Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40A6C6F6C36011EFBDF89080762E951A.roa
File: 40A6C6F6C36011EFBDF89080762E951A.roa (raw, json)
Hash identifier: fbGIk3fDWIgC0fJFFHIimmcXgHmTevI5ajFzGpHtot0=
Subject key identifier: 0C:AA:CC:8D:F0:1B:6B:8C:E9:49:26:F5:4D:8C:C6:A1:20:65:B6:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012642
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40A6C6F6C36011EFBDF89080762E951A.roa
Signing time: Thu 26 Dec 2024 08:06:04 +0000
ROA not before: Thu 26 Dec 2024 08:06:00 +0000
ROA not after: Tue 04 Mar 2025 08:06:00 +0000
asID: 138915
IP address blocks: 154.93.72.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75330 (0x12642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:06:00 2024 GMT
Not After : Mar 4 08:06:00 2025 GMT
Subject: CN=676d0e6c-3c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:2f:cd:48:f0:f1:bb:1a:64:c9:e5:7a:5a:
bb:d5:77:a9:76:17:f9:0c:e8:86:74:9e:63:e6:ea:
9e:65:83:15:08:4d:3b:5e:61:a0:34:9d:7c:45:28:
ec:7a:c8:fe:ca:0c:ad:99:a6:7e:36:e3:5f:bf:18:
05:7a:7d:2e:7b:e0:12:b0:9b:97:7b:75:6a:e3:0b:
e1:34:64:e9:7e:47:6f:69:34:70:56:d2:b3:52:5d:
28:68:f0:96:a4:8a:a0:21:5f:50:6d:98:cb:3e:28:
85:a8:27:05:c6:94:99:1a:e1:3d:89:3b:3a:d5:dd:
bc:58:57:74:00:ae:ac:67:14:6f:f0:57:83:94:1e:
77:85:25:55:5e:41:00:93:c0:26:10:b0:a7:3f:c1:
6c:8b:4a:b9:35:38:1b:e8:dd:94:38:e2:2d:70:11:
f4:e2:c7:54:a4:5f:ea:fa:d5:bf:b3:29:c8:7f:28:
71:c7:73:46:5e:bd:58:aa:16:b8:be:83:11:47:96:
00:52:65:3e:d9:4f:c5:4c:5d:75:32:35:2b:ff:e0:
61:c9:35:bf:01:82:62:15:77:80:fb:52:be:ef:3f:
68:01:ee:74:3d:3b:f5:77:2e:d8:56:81:16:e3:fe:
ae:a0:57:01:fe:fa:bd:8e:d7:a0:a0:e9:ec:66:5d:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AA:CC:8D:F0:1B:6B:8C:E9:49:26:F5:4D:8C:C6:A1:20:65:B6:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40A6C6F6C36011EFBDF89080762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/23
Signature Algorithm: sha256WithRSAEncryption
85:e0:f6:6c:53:8c:f5:e6:ec:d2:4d:e3:2b:1c:c5:52:87:f2:
76:17:8f:cd:78:79:6a:3f:1c:9d:64:39:1d:26:43:1e:59:e9:
7e:98:95:b2:81:e2:30:ed:08:ab:9d:9b:04:9b:87:a9:50:23:
5e:01:fc:15:f7:4f:a3:3d:9b:81:15:12:92:ae:36:fd:b9:6a:
a8:db:ba:dd:89:ec:e5:f1:d5:b2:45:e0:14:cf:cf:58:19:93:
e0:4d:60:f4:21:c0:d9:33:78:55:7c:11:d7:de:81:9a:6c:6b:
91:de:32:4e:83:86:73:e0:09:ad:c8:66:30:5e:90:6c:6f:2f:
4c:85:3b:60:1c:25:56:92:84:49:fe:92:2e:48:e5:2d:22:6c:
4c:06:b9:dc:c0:46:4e:a8:0b:cf:bb:04:ea:d1:20:53:35:81:
c3:c9:0d:64:2e:1f:a9:c0:f1:11:1f:7d:df:e0:96:36:e9:ec:
a6:1b:23:f7:e6:32:35:e9:d2:c1:02:cf:2f:73:3d:f3:c3:f6:
a6:53:6c:65:28:95:ea:da:59:f6:63:4d:0b:78:15:6c:96:f9:
88:a0:33:74:9a:16:d3:50:a1:21:5f:3b:c5:5f:cc:70:01:5f:
d0:2a:9c:cf:fe:e5:9d:58:7d:a2:1a:20:2b:72:c6:ba:93:e0:
69:ac:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:01 2025 by rpki-client