Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9FB20B0F62A11EFA9F86176762E951A.roa
File: E9FB20B0F62A11EFA9F86176762E951A.roa (raw, json)
Hash identifier: Tnv5HMElq5IX8z4+8u8ImnoLzDCHuzUE6ZvWJVgKfPo=
Subject key identifier: 41:38:1C:1E:C0:90:0A:1D:2C:5F:81:B4:AB:65:DE:AC:DE:2F:5E:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9FB20B0F62A11EFA9F86176762E951A.roa
Signing time: Fri 28 Feb 2025 23:22:45 +0000
ROA not before: Fri 28 Feb 2025 23:22:41 +0000
ROA not after: Sat 19 Apr 2025 23:22:41 +0000
asID: 138915
IP address blocks: 154.93.40.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93383 (0x16cc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 23:22:41 2025 GMT
Not After : Apr 19 23:22:41 2025 GMT
Subject: CN=67c24545-41f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:9e:5d:07:e7:12:dd:91:07:8a:66:24:94:
8d:b8:a6:cb:c3:6c:2c:cc:ac:e9:de:00:c0:51:a5:
8b:81:a6:05:6b:4a:19:ee:ef:94:dc:67:b5:5e:ce:
49:75:cb:dd:83:68:08:2a:61:12:56:ed:bd:6f:2c:
55:1c:f8:2f:84:88:13:01:b5:a5:48:1a:2c:9e:1c:
a1:18:e4:b2:3b:8f:60:df:f7:1e:28:2e:ba:0b:ea:
96:c3:ab:b4:1e:7a:22:4c:4f:4a:b0:ec:fe:7e:6f:
70:9c:87:f6:c9:85:67:ed:00:3b:87:d6:74:97:8a:
22:8d:d4:9e:13:20:8d:0a:b1:da:61:6e:a7:25:59:
67:b4:98:22:72:44:f5:48:26:93:c6:89:10:a9:7a:
56:cc:bb:80:1a:12:94:0b:2f:00:5d:69:3e:19:5e:
b6:1a:d9:f8:bf:d8:42:fa:be:c2:19:c2:16:47:05:
36:7a:8b:b1:78:3f:25:cf:fa:58:5e:c7:9e:82:d6:
bb:5a:eb:a1:94:24:0b:4b:79:1a:11:22:64:64:ec:
1b:2f:db:bc:de:77:e3:75:2a:21:77:9a:84:38:e0:
43:81:74:5b:7a:19:f9:ad:c1:3d:91:13:84:66:95:
c8:a5:84:d5:7f:fa:66:dd:3c:b4:38:1f:6e:87:2d:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:38:1C:1E:C0:90:0A:1D:2C:5F:81:B4:AB:65:DE:AC:DE:2F:5E:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9FB20B0F62A11EFA9F86176762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.40.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:3e:3f:24:dd:1f:65:4d:e1:9e:d1:24:28:4f:37:23:ac:b5:
2f:41:32:09:dc:b7:9f:fa:e6:de:67:7d:9a:8f:e8:01:b2:b5:
bb:2a:1c:41:00:20:dc:74:a0:f9:af:e6:c6:4d:5e:c5:af:97:
48:fc:95:08:41:07:15:68:95:53:73:df:f8:9d:41:8a:c4:b4:
a5:de:78:63:95:ea:05:cb:d3:94:11:1b:3a:1d:b1:55:6f:50:
05:f3:23:b5:d8:db:d7:a8:f4:34:40:7e:cb:69:54:88:9a:0d:
e7:f3:bb:16:f4:bc:9e:84:67:c5:7a:7f:4c:d1:fa:56:36:bc:
95:31:a9:45:1f:a6:dc:8a:b8:58:df:38:96:16:68:db:c6:f8:
d8:0e:1b:0d:28:92:28:3d:b3:3e:b8:8a:ef:a0:08:3e:e0:8a:
55:87:cc:99:57:1e:51:33:bb:76:7b:e6:39:3e:c4:bd:f5:80:
5e:6b:9d:4d:22:38:73:d2:26:f3:35:3a:39:16:f6:1d:a6:2c:
a8:aa:1f:6b:f3:5a:6e:e4:d4:29:09:38:4a:d1:a3:51:17:fb:
2c:d0:ee:0c:77:45:a3:08:1d:1e:f6:a7:85:85:b1:a6:7c:d6:
50:99:c9:5c:4d:ef:84:88:14:c1:38:0a:ef:10:fe:11:00:5d:
8f:93:2e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:40 2025 by rpki-client