Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06C19B0F62D11EFB9F58A88762E951A.roa
File: A06C19B0F62D11EFB9F58A88762E951A.roa (raw, json)
Hash identifier: hWUUww5Z4ePwCiIoxkL8GYsbjURwfVljtg0VuUiKF80=
Subject key identifier: BC:77:F6:6E:E4:05:89:A9:31:98:9D:0D:4A:B0:66:9A:B4:C7:A9:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06C19B0F62D11EFB9F58A88762E951A.roa
Signing time: Fri 28 Feb 2025 23:42:13 +0000
ROA not before: Fri 28 Feb 2025 23:42:00 +0000
ROA not after: Sat 19 Apr 2025 23:42:00 +0000
asID: 138915
IP address blocks: 154.93.47.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93407 (0x16cdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:42:00 2025 GMT
Not After : Apr 19 23:42:00 2025 GMT
Subject: CN=67c249d5-e78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:85:3a:2a:e0:e3:56:b8:85:fd:b5:05:e9:
ef:3a:6b:da:3f:7b:e4:89:f4:a8:ac:82:3f:29:98:
51:f4:bd:ab:4b:95:9c:b1:74:e6:3d:a8:ff:49:18:
e1:57:c8:96:eb:13:ee:2b:b4:40:ba:69:ec:5d:04:
1e:15:57:1d:cc:da:1f:88:e3:33:81:17:56:09:18:
0f:f9:de:f3:32:e2:bf:e4:c6:b0:a5:a5:cd:7a:71:
56:5b:18:aa:69:75:16:d8:c8:e2:8e:01:2a:9d:70:
ad:e4:4c:ea:05:5d:df:cc:e5:9f:d0:d5:d3:90:b1:
e3:01:e5:0b:2c:6e:9b:15:2d:6c:6c:af:7c:c8:4e:
ee:e6:12:c8:4a:66:2a:89:6c:0f:04:e6:82:1d:cb:
41:d5:b4:33:f8:b0:d3:69:32:f7:e2:df:28:06:87:
a8:49:6c:96:cc:74:9b:ee:05:47:ff:34:ee:5e:4c:
ea:ba:e3:d5:91:d7:40:90:6d:0c:e0:ee:1a:8a:a6:
a0:8f:d9:d5:bc:79:3a:e8:f5:54:2d:30:63:36:7f:
61:62:ee:85:6d:66:c9:7d:e9:c9:72:a5:d2:a5:2a:
2c:66:f6:52:19:85:41:35:30:70:7d:d8:f4:1a:7e:
4c:84:b3:a3:b4:33:b3:66:d2:00:53:4b:8e:e9:81:
77:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:77:F6:6E:E4:05:89:A9:31:98:9D:0D:4A:B0:66:9A:B4:C7:A9:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A06C19B0F62D11EFB9F58A88762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.47.0/24
Signature Algorithm: sha256WithRSAEncryption
63:7d:f1:06:49:8e:24:0a:89:db:40:c0:1f:11:50:e9:1e:d6:
39:00:40:31:6b:dc:c6:80:0e:45:47:01:ea:14:26:0a:f3:f3:
7b:a5:34:1d:b2:5d:79:eb:48:2f:bb:05:fa:b8:cc:c8:71:e9:
a5:1b:de:19:af:11:6a:2d:88:9f:f6:36:03:44:d0:09:15:04:
3e:21:d0:2e:bb:f5:9e:e9:74:c8:70:e5:23:6c:b8:1a:64:70:
fc:e5:8c:2e:1d:72:bf:9f:6f:24:42:8e:8f:55:94:78:a2:c5:
bb:d4:77:dc:20:1e:94:7b:b8:5a:61:a7:31:7a:39:1c:db:6f:
90:bc:1e:ae:21:73:1e:83:af:d4:ff:4a:fe:db:8c:93:56:16:
9e:f0:6a:87:c4:67:e1:c3:a2:c8:30:5b:02:97:b7:09:c7:aa:
7e:67:73:4e:05:3b:69:fa:c4:88:19:67:7e:0b:11:08:7e:ca:
6e:ff:04:19:7c:f2:a8:bb:29:ad:56:36:2d:3c:f3:61:7e:1e:
0f:1e:88:8a:9c:ee:7c:54:f5:47:f4:26:af:41:6c:4c:aa:6d:
85:f7:6c:8e:5e:86:a6:2e:c6:80:fc:32:d6:fe:90:21:0e:52:
b7:d6:c2:05:58:82:34:16:0e:3c:f3:fc:93:79:cd:1a:27:e8:
58:66:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:21 2025 by rpki-client