Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4939D0D8CE11EF97ACAFAA762E951A.roa
File: 6E4939D0D8CE11EF97ACAFAA762E951A.roa (raw, json)
Hash identifier: bBXxvdOdWupebY7qga0bK1KNw655ZHPp1XkbWRbCOYQ=
Subject key identifier: 16:A5:58:97:48:B7:E7:87:AB:3C:FD:1D:83:85:BF:EE:48:31:3A:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4939D0D8CE11EF97ACAFAA762E951A.roa
Signing time: Wed 22 Jan 2025 14:37:40 +0000
ROA not before: Wed 22 Jan 2025 14:37:36 +0000
ROA not after: Tue 01 Apr 2025 14:37:36 +0000
asID: 63139
IP address blocks: 154.93.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81834 (0x13faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 14:37:36 2025 GMT
Not After : Apr 1 14:37:36 2025 GMT
Subject: CN=679102b4-8642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:90:a8:03:23:98:60:69:b7:52:dd:5e:65:
60:e0:ef:d5:8b:76:bc:9e:d1:8f:c1:63:37:5f:46:
17:c3:0a:5f:06:12:c6:f0:31:8a:cb:39:38:a7:bf:
a2:7a:6a:9f:5a:d3:07:a0:cf:2f:12:2b:13:ef:67:
e9:a3:f4:79:a4:d8:8c:41:58:09:25:8b:29:2b:7d:
8f:03:db:3e:cb:55:ec:69:ad:50:74:04:2b:e2:f4:
54:7a:eb:bf:7b:0b:d8:85:69:51:fd:89:0b:4d:f6:
f4:24:16:c1:04:50:fd:f4:95:ac:8b:bd:51:10:6f:
02:a5:ef:07:31:a7:70:6b:a5:2e:30:10:1f:b3:e1:
67:0f:50:16:92:9e:0d:70:19:27:35:68:e9:1e:71:
17:f5:3a:26:7b:85:cb:ed:c2:ba:bb:a0:a8:cf:3c:
ba:54:b2:f2:b9:00:03:0e:93:72:ba:6e:6b:1c:ec:
19:8d:a1:71:8f:67:06:9c:96:2c:62:a7:8b:de:77:
bd:60:df:c0:95:b7:9d:ea:01:89:26:8d:52:4b:8a:
f0:f0:90:87:f3:77:91:43:7e:21:4c:53:76:d9:ac:
7b:33:1a:45:ad:a7:98:67:1f:f0:9f:3b:f4:f5:46:
8a:2d:b0:dc:69:1e:b5:16:a9:5a:00:3e:6c:58:bf:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:58:97:48:B7:E7:87:AB:3C:FD:1D:83:85:BF:EE:48:31:3A:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E4939D0D8CE11EF97ACAFAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.65.0/24
Signature Algorithm: sha256WithRSAEncryption
65:90:4f:94:9f:f1:60:72:1e:0c:b2:a0:38:76:76:a3:2f:78:
c0:70:a3:0e:95:76:b4:68:20:c4:17:b1:6c:c5:83:46:0e:dc:
68:67:b6:6f:3e:33:85:f6:d5:f1:68:96:97:be:ca:dd:8b:ef:
3e:c5:f8:a9:e4:28:b6:c5:e4:ba:2f:f8:7a:dd:bc:f8:c7:1d:
39:43:4d:69:e4:57:93:aa:f4:66:73:fd:84:7d:7e:72:ce:e2:
47:75:6a:02:5c:29:ef:b2:7f:09:76:e7:41:fb:23:c1:08:ae:
da:30:d9:8b:5b:47:98:55:67:a4:04:a7:3e:a1:46:17:8e:0f:
f6:bf:d6:d0:06:48:2f:1c:0b:e9:bb:1a:43:9a:75:4f:4c:86:
ae:76:27:a7:9d:7e:ec:47:7b:94:92:09:c6:a6:85:f8:c8:99:
57:3e:cd:90:18:c4:9a:1a:10:5d:4a:77:c9:8c:d5:80:b6:2a:
06:00:9b:e2:d2:96:07:95:0e:a3:89:f0:53:48:cd:0a:80:a9:
e0:45:e2:a8:b2:17:6e:5f:9e:ec:03:a7:1c:82:e6:86:b6:a3:
9a:ef:73:8f:75:55:81:22:0c:e5:4b:c3:51:33:b9:03:bf:ad:
df:91:e6:04:ee:d0:c8:52:05:1f:64:f7:5f:c8:ee:f9:e6:1e:
33:ce:a8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:48 2025 by rpki-client