Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC7FBC92D8D511EFAED3795A762E951A.roa
File: DC7FBC92D8D511EFAED3795A762E951A.roa (raw, json)
Hash identifier: 85SbX8Wm1zPymK99MMUCMhjfTdPsoAZg4Btr9vshOmM=
Subject key identifier: 00:15:38:C9:C7:8F:F5:8A:63:3D:D9:00:67:B4:DF:03:00:10:A6:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC7FBC92D8D511EFAED3795A762E951A.roa
Signing time: Wed 22 Jan 2025 15:30:51 +0000
ROA not before: Wed 22 Jan 2025 15:30:47 +0000
ROA not after: Tue 01 Apr 2025 15:30:47 +0000
asID: 138915
IP address blocks: 154.93.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81864 (0x13fc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 22 15:30:47 2025 GMT
Not After : Apr 1 15:30:47 2025 GMT
Subject: CN=67910f2b-eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:65:9e:05:27:29:8e:90:d1:64:27:82:46:5e:
33:de:b9:3c:08:c6:e5:09:c4:0c:3c:c3:6d:8d:3d:
1b:19:6d:c9:ce:86:45:b4:aa:64:b3:a7:90:6b:25:
4b:a2:d4:91:bb:56:6b:95:f7:ea:15:6b:a2:46:42:
38:10:2c:68:79:98:c6:9e:ae:15:12:cb:42:05:61:
32:eb:b0:34:b3:ee:e0:74:22:ba:cc:7f:24:1e:af:
22:ec:9c:1e:19:a2:c5:30:e8:1c:7a:1f:76:cc:0a:
ba:af:c6:ab:ca:a6:07:28:7b:d2:aa:83:6c:37:44:
2f:64:03:78:b0:6e:79:06:16:e2:fa:70:62:47:f7:
5d:df:30:d5:56:d2:03:d0:34:9e:26:94:f1:3c:c5:
41:75:ff:a2:fb:04:7c:cf:f3:75:c1:58:f8:c0:8b:
9d:77:23:57:e2:88:1f:6d:f2:cc:10:39:ea:4e:89:
2d:39:45:95:43:72:e6:6a:db:02:a0:cc:37:6e:6f:
a2:22:43:98:69:05:a2:6e:5e:6c:1e:c8:b6:96:ba:
32:66:89:dc:31:5b:72:18:19:91:77:15:0f:e5:9e:
53:47:91:4d:b0:c6:6c:fa:ed:95:ee:8c:ea:d4:4f:
bb:70:1d:18:e7:88:49:a5:b3:7e:a9:93:68:01:a6:
80:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:15:38:C9:C7:8F:F5:8A:63:3D:D9:00:67:B4:DF:03:00:10:A6:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC7FBC92D8D511EFAED3795A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.108.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e6:87:f6:d1:00:ab:70:23:a4:bf:36:7c:9b:0a:f8:3e:bd:
ad:df:10:0f:6c:1a:48:b8:62:92:4b:87:de:50:26:25:c9:85:
2b:e8:56:ca:c6:60:3f:42:ab:2d:94:6f:b0:64:b6:1a:8c:87:
31:62:e8:48:52:5f:e8:b2:e1:c5:40:ec:8e:75:d7:5d:1a:83:
30:c5:10:7f:28:47:5d:e9:de:d7:de:55:55:f3:56:79:6a:ad:
bb:fc:74:f0:28:f0:4d:f4:8e:13:22:c4:98:50:3c:44:e1:cc:
b8:72:f0:2a:64:9d:6a:01:86:84:17:10:a3:c0:00:8b:97:90:
de:23:34:7e:b2:e7:b8:66:d0:50:04:33:96:63:07:a4:90:23:
f6:d2:eb:7f:85:fe:44:88:9d:21:f6:be:cb:18:2a:0d:c8:b1:
43:6d:1b:8d:bc:61:ee:1f:f4:a4:77:a1:23:22:34:ae:09:f6:
ed:35:1c:01:17:6b:0f:39:6c:f7:d9:48:de:e7:af:fb:20:a0:
0d:47:17:3a:98:a8:de:20:69:53:4f:e1:37:ca:b9:d5:fd:53:
f1:6b:94:e6:94:7f:ee:3d:3f:ad:2b:70:15:0c:92:93:6c:96:
17:52:b7:b2:d5:6b:f0:b3:5d:65:75:40:ec:74:27:fb:f3:a7:
f9:58:f9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:31:28 2025 by rpki-client