Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14EF74F4F62D11EFBFCF4684762E951A.roa
File: 14EF74F4F62D11EFBFCF4684762E951A.roa (raw, json)
Hash identifier: mruuA960GXeRj6hZzTSpCg1pcxqGMQmc3ssTpheSDuw=
Subject key identifier: 89:95:C9:4D:2F:16:04:22:09:BD:6C:B7:A6:C7:62:A7:0F:16:D8:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CDB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14EF74F4F62D11EFBFCF4684762E951A.roa
Signing time: Fri 28 Feb 2025 23:38:16 +0000
ROA not before: Fri 28 Feb 2025 23:38:12 +0000
ROA not after: Sat 19 Apr 2025 23:38:12 +0000
asID: 138915
IP address blocks: 154.93.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93403 (0x16cdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:38:12 2025 GMT
Not After : Apr 19 23:38:12 2025 GMT
Subject: CN=67c248e8-bf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:29:4f:c4:33:aa:eb:d1:db:5f:70:84:e8:90:
f1:4e:91:4a:da:e0:c2:46:2e:ad:c6:68:d9:ed:20:
63:11:90:72:3b:93:5f:04:11:72:fa:06:ed:10:d9:
75:1e:78:c0:fb:4d:d4:a0:96:26:e6:1c:d9:11:6c:
9c:a1:c3:01:92:cc:03:b6:60:57:24:2f:95:08:3e:
61:d7:9d:5e:94:4e:4d:89:cd:89:84:7c:09:aa:44:
41:bd:ff:39:37:52:31:bd:87:30:57:72:a8:7d:24:
e1:4f:e9:57:17:c2:2c:3b:03:61:68:f3:08:06:2e:
12:5c:7a:26:6d:42:35:57:a9:b8:82:91:41:08:63:
e3:df:0b:55:74:de:61:a5:1f:4f:67:ce:ed:7f:c5:
8f:66:ef:61:a0:07:13:77:01:7f:99:68:4b:ca:01:
f0:c6:21:63:3c:5a:4d:20:e6:9a:7f:5e:ae:b9:51:
6b:d5:49:d3:2f:7f:ea:a8:27:2e:63:70:b2:a4:d7:
7c:b8:39:c4:d7:fd:f2:47:b9:2f:20:5e:fa:e5:66:
7d:73:2e:dd:78:64:18:84:f7:81:28:fc:ec:02:77:
97:39:19:f1:1f:3f:84:b8:2b:09:95:fc:b7:dd:55:
a6:35:55:ce:bb:40:b2:4a:af:4d:fa:43:e6:9c:03:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:95:C9:4D:2F:16:04:22:09:BD:6C:B7:A6:C7:62:A7:0F:16:D8:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/14EF74F4F62D11EFBFCF4684762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.48.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:04:c8:17:97:4e:04:e8:c6:74:b1:18:0f:ea:1d:a5:a4:
d6:c5:d7:43:26:39:55:33:b3:05:7c:d6:90:72:87:f7:9f:2e:
bc:9d:f8:df:79:a1:c6:62:c2:b7:d1:53:97:cc:4e:1e:80:26:
62:b2:9f:fe:46:de:87:f8:a1:c2:04:db:e7:6b:53:a7:bf:e0:
66:92:35:78:10:4f:cd:51:b9:6b:ed:1e:4b:67:85:00:0f:9a:
81:7c:9b:1a:d8:e4:62:4d:a5:98:7d:9b:10:be:b4:d2:7b:cc:
f6:5a:db:fd:92:1c:13:2e:f6:a2:f3:93:55:a8:42:ac:51:00:
c8:2c:80:3e:2f:06:4d:70:65:9c:b8:08:c8:9b:32:f9:84:1c:
32:0a:94:b3:d1:69:27:43:b2:a8:41:70:3c:0e:bf:1d:69:2c:
df:8c:04:1b:94:95:f1:10:71:b2:a1:91:22:7d:85:1c:be:73:
0a:bf:ec:fe:9b:80:87:8f:21:d0:d6:6d:39:35:cd:66:a7:a5:
3c:db:52:3a:32:66:d5:b1:05:e5:5f:95:39:83:d3:b5:67:80:
be:73:0c:bd:89:3a:8e:39:25:e5:99:af:27:d0:f0:1f:af:d3:
9b:0c:ae:23:f1:45:37:d3:1f:56:e3:92:c9:1f:d6:5b:75:57:
b4:92:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:22 2025 by rpki-client