Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3C603E2D8C711EFA626E97D762E951A.roa
File: A3C603E2D8C711EFA626E97D762E951A.roa (raw, json)
Hash identifier: a1+RrHksuEjGZjmDK+EM1rZcBMcVOxTH97Cl+p+injk=
Subject key identifier: DE:E6:FC:FE:1A:A2:5B:B6:9D:7F:F4:F1:F6:E7:7E:7A:BD:37:AC:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3C603E2D8C711EFA626E97D762E951A.roa
Signing time: Wed 22 Jan 2025 13:49:03 +0000
ROA not before: Wed 22 Jan 2025 13:48:59 +0000
ROA not after: Tue 01 Apr 2025 13:48:59 +0000
asID: 63139
IP address blocks: 154.93.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81806 (0x13f8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:48:59 2025 GMT
Not After : Apr 1 13:48:59 2025 GMT
Subject: CN=6790f74f-c092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:58:3c:53:f7:20:7a:6e:ff:2b:05:68:fc:
41:8b:da:2d:0c:7e:b7:6e:85:d5:fb:1d:12:15:8d:
16:94:a5:70:3b:ff:da:57:06:c9:20:9d:14:b7:c9:
de:f9:46:0a:ba:86:a9:8c:52:fb:08:74:d4:89:48:
eb:81:ca:b9:37:20:29:a3:5c:b9:41:0c:ee:97:fe:
88:d5:b1:fc:40:58:d7:31:94:84:2a:85:4f:ff:ad:
7e:45:f4:d8:28:45:ca:44:4b:fe:c0:92:9a:05:87:
11:3e:b9:19:4c:41:e6:80:55:be:16:96:c2:d3:6d:
d5:a8:33:a4:3f:d0:da:a5:e9:fd:d1:00:66:f1:71:
35:73:ae:52:98:8c:ce:3e:7d:50:b2:2e:22:fe:fd:
96:72:66:9a:db:1a:a8:c7:45:94:24:fd:a0:a5:bd:
5e:25:36:14:39:6b:f8:f6:07:19:01:89:92:7a:fa:
fc:b8:20:8c:04:ae:9a:8b:8d:a9:2e:cf:a6:6a:12:
18:a7:f1:0d:f2:24:0c:b4:ec:8e:26:71:85:aa:26:
62:82:bc:13:d3:26:51:fd:02:a0:ae:3d:f8:2f:60:
63:72:1e:d5:d4:87:21:84:f3:bd:cb:24:54:2b:26:
4f:31:3a:8d:bc:dc:90:c3:e2:15:e6:e3:a5:de:69:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:FC:FE:1A:A2:5B:B6:9D:7F:F4:F1:F6:E7:7E:7A:BD:37:AC:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3C603E2D8C711EFA626E97D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.78.0/24
Signature Algorithm: sha256WithRSAEncryption
99:92:bf:2a:19:02:af:58:15:17:a1:ff:13:6c:49:ef:08:f1:
51:ca:92:e6:f0:b9:60:a7:3e:10:6a:fd:bf:f5:65:d8:68:5d:
fe:fa:6e:f0:14:04:f9:57:8f:0f:61:a5:35:40:81:a6:ec:d6:
3e:02:e8:33:21:17:eb:9f:1f:24:aa:05:8d:13:69:5c:bc:c8:
8d:e9:c0:3a:30:27:ee:b0:c7:61:f6:68:0f:eb:3b:39:07:7a:
46:0f:1a:db:90:8c:83:8e:10:e8:39:c8:98:81:37:46:2d:09:
fd:4f:5e:9e:4c:47:68:8c:0a:2d:38:10:c0:87:c3:c7:4c:5f:
51:32:88:1e:94:fd:6e:3b:ca:b4:bc:a7:0c:2b:87:f6:fa:a9:
0a:f6:b9:d5:69:99:93:7c:57:5c:45:8e:56:13:aa:ac:3b:24:
72:bf:59:7b:45:0d:6c:5c:c0:06:2f:f1:89:ed:8e:6d:47:83:
39:4c:eb:2e:f7:64:69:27:fe:86:38:1d:bf:1b:67:81:10:22:
cc:32:7f:16:ae:9b:12:47:14:da:02:ad:8e:1a:0c:ee:5a:c9:
db:98:dd:65:5f:2c:d4:3d:ad:ea:8f:aa:64:46:78:72:e1:44:
6f:21:d1:d2:a5:f3:50:38:2c:83:24:90:4d:39:d1:d9:eb:06:
57:b2:40:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:55:52 2025 by rpki-client