Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A593A78DC0811EFB60FE06D762E951A.roa
File: 0A593A78DC0811EFB60FE06D762E951A.roa (raw, json)
Hash identifier: 0/DzzcpNZ6FBcbmb8oF5E7kHbDO8BSBT6nX30MZ+9ZY=
Subject key identifier: ED:C7:62:A2:E7:B1:C3:2F:F5:E1:6F:BF:EC:85:88:DD:27:3D:7B:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A593A78DC0811EFB60FE06D762E951A.roa
Signing time: Sun 26 Jan 2025 17:07:36 +0000
ROA not before: Sun 26 Jan 2025 17:07:33 +0000
ROA not after: Thu 20 Feb 2025 17:07:33 +0000
asID: 142062
IP address blocks: 154.86.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84750 (0x14b0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 17:07:33 2025 GMT
Not After : Feb 20 17:07:33 2025 GMT
Subject: CN=67966bd8-7c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:92:c8:57:86:49:0a:7d:cc:60:d1:a8:8b:
0b:9b:8e:89:80:1b:71:cb:52:d4:6d:64:5d:da:26:
7c:1b:3b:81:61:a3:c5:52:a3:a9:86:84:5b:26:88:
5c:bd:a9:18:84:c7:66:d1:29:40:e9:d5:07:e3:19:
dc:81:41:3b:f2:f5:fd:0b:4e:25:b4:27:52:6b:1f:
42:72:02:93:0c:16:be:1c:b3:c2:27:f1:e5:cb:08:
2c:f2:07:11:f1:3d:6a:8e:10:13:4c:1a:d4:08:07:
6d:1b:3f:6f:02:94:17:43:65:55:1f:07:0e:42:47:
94:32:fe:e1:e2:77:dd:0f:0e:12:98:3b:9c:eb:41:
6b:1e:6f:3f:4d:3d:9d:77:7a:d5:70:25:0b:3a:f3:
e0:e9:7f:ce:19:d7:df:ee:8a:f0:65:be:1a:66:fa:
d6:6e:0b:1d:1c:42:78:08:e0:b2:67:4a:9a:6e:ac:
5c:47:bd:9a:e3:6c:6a:11:70:d4:23:7e:7c:ae:f4:
b4:74:9a:3d:c9:86:46:40:c1:2a:89:a9:31:e5:97:
51:c3:37:18:ae:a6:35:dd:96:26:81:96:7c:c6:ba:
a2:d0:78:a1:3a:c4:d4:cb:c6:4f:cd:c8:d9:99:d9:
37:77:b2:04:da:3e:dd:26:ba:28:89:e5:38:3a:93:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C7:62:A2:E7:B1:C3:2F:F5:E1:6F:BF:EC:85:88:DD:27:3D:7B:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A593A78DC0811EFB60FE06D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.87.0/24
Signature Algorithm: sha256WithRSAEncryption
97:87:a5:a4:68:f5:7d:b4:f6:e1:3a:71:c2:28:b4:9b:82:de:
00:a4:53:ec:55:2d:10:91:2c:b8:5b:b1:91:ed:25:81:b1:98:
ff:ea:08:00:82:9d:2f:7c:d5:6f:15:e3:4a:30:28:50:8e:6a:
37:d4:49:7b:9d:20:8b:42:a2:ca:85:df:77:33:c8:f4:86:86:
21:41:52:05:52:fe:e3:8f:ea:e4:71:80:aa:df:4d:e3:3b:33:
63:7a:25:5c:65:38:6f:7d:e7:2c:3a:97:ac:42:e0:50:8d:6a:
1a:93:bb:37:4e:47:62:c9:b8:d0:15:c5:90:48:f6:72:be:70:
da:3d:0a:10:82:35:fd:6a:aa:fe:ef:1b:37:49:27:06:d1:0a:
1e:a9:d5:c4:15:fd:90:a1:f7:6f:38:ab:9c:0b:a8:61:20:28:
00:8c:eb:60:17:f2:5c:b9:89:61:3a:6d:7b:c2:16:e7:d4:89:
42:86:76:03:2c:5a:94:42:2d:79:c7:94:80:c1:f3:72:4a:f6:
42:e7:bf:3c:30:28:dc:9e:5d:03:86:3e:3d:5a:ec:4f:94:dc:
63:75:e5:47:fe:ea:e6:64:b9:5c:3f:e6:08:bc:9d:ef:db:2d:
19:36:6b:0a:e7:72:6a:67:81:3d:bc:fd:d6:89:2d:ae:b8:bf:
09:b9:c7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:14 2025 by rpki-client