Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D31C7EDBF111EF9EB08155762E951A.roa
File: 55D31C7EDBF111EF9EB08155762E951A.roa (raw, json)
Hash identifier: nR49CXulghK7ODOtPgLU6GlD4+ZR2SBN3jIVS4r9WNQ=
Subject key identifier: F6:C9:D6:6A:E2:18:6C:75:5C:84:D5:CA:74:EF:1A:E6:71:BA:9E:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D31C7EDBF111EF9EB08155762E951A.roa
Signing time: Sun 26 Jan 2025 14:25:05 +0000
ROA not before: Sun 26 Jan 2025 14:25:01 +0000
ROA not after: Fri 21 Mar 2025 14:25:01 +0000
asID: 138915
IP address blocks: 154.93.48.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84678 (0x14ac6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:25:01 2025 GMT
Not After : Mar 21 14:25:01 2025 GMT
Subject: CN=679645c0-9d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:df:6c:c0:72:fe:e7:9f:76:83:b8:75:e5:
29:93:6d:bf:1c:e3:1a:dd:70:0c:1a:ef:07:50:6b:
1e:1e:a3:0b:dc:b8:0f:03:15:26:f4:fe:3a:da:07:
8a:33:85:78:46:5e:29:cb:cc:b1:73:2f:72:0f:58:
b9:bd:6a:6e:a9:7c:03:b2:a2:5a:95:1a:36:c0:80:
5e:ec:e7:fe:90:42:74:aa:c2:8b:80:9f:82:3a:68:
b8:c3:52:23:c4:5a:ab:1e:84:0f:3f:5f:22:9a:d4:
30:e2:3e:d0:97:1b:95:52:ff:16:29:91:d6:72:f5:
9a:55:5d:fe:c0:9d:a8:2b:32:72:70:3d:0b:a2:c1:
f8:9c:de:4c:43:7d:e2:00:fd:87:3a:71:b7:a4:21:
f2:e9:62:e0:2b:66:e2:b8:bc:6a:0a:c9:e1:45:cd:
e5:6d:1b:33:d2:c5:a0:d9:1a:e2:49:54:da:7d:80:
32:21:6c:b2:86:a7:1c:82:18:6b:8b:13:dd:85:0c:
22:e7:63:3d:d6:cd:f3:2e:81:16:33:2f:0c:3e:9c:
c3:37:9e:a5:56:60:ea:2c:c0:b0:df:fc:08:39:95:
75:4a:bd:64:86:e3:5d:f0:ea:4a:57:62:6e:d1:95:
4a:1b:ae:3c:da:fe:e5:8a:89:0b:0c:9b:09:d3:c5:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C9:D6:6A:E2:18:6C:75:5C:84:D5:CA:74:EF:1A:E6:71:BA:9E:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55D31C7EDBF111EF9EB08155762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.48.0/24
Signature Algorithm: sha256WithRSAEncryption
56:1e:3b:fa:bf:30:38:22:c6:53:2f:43:8f:18:23:5a:3a:0a:
e1:81:42:a0:ab:4f:c8:c7:24:fe:8d:e5:c9:6a:60:d9:f8:a2:
0f:fc:b6:46:d7:c1:49:6b:a9:66:ff:80:1b:a5:fa:57:39:bf:
2e:c1:ed:85:db:22:9f:8d:4f:d7:c6:88:de:f1:9a:34:b6:bc:
68:f6:0b:f7:78:b1:f6:05:93:da:e6:77:f6:16:84:8e:8e:94:
73:f0:6b:aa:7c:0c:57:4d:bb:db:25:23:b4:9b:07:25:2c:23:
73:65:b0:04:8f:ba:db:c6:bd:e5:47:52:33:71:c6:e7:40:da:
a9:b7:95:ed:53:3e:c7:74:f5:4b:83:41:73:bf:4d:54:a9:a5:
d2:f0:d1:75:23:2f:e1:86:c5:02:de:b1:16:e0:a6:af:0e:17:
2e:0c:b2:89:55:42:a9:be:d8:55:1c:9a:ee:8a:c2:c3:1e:73:
92:1c:52:29:98:39:5e:6e:95:e0:14:26:60:67:48:85:35:13:
41:ec:c2:3f:27:a9:f9:86:56:b2:4c:59:c9:78:21:83:59:9e:
2b:b6:6c:52:b9:81:1c:8e:6b:65:65:a8:04:00:26:41:4f:df:
07:25:62:4f:5a:2a:fe:75:b6:3b:79:20:ca:98:42:b2:c5:ea:
da:f6:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:10 2025 by rpki-client