Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20826C98F62F11EFBAE70E92762E951A.roa
File: 20826C98F62F11EFBAE70E92762E951A.roa (raw, json)
Hash identifier: D/90VJlno/eoZ+OkBv40lVW6yhnKdCqlJdat99VMYdE=
Subject key identifier: 88:0A:EB:11:1E:1C:F3:5E:BA:B5:54:7B:08:18:56:13:8E:EE:9D:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CEB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20826C98F62F11EFBAE70E92762E951A.roa
Signing time: Fri 28 Feb 2025 23:52:54 +0000
ROA not before: Fri 28 Feb 2025 23:52:50 +0000
ROA not after: Sat 19 Apr 2025 23:52:50 +0000
asID: 138915
IP address blocks: 154.93.54.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93419 (0x16ceb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:52:50 2025 GMT
Not After : Apr 19 23:52:50 2025 GMT
Subject: CN=67c24c56-112d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:85:94:84:9c:b8:07:a7:85:13:60:62:af:eb:
35:27:97:d2:6f:0e:bd:2f:4d:9e:71:84:bd:68:31:
b6:72:0f:23:19:aa:53:85:4c:6a:af:f8:ad:5e:e7:
23:cc:7d:33:2c:5f:79:40:e7:d9:4c:42:1f:29:60:
49:12:69:da:d5:8a:87:6f:b4:cd:e7:56:b4:d6:37:
9f:52:bd:95:95:87:fd:20:35:22:f5:5f:aa:c6:86:
c7:57:5f:9c:9b:fd:bc:cb:c7:90:10:eb:50:c4:65:
0c:54:4d:7d:50:a3:cf:5e:06:87:fb:f1:98:bf:6c:
bb:53:e9:02:1a:28:2d:c9:05:d6:1c:47:13:f4:be:
31:ea:c0:1f:53:a3:aa:cf:78:ed:5d:51:9b:07:74:
07:34:e7:8b:7f:21:19:5f:4b:65:04:1c:d4:75:b5:
19:a4:73:e5:23:b4:72:d6:ba:a2:3c:7a:05:cc:be:
84:9b:73:2f:3d:00:5f:be:7f:c1:2c:64:e6:49:3e:
b8:bd:29:78:3a:97:50:29:06:45:06:18:65:09:7d:
e2:ee:44:0b:36:c4:08:0b:c9:a4:c0:88:72:b6:a0:
6a:0d:b2:46:ec:45:3b:86:5c:43:31:fe:57:7e:9a:
31:d0:b7:38:72:44:d1:c5:b1:3b:15:ce:28:76:07:
69:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:0A:EB:11:1E:1C:F3:5E:BA:B5:54:7B:08:18:56:13:8E:EE:9D:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20826C98F62F11EFBAE70E92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.54.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:06:05:a8:b8:91:8b:06:4c:61:09:25:0d:2c:43:c7:48:ec:
a4:77:9d:b9:07:af:e7:41:f5:98:30:c6:e5:a4:b5:28:ca:cc:
be:9a:2c:30:4a:4b:23:3d:13:1a:b6:2c:d1:89:28:3e:25:ed:
92:c7:83:cc:ff:48:f7:74:b3:bd:19:d9:99:5c:1a:b5:2e:5a:
cf:b6:6c:03:c0:7a:94:7f:e7:dd:83:63:b1:5e:28:99:dc:77:
ec:6b:2b:47:39:cd:9d:a6:e1:a1:4b:69:29:d5:d1:3f:84:85:
1a:ad:22:c2:70:75:36:4f:2d:67:e6:e7:1e:ed:34:51:25:85:
03:00:4f:17:f0:c5:ba:6f:77:b5:21:2d:6a:87:3c:cd:fc:5d:
dd:a6:7a:2d:7d:68:7b:a3:54:31:ee:44:a2:b8:3e:a2:cb:5f:
b2:91:1d:d9:d0:47:5e:a7:25:17:64:90:47:dd:82:a7:5f:88:
c6:18:5e:bb:e6:c8:6e:0a:13:cc:73:1e:cf:9f:de:9a:90:f1:
4a:c2:e6:42:e3:ec:2d:79:df:6a:ef:6a:56:2e:c3:95:6f:11:
09:89:4c:e1:4b:a6:36:f0:89:f7:3a:fd:ad:ac:69:3a:c2:b8:
a0:ac:d9:51:af:4e:f8:5a:a4:2d:72:e4:79:68:7e:14:cc:87:
2a:cf:3e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:02 2025 by rpki-client