Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5882D0AF82811EFAE0FEA89762E951A.roa
File: B5882D0AF82811EFAE0FEA89762E951A.roa (raw, json)
Hash identifier: L4L7zfCTPh9UZzVNH4fxkICUHXMXiwgCl7HynHS5/yk=
Subject key identifier: E7:EE:A2:AF:A6:A1:1A:A0:9E:FC:71:A4:16:0E:26:5E:2A:4F:DA:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01707F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5882D0AF82811EFAE0FEA89762E951A.roa
Signing time: Mon 03 Mar 2025 12:12:00 +0000
ROA not before: Mon 03 Mar 2025 12:11:56 +0000
ROA not after: Wed 30 Apr 2025 12:11:56 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94335 (0x1707f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 12:11:56 2025 GMT
Not After : Apr 30 12:11:56 2025 GMT
Subject: CN=67c59c90-4cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:28:e7:17:5d:80:1c:cd:81:73:33:b8:a8:ec:
3c:9c:9c:50:a0:46:75:95:41:f2:fc:57:2e:bc:c9:
d9:16:09:c5:78:8c:6d:70:b7:3c:24:fa:2f:f1:0a:
cd:be:82:05:5e:df:5a:9a:9b:e4:73:ee:4d:61:c1:
91:49:18:ea:00:24:1f:d3:46:44:19:cc:5f:89:a0:
fa:d0:a6:83:4b:80:60:e9:31:80:6b:58:85:96:72:
8a:fd:07:0e:22:d8:06:70:e2:78:54:ce:07:56:9e:
e1:b8:82:cc:81:3c:3e:71:80:46:57:30:0d:9c:8a:
f6:db:9f:ee:5d:6e:ca:c7:54:a4:1c:20:5e:a6:20:
d8:b4:8b:44:27:df:a4:3e:ae:46:05:0e:4f:a4:da:
69:32:9b:44:ba:0c:ec:64:32:7d:c2:52:85:5c:c9:
97:2e:58:be:69:3b:45:2d:11:bb:82:67:2a:b4:4b:
94:51:67:c8:ba:45:a8:98:99:69:e7:03:cf:ea:5f:
34:19:d0:3d:ed:48:6d:ec:06:fc:49:28:c4:e2:29:
fd:4b:3e:99:11:e6:e6:b5:d4:e6:76:55:2e:bf:0e:
47:5b:d8:2a:b3:c4:37:57:bd:d5:d7:6c:c5:3c:a7:
77:e4:a5:40:74:79:e5:d7:9c:75:79:bf:25:53:83:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EE:A2:AF:A6:A1:1A:A0:9E:FC:71:A4:16:0E:26:5E:2A:4F:DA:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5882D0AF82811EFAE0FEA89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:8b:7a:7e:4d:c9:22:72:af:d0:68:9d:b3:61:d3:8e:c2:
f2:fa:52:34:b4:b9:47:85:99:fa:09:c4:6c:ee:27:90:98:b8:
41:8c:ee:ec:66:d1:d0:b3:d6:41:24:c2:1b:11:b9:be:b1:86:
6c:cc:f1:5f:5c:f5:13:ad:1c:51:0e:f6:12:ee:42:0c:cf:6b:
e1:26:c3:6a:08:c6:e6:a5:21:b5:22:5c:76:39:cb:d0:6d:54:
4f:52:0e:8d:f3:cf:cf:65:5e:b4:83:e4:1e:4b:ac:5f:21:7f:
7d:f6:ef:92:cd:eb:c8:ad:50:64:42:7d:34:22:0d:61:e4:47:
e4:4b:5a:2d:9c:35:59:92:66:25:28:67:d9:bc:e4:81:4a:e1:
e8:6f:1c:d3:d7:62:3b:9d:ab:e4:fe:0a:be:54:e5:f8:b5:d8:
3f:d3:1a:33:b0:69:8e:36:f4:bd:da:82:df:cb:4d:80:79:9a:
83:3a:65:f2:a2:9d:6e:6d:6d:d1:0b:f2:79:e3:15:08:a6:3e:
65:3f:82:54:1b:db:2c:4b:de:95:73:07:55:6a:dd:a9:f8:59:
53:8f:53:a3:e0:40:2e:18:31:70:e3:f3:f5:1a:bd:12:ed:f4:
23:c3:54:dd:83:22:c3:83:c8:27:55:b5:5c:19:53:e0:74:d0:
b8:25:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:37 2025 by rpki-client