Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93D8D392E24511EF937EFE7F762E951A.roa
File: 93D8D392E24511EF937EFE7F762E951A.roa (raw, json)
Hash identifier: wj4KDLjPOyS+o0EXQnWNNYsRXtbZPt7L6YFzZE2cOUQ=
Subject key identifier: AB:C1:ED:7A:74:03:A8:8C:3E:8C:D3:60:F2:02:C6:B1:5F:00:B9:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015049
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93D8D392E24511EF937EFE7F762E951A.roa
Signing time: Mon 03 Feb 2025 15:43:13 +0000
ROA not before: Mon 03 Feb 2025 15:43:10 +0000
ROA not after: Wed 30 Apr 2025 15:43:10 +0000
asID: 150008
IP address blocks: 154.206.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86089 (0x15049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 15:43:10 2025 GMT
Not After : Apr 30 15:43:10 2025 GMT
Subject: CN=67a0e411-c19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e1:31:a7:15:4a:e0:4e:4f:61:15:6d:e9:c7:
9f:5e:09:14:21:87:d3:80:6f:6f:3f:27:a3:29:98:
d4:35:28:72:18:ae:8c:0f:77:6b:25:de:7b:83:d6:
c3:24:54:f1:b6:f2:51:68:b5:3f:95:59:9c:21:f7:
25:a0:d8:67:1f:93:1b:1a:c0:01:8c:5b:ba:ff:ee:
04:89:7e:46:78:02:e0:77:40:30:88:30:f8:2e:56:
78:19:98:55:42:79:ce:fc:c5:ac:8a:55:31:e3:bf:
db:5c:e3:41:5b:55:03:9b:6f:c3:b8:d6:f7:7e:67:
63:16:74:2f:99:ce:c3:b6:5c:30:62:d0:a4:e7:16:
a6:8d:bf:cd:cb:60:37:51:99:f1:92:3a:c6:a7:6c:
20:1b:8e:80:9f:f5:7f:ab:6d:59:e5:eb:a2:25:ef:
46:fd:85:ca:59:64:e8:13:bb:90:a0:ed:bc:1a:56:
1d:8e:50:42:f4:c2:f7:c8:ee:42:fa:28:f2:2a:05:
a5:d3:2f:c0:b2:53:91:2b:fc:45:8a:b2:a7:a6:2b:
d0:8f:7a:da:6d:04:3b:8b:4a:12:45:d9:e1:fc:44:
7e:a4:70:a5:25:8a:07:c8:3f:f7:6d:f7:a3:1a:f1:
8e:46:4e:51:85:e8:43:2e:82:5e:cb:f7:2d:ae:5f:
69:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C1:ED:7A:74:03:A8:8C:3E:8C:D3:60:F2:02:C6:B1:5F:00:B9:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93D8D392E24511EF937EFE7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.29.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ad:97:19:ef:1e:7e:3e:cc:fd:78:0c:2f:47:d6:e3:a0:a4:
88:df:7f:a8:be:28:f5:ba:11:93:ef:6f:63:aa:3a:a6:c6:76:
42:82:7e:ed:a4:2a:ef:a5:6d:25:68:97:f8:61:71:78:6e:64:
18:e2:7a:4b:8a:67:aa:5b:7a:9a:3a:b5:75:dd:76:7b:04:56:
b3:f0:1c:b8:12:ee:4b:dd:48:b2:44:0c:da:f2:8a:90:a3:1f:
2e:9a:29:22:8e:4e:0f:33:70:01:19:fa:b8:85:14:71:a3:54:
6a:29:dc:25:ec:51:31:50:ab:78:84:b4:bf:f5:50:ae:f0:9e:
61:82:ed:95:bf:37:3f:80:61:84:76:9d:de:53:0a:3b:c0:98:
f3:93:ba:7b:51:9b:17:e9:9b:de:e7:a3:54:ac:36:6a:b6:a5:
4f:8e:b7:ed:13:63:5c:1c:d8:c5:99:5e:3e:62:9b:1f:11:6d:
81:d9:da:00:8e:49:0c:77:a1:a7:71:4e:34:ae:2d:e3:05:3a:
90:c2:3a:83:b0:38:96:fe:5d:7b:50:55:fe:71:21:56:c8:03:
63:bf:f1:c6:c0:5e:30:06:5f:91:79:bf:e2:3a:11:78:00:7c:
8f:ca:6a:b6:bc:a4:9d:79:91:4a:e2:a8:d0:35:8c:e1:67:41:
88:e3:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:20 2025 by rpki-client