Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B266E2DAE9EE11EF906741A0762E951A.roa
File: B266E2DAE9EE11EF906741A0762E951A.roa (raw, json)
Hash identifier: eUiFt9iyljmgoPjm3t+d4yqL3rmaP9m5K2Si2anhII4=
Subject key identifier: 4C:7F:FB:42:80:20:39:8C:28:21:98:29:1F:CE:4B:76:7F:DE:5A:9A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0156C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B266E2DAE9EE11EF906741A0762E951A.roa
Signing time: Thu 13 Feb 2025 09:41:28 +0000
ROA not before: Thu 13 Feb 2025 09:41:24 +0000
ROA not after: Mon 19 May 2025 09:41:24 +0000
asID: 132825
IP address blocks: 154.93.24.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87752 (0x156c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 13 09:41:24 2025 GMT
Not After : May 19 09:41:24 2025 GMT
Subject: CN=67adbe48-1158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:ae:4d:b1:84:06:2d:6c:f6:81:fe:80:64:
46:20:36:0f:c3:32:de:d2:ef:1e:f2:12:a1:8d:15:
a1:24:48:fc:2f:96:4f:1e:ca:dd:03:6a:c1:2d:dc:
a0:17:1e:a3:c1:58:50:6c:e9:e4:40:e6:89:fd:80:
76:9b:ec:c5:8e:4d:62:7d:34:8e:df:65:0b:04:75:
ab:15:a8:7e:a3:80:2a:76:e2:a4:80:4e:20:c8:db:
20:92:76:7d:cd:bc:5a:9d:13:96:09:c4:2f:cc:15:
29:10:41:ea:4c:b6:71:0e:1c:8f:b5:7b:2e:aa:3f:
48:4e:b8:f5:04:f2:b0:20:42:b8:b8:2b:12:ba:f8:
c8:0e:d8:3a:a8:be:4c:73:4b:2b:25:49:8b:ed:e8:
a0:e8:61:6d:08:12:e6:2c:f4:8a:08:37:8b:52:df:
fb:9c:af:db:c1:35:91:e0:f0:a8:76:d6:75:a8:4b:
72:62:f1:77:40:33:86:5d:d9:7a:7a:02:37:c4:cf:
ac:19:d6:0f:c9:b0:c8:87:01:fc:fc:99:05:db:d2:
1a:17:f8:79:15:1c:9c:e4:34:8d:31:29:6e:78:9a:
0d:48:74:46:34:92:2b:b7:3e:cf:9c:65:8e:7e:2d:
27:89:3d:eb:9e:2e:7f:a9:f2:ab:dd:02:42:4f:29:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7F:FB:42:80:20:39:8C:28:21:98:29:1F:CE:4B:76:7F:DE:5A:9A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B266E2DAE9EE11EF906741A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.24.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:85:51:ec:7e:e0:10:07:66:a8:3b:0e:1a:b2:57:38:d6:df:
33:4c:1e:f8:fa:a9:c5:50:de:6e:5c:83:27:ed:cf:20:7f:22:
9b:29:0a:c1:b9:c4:aa:8a:ca:b0:04:c4:d7:ea:39:0b:9d:75:
48:b3:4c:6a:06:d3:eb:e4:7b:31:4a:28:18:5a:7e:c3:28:6a:
db:94:ab:6c:46:9a:a4:9a:7d:da:67:8a:8a:50:70:0a:49:c4:
60:2b:fe:1a:41:b9:a3:36:d2:3a:14:67:8c:25:bb:b6:a2:dc:
7b:35:ab:30:51:3d:80:0f:9a:24:8f:12:89:c5:11:9f:83:df:
23:68:5a:dd:0d:4b:70:19:ce:f6:91:d1:ac:0f:74:d1:b4:c6:
a0:06:b2:be:dd:e1:ae:ea:fd:60:49:21:e5:85:8a:08:0a:9d:
f4:53:e1:ff:2c:b8:dc:f2:d3:1a:49:ac:43:23:1f:0f:54:41:
52:e6:97:41:b2:ff:a4:42:9a:1f:a1:e5:9b:90:e9:10:3b:ee:
b4:47:9c:01:a9:62:35:b0:3b:38:1d:6a:04:53:1b:04:e7:15:
22:6a:17:9c:eb:cf:2c:ec:85:18:21:51:5c:d3:e7:6e:86:2a:
1a:53:04:2f:e3:d3:ec:b5:95:16:04:0b:40:7a:72:2c:1f:14:
58:ea:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:13 2025 by rpki-client