Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307C300ACF2111EF8245F54A762E951A.roa
File: 307C300ACF2111EF8245F54A762E951A.roa (raw, json)
Hash identifier: 1QF1yHJr1pb4hREnsXuCXPVSg8CWUtMA/VLLtAH7Wxc=
Subject key identifier: 8D:70:36:15:B3:AA:54:9D:DF:AB:EF:74:2D:BC:3D:31:DE:5E:0D:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013997
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307C300ACF2111EF8245F54A762E951A.roa
Signing time: Fri 10 Jan 2025 07:04:53 +0000
ROA not before: Fri 10 Jan 2025 07:04:49 +0000
ROA not after: Tue 04 Mar 2025 07:04:49 +0000
asID: 138915
IP address blocks: 154.93.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80279 (0x13997)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:04:49 2025 GMT
Not After : Mar 4 07:04:49 2025 GMT
Subject: CN=6780c694-3797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5a:ef:ed:d2:41:ad:d2:24:bb:ac:02:8a:27:
75:d2:45:81:1a:d7:9d:52:bb:f1:83:57:ef:df:e5:
91:00:7d:41:a9:c3:b8:00:88:60:5e:b3:cd:e9:ae:
d3:32:87:db:8f:0c:f7:fd:d9:d5:86:9d:6b:1a:14:
91:73:49:bf:6f:96:3c:a2:29:10:06:bb:3e:46:62:
21:4f:53:b3:07:67:00:92:8c:71:9c:8e:c1:32:34:
fb:a6:ae:97:1b:a2:57:88:f6:f1:43:f7:0d:21:53:
3e:c1:55:e4:85:00:5d:dc:4f:c2:98:a1:c4:fb:9b:
4a:70:9a:06:a2:78:92:95:a3:37:34:88:f4:86:d1:
84:8e:af:46:f5:96:34:0f:97:00:7f:bd:3c:49:84:
83:87:0f:df:9a:9f:da:f4:2b:87:ee:dc:66:77:03:
8e:13:f6:87:fb:2f:7e:c0:d7:4d:43:09:b5:95:c5:
17:6c:56:1b:07:2c:fb:70:30:08:ca:01:00:12:8e:
81:a1:a7:f7:32:21:7a:5a:76:ae:98:7e:85:0b:ef:
a2:c1:63:ae:90:8b:52:b0:6c:c6:09:a8:15:6c:a4:
d3:89:ce:92:19:63:ab:90:72:78:8c:a7:cf:14:1b:
e1:00:50:34:10:9f:5c:2f:c5:e9:4b:c9:b6:cc:7f:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:70:36:15:B3:AA:54:9D:DF:AB:EF:74:2D:BC:3D:31:DE:5E:0D:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/307C300ACF2111EF8245F54A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.127.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:00:1a:76:96:03:3d:9e:71:ae:9a:47:63:67:4d:d0:52:c4:
11:15:75:79:ae:e4:2b:5c:e9:f7:c8:6b:ac:2d:f1:f3:c7:95:
b6:e1:17:b4:0c:29:d3:76:76:1f:13:e0:bf:75:fb:3f:4f:97:
df:e2:a4:1d:a8:e1:cc:c5:e3:17:f3:9d:cc:b7:ec:57:4d:23:
b0:32:a5:96:ad:8f:21:7d:07:81:00:1f:06:50:28:4d:cd:8b:
c3:a9:cf:70:f3:a7:94:9c:84:51:c6:6a:84:79:32:00:51:f0:
bd:4c:b6:a9:a4:23:4c:c6:ba:79:eb:39:1a:ea:97:f1:05:9e:
b3:83:8f:72:b6:42:86:af:b0:f5:b0:fa:e6:a8:37:68:58:fc:
ef:98:9c:24:1b:e5:64:d4:c2:58:d9:c8:fe:4a:09:d5:82:c8:
d0:ee:1b:0e:a2:54:6b:20:1a:cb:65:f6:e1:42:24:f7:0d:f7:
4e:12:30:87:fa:eb:e7:f3:00:7d:dd:b2:59:af:b4:e7:eb:12:
20:51:53:c9:5a:2b:cd:50:8f:64:84:d2:8c:96:0d:af:0b:76:
cd:38:10:3d:41:01:be:7e:3d:c3:6a:31:6b:bb:99:ce:18:c6:
c2:4d:e8:4d:db:c4:48:1d:53:a9:4a:c9:50:b8:7f:a2:4c:ff:
c9:55:dc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:06 2025 by rpki-client