Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8E9948D8C211EFB857605D762E951A.roa
File: DA8E9948D8C211EFB857605D762E951A.roa (raw, json)
Hash identifier: 99zz8fUZsolJBCYaeh3poa6A1aaIxmsjVJ3CP34b9F8=
Subject key identifier: 23:88:9D:78:B9:5B:DC:55:B1:E3:8B:78:48:AD:B0:8B:0E:BD:54:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013F74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8E9948D8C211EFB857605D762E951A.roa
Signing time: Wed 22 Jan 2025 13:14:47 +0000
ROA not before: Wed 22 Jan 2025 13:14:43 +0000
ROA not after: Tue 01 Apr 2025 13:14:43 +0000
asID: 138915
IP address blocks: 154.93.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81780 (0x13f74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 13:14:43 2025 GMT
Not After : Apr 1 13:14:43 2025 GMT
Subject: CN=6790ef47-e0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:54:8e:05:c0:b0:17:1d:4b:d0:d0:f6:04:14:
1f:b3:01:45:c9:44:c2:b3:c0:9b:95:5e:98:29:7b:
e4:77:38:47:49:aa:68:7a:5c:9d:c8:fa:03:ab:73:
ea:9b:b5:d7:74:c3:c7:ca:11:18:38:f3:65:39:05:
fc:1d:07:47:18:24:24:af:e6:f1:17:07:b1:f7:33:
22:2a:51:5f:b2:d0:3d:a4:57:5f:9a:5f:cb:2d:2c:
b0:4e:ac:8c:56:95:c6:3f:93:da:a5:7f:cb:d3:83:
ed:06:7b:ff:03:70:7e:fe:c8:04:54:bb:9d:38:fd:
82:6d:44:6d:b7:73:47:b9:9c:20:61:8d:69:bb:19:
4f:c7:b6:45:d7:7b:24:d5:e1:a1:c1:49:da:51:5a:
a8:ce:f1:18:bf:57:f1:7e:d5:48:2c:ce:90:97:b8:
42:69:dd:29:91:ea:1f:3a:9e:f4:2a:7f:1a:79:1f:
8a:da:22:a4:2f:b1:c0:4b:0b:cc:ad:b6:77:29:eb:
bb:4b:19:d7:1a:cd:37:88:eb:fd:13:f9:e5:cf:86:
2b:11:09:8b:5b:e0:3c:14:1a:83:10:56:19:95:a9:
99:aa:01:26:fd:e8:f9:8f:22:38:6d:6c:3c:92:bf:
16:52:08:00:94:09:b0:ba:fc:5a:2a:b2:93:70:cc:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:88:9D:78:B9:5B:DC:55:B1:E3:8B:78:48:AD:B0:8B:0E:BD:54:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA8E9948D8C211EFB857605D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.116.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:0c:20:23:a2:12:1c:22:54:db:67:88:0f:de:35:e8:61:5f:
62:ad:9b:28:ac:fb:22:d0:ce:6c:b2:90:1c:45:94:10:63:7b:
6e:cb:6b:1e:6b:e6:dc:86:4f:fc:05:ce:5c:b8:13:9c:b0:8f:
34:41:32:83:2c:7d:5c:04:2a:c0:00:bc:87:6a:e6:5f:4c:c1:
2c:8c:18:ca:b2:c9:a9:db:88:f2:67:90:21:00:d1:e6:fd:d9:
66:d0:b3:95:12:ff:49:88:88:d3:e3:73:56:81:fb:4a:f8:c1:
b3:6e:36:36:5b:e7:84:ed:51:46:61:99:91:03:a0:76:59:a0:
be:b7:a5:12:b2:67:be:6f:0f:d4:92:48:cb:a6:f2:69:3f:d7:
f6:7d:72:93:72:76:ec:12:2b:cc:3c:8a:61:66:77:b8:5c:85:
24:cd:26:c7:06:af:0f:f0:ec:1b:95:de:c2:37:32:0e:ac:bf:
c6:c5:4b:9f:4f:58:57:69:b0:d6:d0:89:82:79:b8:b2:20:84:
73:bb:a7:8e:9c:d6:3d:fe:64:f9:bc:c8:a2:88:07:52:57:5c:
74:da:f1:28:34:69:c0:c8:52:b4:c6:37:4d:b4:2d:81:50:69:
ea:6e:5f:2f:0a:14:a1:d3:ef:82:1a:e7:d8:d1:a9:12:f1:10:
56:58:42:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:32:59 2025 by rpki-client