 15:10:44 +0000
ROA not before: Wed 22 Jan 2025 15:10:41 +0000
ROA not after: Tue 01 Apr 2025 15:10:41 +0000
asID: 138915
IP address blocks: 154.93.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81856 (0x13fc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:10:41 2025 GMT
Not After : Apr 1 15:10:41 2025 GMT
Subject: CN=67910a74-a3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:b5:9b:a6:b5:f3:b3:30:de:c4:d1:c5:50:
9d:ed:aa:9d:f7:3f:b2:a7:60:fb:3d:75:f9:0b:57:
0c:a1:6d:39:6a:83:04:04:1e:c8:3a:02:9c:f4:4d:
96:5e:2d:50:68:21:e2:5d:d5:d6:1b:89:f3:3f:88:
5c:df:b3:e4:ef:c3:68:aa:0c:81:0c:88:5e:12:da:
15:2a:c7:db:6c:b2:4d:fc:8c:32:c5:70:66:0f:65:
cb:d2:cd:e4:c4:3b:3e:5e:34:6e:78:87:84:f2:32:
d2:75:c2:cd:63:05:84:6a:90:d4:c0:38:12:59:2a:
29:94:79:35:99:f8:cc:be:a0:81:26:41:20:a5:dc:
f1:16:8c:45:1b:33:2b:be:61:f3:91:3c:48:7a:ac:
a1:61:be:0b:46:33:6a:64:d1:b4:83:1d:06:62:80:
29:3a:da:0e:88:80:c5:f3:86:2c:27:4d:b4:3d:d3:
0c:18:a1:20:10:9c:51:88:f6:65:b2:df:80:d0:86:
84:23:3b:11:6e:a7:19:fd:15:1f:e0:e0:0d:39:fb:
5a:49:07:f0:1b:04:a3:07:d3:a6:3a:2f:60:e6:b7:
97:0b:16:8d:94:36:f8:cc:f0:d4:5c:9b:a3:f0:e9:
36:f0:26:5f:e5:ab:2e:3d:22:5f:36:99:f3:2d:fc:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:78:89:8A:17:81:A2:EB:11:17:52:D7:B6:30:C1:D5:DF:26:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D255026D8D311EF89AF5D48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.125.0/24
Signature Algorithm: sha256WithRSAEncryption
75:dd:33:51:b9:e1:5b:b2:9f:9b:58:f2:40:2f:58:3e:93:91:
21:4a:3b:d0:ac:d5:a8:83:76:f8:68:80:5b:56:1e:59:cd:65:
fb:27:de:14:a5:71:2e:0f:cf:f5:40:4d:77:fb:52:ae:bb:5d:
08:5c:ae:82:38:8f:9b:5c:cd:1f:57:d7:91:c0:7b:b1:30:e2:
86:22:31:ef:04:37:52:01:60:ad:62:b0:f2:16:45:cf:19:b7:
a3:6b:0d:36:35:94:30:3f:c1:d2:72:87:83:6e:c7:81:e7:e6:
ae:c5:bc:28:e4:aa:86:9a:c1:4a:19:52:ca:b8:6c:9d:43:87:
de:2b:6a:e4:58:27:5c:a1:de:bd:98:39:8e:c5:95:f8:cf:72:
e8:e2:f3:6a:52:e1:8d:90:57:98:7b:28:61:e1:59:03:62:bf:
92:ea:4a:f4:1f:66:b0:4a:19:1a:4d:c3:8b:88:83:45:6a:81:
1f:f0:af:80:63:c2:5f:a9:98:92:d5:ec:ac:be:b3:be:7e:ce:
86:ac:5d:19:6b:8f:71:08:eb:d1:8b:28:03:b6:d4:d2:d6:f6:
82:d3:32:0e:85:48:3b:a8:e7:e6:65:da:a8:f1:06:1f:6c:16:
a5:e6:f3:38:9a:2f:40:ac:b3:ac:31:b0:8a:3a:4e:90:31:72:
91:69:f0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:35 2025 by rpki-client