Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E3A3524D8D511EF88F6C355762E951A.roa
File: 0E3A3524D8D511EF88F6C355762E951A.roa (raw, json)
Hash identifier: eAFHJV3IxkK7jrTPcH+0h9YoCbSTy2vzh/1hxqRJD9A=
Subject key identifier: 90:20:F9:58:5F:1B:D4:6F:BF:5D:AB:7E:B2:AC:1E:7C:C5:2D:7E:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E3A3524D8D511EF88F6C355762E951A.roa
Signing time: Wed 22 Jan 2025 15:25:05 +0000
ROA not before: Wed 22 Jan 2025 15:25:01 +0000
ROA not after: Tue 01 Apr 2025 15:25:01 +0000
asID: 138915
IP address blocks: 154.93.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81862 (0x13fc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:25:01 2025 GMT
Not After : Apr 1 15:25:01 2025 GMT
Subject: CN=67910dd1-3b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:c0:1a:cf:e4:b1:0b:3e:1b:d9:a5:0f:eb:
8f:41:6e:fd:b7:fd:f5:52:26:6d:ce:ae:93:0c:94:
a8:c7:d1:81:14:11:ee:1c:33:ba:91:dc:b2:00:72:
05:68:ef:ee:33:7d:00:66:86:24:17:24:2c:29:46:
b8:31:90:1b:16:94:e9:f3:16:3d:a6:2e:73:76:27:
b2:00:1d:9d:f3:27:a0:00:1e:15:75:95:24:31:a4:
47:37:13:f2:1e:27:b0:c1:68:d4:cc:36:63:71:df:
be:94:6f:1b:79:6b:6a:ab:25:c9:ca:cb:f5:f9:cd:
c1:08:1d:b8:13:ec:9f:d9:7f:d1:3d:e4:4b:c7:b5:
c7:17:b8:a5:45:f2:40:69:6b:c8:1f:b7:4b:af:dd:
5a:10:f8:66:6a:39:2d:0f:c4:d6:91:ba:6f:b0:64:
26:dc:c6:cc:45:2e:d0:f3:44:b9:21:06:01:13:e8:
60:ed:a7:8f:40:e8:13:02:fb:08:1e:dd:56:46:33:
d5:96:d8:d9:7f:d0:cb:0e:84:86:fa:14:44:37:06:
b9:47:67:b5:ce:c8:ea:16:f9:45:d1:41:a6:63:11:
d7:ef:70:40:15:19:a5:e1:bb:36:ab:60:53:7a:d2:
52:ef:12:5b:27:e8:1f:93:55:0e:6a:04:c4:df:37:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:20:F9:58:5F:1B:D4:6F:BF:5D:AB:7E:B2:AC:1E:7C:C5:2D:7E:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E3A3524D8D511EF88F6C355762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.109.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f6:90:b3:8e:3f:1d:fc:5a:dc:18:af:68:f4:d8:31:8e:c2:
ee:53:94:db:f3:a4:2c:db:80:9d:8a:0f:45:ee:c6:d4:a9:b2:
bf:d6:81:0a:d1:f4:a7:f9:16:dc:12:b4:ac:b1:08:49:dd:7b:
5f:a3:8e:98:c7:a8:8e:58:26:5c:7f:38:e0:1e:24:e9:df:64:
93:f0:a7:2b:31:74:7f:c0:2b:8c:d4:0a:38:16:d7:e0:8e:e1:
5b:dc:35:3b:f5:9c:3f:77:7c:cd:22:e3:be:bd:50:08:4a:6d:
63:ba:17:ef:4e:28:b2:2b:50:13:b0:50:ea:e6:ee:69:50:20:
c5:ea:49:53:8d:e4:fb:68:ed:21:20:cd:2d:a8:b4:d9:c2:b4:
75:5b:9d:fb:c9:c0:91:fd:d7:8e:b8:2d:c5:0f:20:f3:d2:e6:
19:44:e1:fa:96:30:da:99:c0:43:1c:f7:d3:10:b2:b2:a4:d7:
37:6f:40:cc:3a:a1:bf:a4:ec:e2:c4:64:77:73:bc:74:d4:f9:
4a:ca:ea:6f:57:0d:1c:3e:d9:d1:fa:f4:59:fd:f1:67:9f:bd:
65:ff:55:1d:be:1c:de:9d:24:3a:ff:1f:63:e5:a3:5e:3b:d9:
25:a7:87:cc:f9:05:b9:bc:53:b3:cd:41:4e:88:5d:d0:64:0c:
5c:34:39:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:17:26 2025 by rpki-client