Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6093039EC36511EFB8A6AF9F762E951A.roa
File: 6093039EC36511EFB8A6AF9F762E951A.roa (raw, json)
Hash identifier: B+aOyX0dWJR65SEuCDpHr4+hhEId4vNqMcPgceCHgAc=
Subject key identifier: 16:C9:4F:60:08:A3:D7:91:28:51:1E:80:D5:AC:F5:7F:B5:E2:A3:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0126A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6093039EC36511EFB8A6AF9F762E951A.roa
Signing time: Thu 26 Dec 2024 08:42:45 +0000
ROA not before: Thu 26 Dec 2024 08:42:41 +0000
ROA not after: Fri 12 Dec 2025 08:42:41 +0000
asID: 984
IP address blocks: 154.94.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75432 (0x126a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 08:42:41 2024 GMT
Not After : Dec 12 08:42:41 2025 GMT
Subject: CN=676d1705-b57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:eb:fc:f7:98:35:57:f1:49:9c:29:ef:52:12:
e2:d0:22:ce:63:47:ac:0e:f6:b6:57:a9:b3:fd:c0:
2b:d2:58:31:f1:c6:a5:42:aa:4b:10:a3:b2:af:c9:
95:b6:ca:08:09:9c:a8:f6:54:84:c8:36:dd:07:70:
b1:c2:a9:6a:a5:b5:06:93:bf:ef:f4:05:a6:02:27:
a6:fe:38:2e:41:f9:34:76:9e:38:85:07:13:35:70:
f9:46:fb:24:db:84:a7:8a:e0:bb:3c:15:b7:b0:41:
85:78:52:0e:be:e9:d7:0d:3e:20:bf:32:68:62:82:
39:98:b3:c0:93:43:2f:59:e9:a8:57:33:94:5e:41:
0e:b6:e4:16:3e:df:00:39:ea:03:e2:c2:f3:84:3f:
a0:02:f4:5e:75:07:fb:58:93:ea:1c:8e:9d:fb:6c:
79:9e:a2:fe:51:18:df:f6:d2:a0:0d:c5:9b:36:51:
7a:4d:37:a5:ec:e2:60:ae:bc:ab:8f:6a:40:b9:13:
60:f5:d6:fc:04:9e:df:76:df:83:6a:da:44:38:48:
93:09:1e:de:a8:b2:3b:89:9b:38:9b:d4:f8:a5:c2:
f8:19:c1:f0:8d:89:9b:0e:fd:7b:8e:81:e2:49:06:
97:ad:e5:fb:2f:6d:26:49:0e:1c:f2:ee:4e:4f:82:
3f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C9:4F:60:08:A3:D7:91:28:51:1E:80:D5:AC:F5:7F:B5:E2:A3:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6093039EC36511EFB8A6AF9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.2.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ea:9d:75:69:62:c8:35:4a:90:4d:1a:dc:86:0b:dc:ab:96:
e8:01:ea:1b:c8:ea:65:86:fe:88:20:da:fb:6e:a2:20:b5:ba:
fd:d2:f0:e9:2a:eb:f6:36:7e:50:00:77:27:76:01:27:70:cb:
0b:9d:5d:52:72:40:1b:84:51:4c:5d:c6:73:fd:56:5e:b6:19:
c1:b6:b4:3c:16:37:a5:ef:78:e1:6b:4e:61:8d:d4:40:e1:32:
dd:a9:98:cd:ef:c4:6c:38:56:bd:af:55:97:c4:c0:a9:69:8a:
f3:3a:9c:e3:37:6a:22:6c:72:de:28:00:85:98:40:f4:bd:c5:
cc:d2:78:a4:80:76:af:4f:62:29:5d:a2:80:0a:c1:19:04:e5:
ae:1b:c6:fc:64:4b:5e:9e:c8:bc:46:70:08:50:3a:65:04:62:
c1:76:08:15:ff:6f:e5:4e:06:7b:f8:3e:c8:35:31:65:91:32:
2f:d1:eb:ae:e5:2c:47:6e:fc:25:a2:f7:81:98:9d:a5:d6:57:
96:0f:a9:44:1d:34:9e:32:64:a2:ae:77:14:ea:17:c3:37:73:
66:ce:6c:40:e6:df:b8:38:69:a3:dc:df:e1:e2:9f:6f:65:ce:
f8:f2:49:f6:ca:ea:8f:c4:35:b9:8f:ee:55:a5:1d:05:e1:1a:
b3:6e:aa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:27 2025 by rpki-client