Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00CB9B80C29611EFB5FE597E762E951A.roa
File: 00CB9B80C29611EFB5FE597E762E951A.roa (raw, json)
Hash identifier: sA+1eA1nvbIRmKDgPUTbN/fJ3H05PDH+SmIL6LA70pE=
Subject key identifier: 6F:1C:D9:DA:37:25:EB:ED:32:94:C5:A6:D0:97:98:F6:B6:72:E7:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00CB9B80C29611EFB5FE597E762E951A.roa
Signing time: Wed 25 Dec 2024 07:58:19 +0000
ROA not before: Wed 25 Dec 2024 07:58:15 +0000
ROA not after: Tue 04 Mar 2025 07:58:15 +0000
asID: 138915
IP address blocks: 154.93.124.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74990 (0x124ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 07:58:15 2024 GMT
Not After : Mar 4 07:58:15 2025 GMT
Subject: CN=676bbb1a-3782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:77:37:de:ca:bf:f6:d7:cb:2e:c7:eb:2f:
d8:42:0b:4c:58:05:6a:ff:05:50:b0:22:a7:91:9b:
92:4a:12:e3:fd:4e:28:3f:f0:0d:1d:da:aa:fb:3a:
11:ae:be:1b:f0:d1:cc:bb:ba:9f:58:3b:e4:f6:f3:
db:cc:9b:05:42:f6:19:93:e1:4a:e5:0d:0e:2e:54:
ea:40:82:bd:23:55:7f:b2:37:73:93:47:82:d4:7d:
83:29:8a:f9:66:31:47:ad:b4:76:18:f4:53:09:0a:
11:18:a4:eb:59:39:c9:50:a4:37:7c:aa:e2:38:5f:
a9:2e:cf:c8:4b:4c:69:51:4b:e1:66:92:80:3d:58:
34:ac:1c:1b:83:95:69:4b:26:cb:49:96:0a:ee:9b:
45:75:82:db:a4:f3:f3:b4:64:71:b0:93:ac:5e:3b:
9f:09:53:78:c4:ff:17:04:b4:95:dd:b1:fe:62:ca:
74:97:d6:c8:f0:5a:2a:07:40:fe:05:50:f1:1c:c4:
63:ef:53:c1:11:71:9b:95:9b:52:a3:37:43:01:94:
30:67:c0:f5:26:f3:35:80:a2:bf:f8:08:20:49:78:
01:9c:42:10:7c:55:bc:f5:09:ef:90:73:ec:84:25:
31:57:0c:94:0a:83:8c:2b:23:bd:b5:86:ac:86:00:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:D9:DA:37:25:EB:ED:32:94:C5:A6:D0:97:98:F6:B6:72:E7:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00CB9B80C29611EFB5FE597E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
97:17:0d:2e:8b:1d:83:4b:5d:27:05:c1:e1:69:57:c0:58:6c:
2e:b5:5b:05:48:47:c2:33:6a:6d:ba:2b:3b:75:11:d9:ad:19:
7e:80:60:c0:51:3d:74:7e:f5:2b:e1:93:3d:50:60:ce:be:78:
05:9a:e4:b8:30:3f:a4:f0:dc:a3:25:92:ed:4c:88:83:2c:86:
33:4c:2f:93:f9:e1:49:48:ce:3e:94:fa:10:56:3e:8a:7b:7d:
f5:1b:3d:3c:92:9d:09:e4:8b:f8:a5:fe:d9:2f:7f:5b:d7:79:
2c:5a:8f:c2:f8:80:50:51:a7:f6:72:75:56:15:59:ea:e7:9e:
57:5f:a8:24:ce:26:93:9b:1d:b0:7c:23:24:ca:5f:fe:2f:56:
62:ad:e4:1b:fe:ab:37:26:10:80:bf:ae:46:2b:c6:d9:d2:39:
a2:3b:80:93:a2:35:df:45:34:9a:a9:23:25:bc:e5:2d:44:76:
2b:24:90:83:d8:97:b2:db:2b:23:0f:d6:88:56:e4:7f:83:02:
63:78:9e:60:bc:4f:44:59:55:76:5a:4e:43:c5:33:74:00:20:
3a:78:17:56:b4:0c:9d:ce:fe:d7:c2:96:a1:00:58:42:df:07:
41:a3:93:40:83:09:b1:e1:d3:37:f0:50:5b:17:10:2d:ec:5d:
ab:51:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:08 2025 by rpki-client