Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B77254AD8BF11EF87EADE46762E951A.roa
File: 7B77254AD8BF11EF87EADE46762E951A.roa (raw, json)
Hash identifier: mSws9NypSKp+YlKT8qP2Fl/qlUZ8TLqElfimhVGTT+I=
Subject key identifier: D4:DF:07:32:C1:90:A1:51:88:63:61:8A:7E:F0:F8:6C:7C:32:92:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B77254AD8BF11EF87EADE46762E951A.roa
Signing time: Wed 22 Jan 2025 12:50:39 +0000
ROA not before: Wed 22 Jan 2025 12:50:36 +0000
ROA not after: Tue 01 Apr 2025 12:50:36 +0000
asID: 136907
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81758 (0x13f5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 12:50:36 2025 GMT
Not After : Apr 1 12:50:36 2025 GMT
Subject: CN=6790e99f-921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8d:8c:66:4e:34:e7:3b:14:47:ca:f4:d3:cc:
c5:77:23:d2:12:13:e5:58:9c:6f:84:dc:09:5c:39:
83:a6:52:dd:da:1e:59:bd:20:4a:14:15:89:c5:e5:
55:b7:47:43:c2:78:fe:ab:be:b5:99:44:52:c8:0b:
a3:1c:e9:a0:ad:14:ff:22:0f:2b:90:5b:d0:f1:4c:
29:a4:56:e2:aa:46:4d:f8:33:01:32:76:77:fd:df:
5b:fa:1c:19:45:4a:55:52:fc:0b:f4:91:8d:87:bb:
2f:a5:df:a7:17:ac:a7:76:ff:69:8e:7d:c2:82:2b:
db:1a:75:e0:8b:0a:0a:c9:e9:0f:88:2b:aa:3c:00:
33:26:25:98:bd:56:44:f0:c4:b7:73:cb:3c:9b:dc:
d2:27:8f:60:15:d0:63:f2:a2:4b:69:62:34:72:7c:
c8:94:30:4a:4b:d9:7e:2d:1b:f4:67:31:c3:37:11:
8b:0d:37:72:e6:e2:d7:8b:90:2a:5b:24:c2:42:aa:
63:f9:dc:69:b8:57:cd:65:2a:7f:e7:6d:a6:a9:ea:
f8:1b:4b:f5:0b:8b:cf:5a:8f:9d:d4:94:70:6e:71:
dc:b4:16:ef:05:c1:93:80:0c:d0:7b:9c:fe:49:6a:
ed:02:60:95:99:68:ff:cf:af:f0:a6:0f:68:ac:23:
4c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DF:07:32:C1:90:A1:51:88:63:61:8A:7E:F0:F8:6C:7C:32:92:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B77254AD8BF11EF87EADE46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
60:f9:40:c3:f9:2c:91:75:a4:60:ae:00:71:30:87:43:ba:e4:
82:df:e7:a6:45:12:3d:b3:72:b6:56:aa:1f:05:c9:eb:85:ad:
e6:ed:c1:a6:81:23:42:20:e0:79:07:60:1a:65:af:0a:2f:68:
07:a9:cf:02:c7:a9:3a:3d:a8:0c:8f:17:d4:53:6a:ce:08:9d:
98:a6:fd:2b:ba:f2:9f:bd:1b:ea:b3:1b:17:90:f6:18:98:16:
fc:6e:b2:ed:db:35:53:29:ec:73:03:66:03:dc:51:b3:37:d4:
bb:c2:88:a7:21:7d:b1:34:88:c6:83:8a:7a:4a:8e:9a:cb:06:
b0:0d:7e:23:1a:71:f4:be:a8:4c:3d:5d:f1:30:e0:95:ab:e4:
0f:fb:f4:be:34:5b:b1:7f:f4:e5:a0:78:80:ce:bb:e1:ac:6c:
b7:07:8f:38:f2:da:83:c8:d9:f4:98:31:30:7c:9c:8f:59:7f:
38:d5:10:0f:3b:e0:20:1c:ad:5e:57:3d:56:ca:2d:79:23:ec:
34:8b:20:fd:57:63:6a:5d:bd:16:17:97:50:84:6a:e6:f9:14:
42:a5:87:89:24:2f:18:9a:98:4f:4f:bc:fa:0a:a6:83:ba:5a:
38:c9:70:b7:02:24:42:14:6f:2e:36:34:12:14:1c:74:21:a3:
ec:c7:de:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:20 2025 by rpki-client