Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6A948CD8D911EFA8669B71762E951A.roa
File: 2B6A948CD8D911EFA8669B71762E951A.roa (raw, json)
Hash identifier: uUbU462BZoTD3by4S9Lz1vRtZ2RLm6yNzKLG2PwBL7w=
Subject key identifier: 85:6E:9C:F0:14:84:6C:D1:26:0C:ED:FC:B1:BD:C4:76:22:6B:17:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6A948CD8D911EFA8669B71762E951A.roa
Signing time: Wed 22 Jan 2025 15:54:32 +0000
ROA not before: Wed 22 Jan 2025 15:54:28 +0000
ROA not after: Tue 01 Apr 2025 15:54:28 +0000
asID: 138915
IP address blocks: 154.93.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81880 (0x13fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 15:54:28 2025 GMT
Not After : Apr 1 15:54:28 2025 GMT
Subject: CN=679114b8-4c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0f:9d:f1:9a:fb:43:cb:ff:26:29:55:b4:3d:
95:d1:21:8e:b0:94:97:15:75:5a:bc:30:66:3b:0d:
a3:71:69:5a:29:a1:13:c6:e2:ec:9b:8d:65:0b:2c:
69:23:bb:c3:61:ab:62:c0:2a:b6:2d:9c:16:38:36:
fe:9f:0f:23:8f:bf:75:78:bf:b7:99:b1:da:9f:ac:
de:92:5a:d3:2b:71:14:5e:66:6e:b0:f3:eb:54:78:
bd:66:48:d5:c5:5e:af:66:29:90:3e:83:f1:4a:de:
07:70:80:f0:d7:fd:af:c3:bb:65:ed:00:2f:67:6a:
07:c5:d3:84:50:fa:96:0f:91:b8:98:30:8d:59:52:
55:dc:45:7c:61:e2:11:7e:26:60:ef:c1:03:bd:ae:
b3:c1:21:18:b8:2c:b5:ef:c8:3a:96:ef:91:f6:7a:
cd:15:c9:44:7f:05:3c:04:5f:27:12:6f:a3:10:3b:
23:26:c9:b2:5a:09:e7:3a:63:34:4a:ec:c0:e9:4e:
61:d0:8e:c2:59:6b:f5:48:69:5b:0e:c7:d9:68:0c:
e8:3e:8c:f0:c2:f6:5d:38:9c:ef:b3:66:0c:73:2b:
1c:99:9b:ed:ac:10:9a:fe:8e:f6:e3:3a:8d:20:0a:
89:f6:9a:d6:65:ec:1e:bc:9b:dc:ea:54:f0:22:e3:
77:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6E:9C:F0:14:84:6C:D1:26:0C:ED:FC:B1:BD:C4:76:22:6B:17:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B6A948CD8D911EFA8669B71762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.120.0/24
Signature Algorithm: sha256WithRSAEncryption
46:77:97:5e:26:4b:7d:aa:95:27:0f:de:30:6d:19:df:3e:dd:
f4:d5:76:13:ba:25:0f:7a:40:c7:2c:8d:e5:8c:9e:bd:45:f6:
10:90:9f:fe:c2:cc:67:d0:b9:a3:b2:c3:f0:10:93:db:66:26:
cb:31:e5:af:89:08:f9:4c:ef:e7:81:2c:aa:30:50:df:2a:bd:
c9:32:0d:54:00:db:ec:f6:d1:49:e7:30:c9:c9:27:90:43:30:
15:1d:65:7b:6b:56:d2:f1:5d:cd:fc:a1:a6:72:5f:09:44:17:
b4:86:de:3a:56:9e:d2:63:e5:66:23:c3:d0:50:d4:80:36:52:
6c:ab:c7:6d:c0:f0:2f:bb:88:3f:ae:95:40:a1:c6:0e:5d:1e:
af:05:fa:b0:62:a2:59:29:72:7a:a7:88:77:fc:a4:08:47:fb:
b4:f4:f7:d5:95:84:18:13:e2:27:1c:0c:ff:bf:86:45:62:40:
e0:fe:42:14:8d:c0:c5:a7:84:14:e9:b6:29:14:f1:df:85:fd:
e9:92:d4:4c:23:3d:5d:b7:6f:c1:07:be:f1:f5:b7:1f:ad:66:
9a:0e:c2:18:99:79:ba:03:f1:ed:3b:e3:6a:f3:37:ac:b8:cb:
0b:45:23:47:b1:90:6b:13:8d:6d:46:cb:5e:83:1a:e9:24:8e:
d6:cf:59:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:43 2025 by rpki-client