Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53FCE7EAD8C711EF9124BF7B762E951A.roa
File: 53FCE7EAD8C711EF9124BF7B762E951A.roa (raw, json)
Hash identifier: W5qkUzkdcIvSlDZhSJ0OeSOb0hoMXw/YirvxSw61hAo=
Subject key identifier: B9:BF:64:B3:7D:2F:FF:DF:85:99:BC:C2:91:0D:A5:E5:3D:8B:24:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53FCE7EAD8C711EF9124BF7B762E951A.roa
Signing time: Wed 22 Jan 2025 13:46:49 +0000
ROA not before: Wed 22 Jan 2025 13:46:45 +0000
ROA not after: Tue 01 Apr 2025 13:46:45 +0000
asID: 63139
IP address blocks: 154.93.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81802 (0x13f8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:46:45 2025 GMT
Not After : Apr 1 13:46:45 2025 GMT
Subject: CN=6790f6c9-2dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:ae:27:73:29:66:30:c3:b8:0f:9c:97:49:
20:6a:07:70:4e:a7:f0:4b:ed:d2:d6:85:fa:b1:d8:
4a:70:cb:00:ba:40:e2:0e:c9:48:35:fc:96:87:7c:
c8:c9:70:b4:83:17:c9:0b:78:ee:9c:a7:3d:a7:bc:
d7:8a:af:8a:31:58:6a:c8:9a:ef:b4:73:12:a1:fc:
6f:c0:93:e9:1e:5d:c5:a1:25:c5:08:13:af:1e:08:
28:73:f9:e4:b6:3e:a3:2b:0e:f4:d9:35:7b:a3:bc:
ad:65:13:05:e2:73:d3:52:3b:0c:cf:1c:b8:86:b8:
fe:c9:3f:7d:f9:a7:84:0e:b4:93:f3:e5:a4:12:d8:
7b:0e:30:28:75:53:31:d5:67:37:19:ee:e3:f0:e9:
06:81:aa:78:e4:38:e4:53:c3:1b:93:c4:f1:7b:46:
d6:50:43:25:91:4c:cc:a1:5c:77:5f:50:73:3d:b0:
da:cf:2a:aa:15:79:01:ce:44:b2:ec:3f:da:25:59:
a5:69:a9:0e:5a:25:a6:f1:7d:aa:52:8c:7a:8c:14:
b9:cf:32:ae:67:8e:d8:5d:28:f8:70:2a:2e:4c:b1:
bf:d7:a0:94:68:4d:91:6e:49:ed:c0:e5:8c:13:ed:
d9:b9:20:8b:f8:08:cc:b2:19:ef:5f:1b:73:de:ac:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BF:64:B3:7D:2F:FF:DF:85:99:BC:C2:91:0D:A5:E5:3D:8B:24:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53FCE7EAD8C711EF9124BF7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:02:84:f9:0a:4c:a7:df:61:f6:87:c5:05:c0:20:73:76:fa:
24:6e:50:93:85:48:01:db:a7:4f:f2:5c:f3:e9:2d:3b:af:f8:
29:83:63:fa:aa:c1:a6:34:32:18:a4:b2:89:b0:55:4c:aa:18:
cf:99:c4:cf:f5:fe:b3:8b:6c:65:8f:9e:58:0e:0b:90:61:5d:
22:0b:69:3f:9a:52:60:bc:20:6e:dc:61:31:9d:e3:06:4a:1c:
5b:ee:b6:bd:e2:1c:39:ef:7d:8c:99:aa:ca:69:b9:46:ff:67:
32:72:83:67:cd:a6:76:db:01:9c:96:2f:27:62:5f:f7:4e:5a:
70:d1:fe:79:79:e6:1d:c0:64:75:41:89:18:0b:20:47:94:f6:
a4:05:6c:fb:4c:3b:5c:ba:12:75:d1:0e:46:a6:60:90:90:f7:
67:3b:04:ea:d6:58:12:85:67:c7:15:ce:0f:a7:4e:f9:c8:12:
51:ca:a0:cd:09:3d:06:8f:6f:8e:3c:3d:12:85:69:bb:bc:7e:
e7:30:a5:85:91:62:e7:47:8a:f9:9b:88:1d:13:c2:12:0e:03:
2d:81:1c:0c:75:3e:d5:43:4d:af:06:b9:8a:59:1b:46:db:76:
33:33:03:5d:5a:2d:d1:9e:23:b4:86:d2:e9:9b:3a:b7:0f:ab:
e3:04:4c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:54:12 2025 by rpki-client