Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0132A4AADBF111EFA98CDD54762E951A.roa
File: 0132A4AADBF111EFA98CDD54762E951A.roa (raw, json)
Hash identifier: 35JxOhhcRby3nGr9ttvuz9o5gM4HBoVhWkPGlJncMFA=
Subject key identifier: 73:C0:17:E9:C1:D5:D7:5C:00:8F:B9:2C:61:20:39:FD:D3:F1:3C:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0132A4AADBF111EFA98CDD54762E951A.roa
Signing time: Sun 26 Jan 2025 14:22:44 +0000
ROA not before: Sun 26 Jan 2025 14:22:37 +0000
ROA not after: Fri 21 Mar 2025 14:22:37 +0000
asID: 138915
IP address blocks: 154.93.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84676 (0x14ac4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:22:37 2025 GMT
Not After : Mar 21 14:22:37 2025 GMT
Subject: CN=67964534-9295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:a1:83:f0:29:45:a0:f7:62:6d:39:8b:66:
3e:b1:bd:eb:66:a7:5a:63:e6:37:b9:85:89:f1:61:
92:31:9a:78:16:95:dc:dd:11:05:2e:f1:41:51:37:
b7:0d:49:a3:a2:9d:3b:e5:7c:4d:90:09:ca:29:56:
d4:e4:42:49:ee:be:e7:10:f6:95:2e:4d:16:7c:c3:
7a:ab:56:c6:1f:ee:c2:94:07:9c:d7:8b:b2:0e:4b:
4a:ee:8f:f4:1e:01:f1:5c:76:e8:43:35:29:ea:04:
e7:a6:61:a1:94:70:c3:18:6b:87:88:6b:66:cd:1e:
cd:b5:59:5d:4d:ae:9f:b5:94:3b:5c:3f:a9:34:63:
1c:3b:a4:3c:fc:49:ea:d1:82:ab:d6:44:f9:d3:65:
30:30:b8:5c:5d:61:01:89:39:81:8b:28:75:2a:97:
e9:82:50:cd:10:f6:73:37:93:bd:4f:87:8e:84:b7:
af:7c:ff:57:41:b0:70:51:f9:0c:fa:fb:81:7e:5e:
b0:22:22:5f:ac:e7:0d:98:46:87:34:a4:95:06:5a:
26:ec:ec:1b:e5:c1:36:3f:d4:b4:1f:49:6d:94:bd:
46:34:bc:7f:a8:90:80:06:56:8e:cd:96:88:58:3a:
5c:0d:b8:4e:ac:23:0c:53:02:b2:82:fe:94:05:ce:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C0:17:E9:C1:D5:D7:5C:00:8F:B9:2C:61:20:39:FD:D3:F1:3C:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0132A4AADBF111EFA98CDD54762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.46.0/24
Signature Algorithm: sha256WithRSAEncryption
94:48:45:96:36:da:66:2d:8d:17:f8:42:56:72:75:25:37:f4:
04:62:71:be:af:69:14:b4:b1:63:bc:fb:2a:91:af:37:3d:50:
60:b1:4d:d1:3e:bd:86:3a:c8:bd:6e:2f:a0:15:f3:11:48:a6:
64:34:48:d3:9e:e4:e3:4b:dd:52:e3:20:81:40:a3:92:35:1c:
89:49:58:a7:a3:bc:27:f8:34:e0:89:42:07:0d:44:4f:e4:67:
61:3f:eb:24:42:03:ff:1f:f6:c6:fd:ad:2e:4e:51:c2:29:15:
0f:3d:5f:5e:64:46:c5:89:39:7f:da:f9:eb:00:9e:06:da:ce:
13:0e:7f:08:d9:cb:c2:70:d7:60:fe:fc:bb:ee:14:e7:44:96:
38:8b:92:21:b4:35:bb:d3:0a:48:71:19:d6:e8:30:9a:b7:85:
d8:ca:1d:d5:bb:69:40:2f:18:9a:84:22:65:1d:e1:a4:7f:f2:
33:4a:e4:e1:f5:ab:53:43:e2:fc:21:eb:92:6a:74:55:0c:f5:
b9:88:7a:21:4f:be:e3:d0:b2:69:fe:ea:b4:fa:b8:cd:83:0c:
25:06:ba:a3:9e:b9:6b:db:ee:df:e9:16:97:2b:5f:67:f5:0e:
e1:ce:4e:6c:35:97:26:ed:81:52:54:4a:1a:7d:cc:af:a7:fd:
f3:34:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:02:04 2025 by rpki-client