Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1990F970C36411EF9BB4C098762E951A.roa
File: 1990F970C36411EF9BB4C098762E951A.roa (raw, json)
Hash identifier: pkuwzj0EKM8dw0krKZLSegOT3dzk3GJiCxBqzrkoQJw=
Subject key identifier: C6:59:5E:28:1E:3F:FC:66:41:6C:46:45:50:51:81:08:2A:5C:54:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01268E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1990F970C36411EF9BB4C098762E951A.roa
Signing time: Thu 26 Dec 2024 08:33:36 +0000
ROA not before: Thu 26 Dec 2024 08:33:33 +0000
ROA not after: Sun 12 Dec 2027 08:33:33 +0000
asID: 17561
IP address blocks: 154.93.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75406 (0x1268e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:33:33 2024 GMT
Not After : Dec 12 08:33:33 2027 GMT
Subject: CN=676d14e0-9aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:6b:b3:7d:14:56:54:56:e7:7c:b0:08:f9:
cc:16:e0:ea:03:98:26:88:a5:03:3d:23:33:f9:1e:
f9:6a:cb:55:2d:37:6c:17:f8:57:4b:79:a6:39:9f:
36:1d:1c:4a:47:4c:a3:9f:8b:44:88:29:ef:d4:b6:
d7:6c:98:26:47:1f:64:e1:3b:70:fc:1c:f6:8c:fb:
5c:c1:e4:2f:18:f6:3c:f1:08:54:c6:7c:48:68:de:
5c:1e:e9:43:af:e8:09:01:da:ec:f4:d6:06:5c:0d:
2d:a5:e0:cc:df:37:2c:55:48:0f:ce:df:97:b5:d8:
86:9f:86:15:cb:24:47:79:c9:b3:2e:52:d7:d4:9b:
a4:06:4c:2e:af:00:3f:3f:4b:3b:e4:fd:36:54:e8:
15:cb:6a:2a:4b:23:fd:23:97:81:59:89:4b:62:03:
33:a1:8f:53:94:46:52:d6:76:00:1b:23:c8:72:9f:
67:08:3c:74:ee:27:5f:5e:5a:07:17:04:42:f1:d9:
52:aa:9f:ca:2f:b2:17:8c:dc:92:85:e5:7b:e5:15:
61:a7:95:73:0f:da:7d:b7:46:5f:6f:fc:e3:8c:c0:
c0:89:0a:45:3e:d8:8e:5d:fb:5e:bd:ca:09:5e:06:
db:b4:91:f0:09:5e:e4:3a:97:5a:81:f9:cf:d8:3d:
90:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:59:5E:28:1E:3F:FC:66:41:6C:46:45:50:51:81:08:2A:5C:54:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1990F970C36411EF9BB4C098762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.15.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b7:24:72:b1:c9:ea:70:df:3a:69:da:75:4a:66:c1:f5:ab:
62:52:1b:d7:49:ef:40:c4:59:36:8c:32:38:0f:1b:85:16:d0:
bb:50:ef:d3:84:2c:b7:48:1a:93:f3:33:73:f9:e7:95:80:49:
c7:85:57:c0:c0:3d:12:92:49:3e:ae:4f:d8:8f:83:a6:a1:1e:
79:ea:c1:83:4f:7d:9d:27:f3:b9:23:70:af:f5:ad:b3:93:7e:
65:c8:14:5b:04:a0:76:43:dd:46:67:8b:29:b8:17:2b:93:ae:
fe:7c:d5:15:a1:54:ce:da:5a:0e:81:af:77:aa:65:29:ce:6e:
b1:6f:af:33:39:14:56:26:92:86:7d:2c:8c:e4:cb:a1:23:b9:
61:fe:b2:71:08:8e:ab:bb:ed:ee:38:27:e3:82:bb:b7:8e:b7:
77:bb:5c:45:b3:05:51:90:36:aa:56:9c:79:a4:00:26:5a:23:
49:d2:6a:76:07:b8:aa:0d:71:f4:1a:e2:36:03:17:2d:45:df:
85:24:04:5a:54:6d:09:ae:1f:f5:a2:e1:a0:ed:7f:c1:28:e8:
3d:80:ef:aa:97:24:ac:f9:43:90:6b:e0:d9:eb:c1:f4:ff:1c:
c1:b5:b1:44:58:4e:f1:2c:57:4b:46:37:43:92:f1:87:1c:11:
85:7a:d7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:11 2025 by rpki-client