Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCDA01CDBF411EFB221AF69762E951A.roa
File: 4FCDA01CDBF411EFB221AF69762E951A.roa (raw, json)
Hash identifier: BVU1lykggEV1EpcA7ydGCNN9UOtT5ZBqwWNeRbrHPY4=
Subject key identifier: 73:15:99:8B:BE:CA:51:31:B7:B7:9B:84:07:B2:6C:1D:83:3D:07:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCDA01CDBF411EFB221AF69762E951A.roa
Signing time: Sun 26 Jan 2025 14:46:23 +0000
ROA not before: Sun 26 Jan 2025 14:46:19 +0000
ROA not after: Fri 21 Mar 2025 14:46:19 +0000
asID: 138915
IP address blocks: 154.93.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84696 (0x14ad8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:46:19 2025 GMT
Not After : Mar 21 14:46:19 2025 GMT
Subject: CN=67964abf-aad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:f6:4d:4c:e9:ec:90:8b:e2:e8:f3:3e:3e:
fe:70:39:66:9b:c2:95:81:47:b0:9f:d3:94:57:90:
6a:eb:23:d1:4b:91:e1:be:d9:f3:d2:dc:5b:fa:e9:
60:0e:4f:77:f9:70:93:18:0b:0b:8a:40:16:fa:e6:
0f:e8:a3:2b:99:61:25:77:83:aa:3e:61:33:30:2e:
37:c8:a5:2f:3f:90:9f:ec:80:26:0c:b4:e1:01:bb:
f5:e2:14:fe:65:bd:2b:7e:1d:9e:a6:43:f2:16:ae:
ae:48:c3:ce:8a:4a:a4:12:5a:3f:8d:c4:80:7a:2d:
d9:e1:86:03:a2:64:d1:10:98:5b:20:95:6c:bb:ea:
15:ee:d5:7d:f1:c9:f6:4e:8e:4c:f9:40:43:4a:bb:
2c:68:ca:20:63:ff:21:95:81:72:dd:b6:94:a6:75:
50:31:ad:b0:65:a8:2a:f3:23:d0:77:10:b2:5c:83:
2a:e7:fd:26:5b:63:82:7a:a4:92:a1:0e:bf:3e:83:
4d:c3:b7:1b:a0:d0:1a:9a:a9:a4:a2:be:9f:79:7f:
47:8f:93:a9:d1:f2:d8:f0:7d:81:89:fb:7e:51:63:
80:66:c5:3e:3e:ab:dd:05:b5:ae:0c:53:53:e9:83:
d9:7d:4d:49:4e:43:7b:90:7e:a2:de:76:e5:2f:76:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:99:8B:BE:CA:51:31:B7:B7:9B:84:07:B2:6C:1D:83:3D:07:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FCDA01CDBF411EFB221AF69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:6c:0d:de:b3:cf:23:0b:dd:bb:dd:ee:eb:7f:6b:0a:87:69:
46:d3:f7:27:a6:c7:ae:ca:82:ef:1f:cc:8d:46:4f:86:2f:37:
a3:6a:12:53:26:da:b1:ad:93:d0:1f:c5:7d:b4:26:00:8a:27:
f9:c2:c2:9e:63:7b:f5:8e:df:e2:79:84:6c:13:26:15:e1:96:
60:ed:e9:91:f1:06:1f:ad:e9:91:be:51:dc:30:47:52:9a:69:
de:89:64:40:28:c3:db:f9:78:a3:b5:cd:5c:cb:6b:1a:f1:4f:
77:43:42:19:4a:70:fa:1f:d3:ce:96:3d:45:38:dc:1c:53:0b:
cd:43:f3:6a:88:20:f7:22:66:ce:66:e7:8e:8a:19:6f:b5:b6:
d5:1f:a0:85:f7:2e:a3:e1:e1:58:5f:67:43:b2:0f:17:4c:d3:
3c:27:e0:87:a5:b8:76:8e:aa:f0:75:63:70:0a:07:4c:33:f0:
cc:29:cd:17:fe:26:c0:ae:8c:8d:46:e7:ab:e1:1f:94:a3:05:
27:ec:6d:1f:52:0e:35:2d:b8:59:3b:dd:2a:fb:ea:f7:a0:ff:
6b:12:b6:47:02:90:ae:4f:7b:95:d1:68:ed:cd:a8:7f:0e:cf:
20:5f:a3:45:cf:64:ab:2d:36:2a:81:ef:0b:9e:cf:8c:38:b4:
52:26:6d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:47:35 2025 by rpki-client