Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/575D82E6C35F11EF997EFD79762E951A.roa
File: 575D82E6C35F11EF997EFD79762E951A.roa (raw, json)
Hash identifier: Z4fQLCjKBv/rQyyvLqxcdzFVHU+GrlV0UW2L63iVzyQ=
Subject key identifier: 02:6C:88:8D:AD:EE:D9:12:00:D8:F2:B0:6E:96:1C:1C:C3:AE:48:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01262E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/575D82E6C35F11EF997EFD79762E951A.roa
Signing time: Thu 26 Dec 2024 07:59:33 +0000
ROA not before: Thu 26 Dec 2024 07:59:29 +0000
ROA not after: Tue 04 Mar 2025 07:59:29 +0000
asID: 138915
IP address blocks: 154.93.106.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75310 (0x1262e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:59:29 2024 GMT
Not After : Mar 4 07:59:29 2025 GMT
Subject: CN=676d0ce5-bb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c7:d6:17:14:65:b5:37:55:97:cd:4e:8e:bc:
f4:2a:11:54:19:d5:4d:27:6c:ba:cb:79:8e:17:f0:
7f:81:fc:00:a9:3d:d2:9f:7e:67:0d:d4:02:a7:46:
a7:35:44:cb:99:a7:15:dc:74:18:02:25:dd:9b:64:
b8:2c:bc:d0:a4:e1:79:24:64:5e:61:42:77:b9:e2:
2f:09:5f:c0:36:a2:9b:e2:eb:92:f7:e7:e7:3e:0d:
86:28:49:50:5a:47:24:22:ce:46:8a:2d:8e:9e:f2:
ff:57:30:71:10:9b:17:fb:90:19:cd:7e:f2:82:8a:
34:28:2b:a4:23:09:75:dc:75:b1:9d:31:56:78:be:
da:ee:5c:5f:f7:89:be:65:a0:6e:f9:ec:5e:a0:0d:
d0:5f:24:87:33:60:49:db:7f:8d:42:20:46:ab:57:
cb:8f:e0:5c:93:db:9e:ce:0d:f4:49:54:00:bb:aa:
6a:8d:93:5e:c5:fb:54:1c:e7:7d:c5:33:6c:a5:86:
82:3b:b3:4c:ad:ab:b7:fd:7c:66:16:1d:6b:80:e0:
ee:5b:b7:00:9e:9a:a7:80:a4:9b:60:f1:91:35:1d:
8b:8d:b3:ba:30:91:d5:7b:4d:d7:9d:98:9c:2d:2b:
7b:b4:5b:f7:59:b9:9b:15:bb:b5:a9:a0:b1:1f:9d:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:88:8D:AD:EE:D9:12:00:D8:F2:B0:6E:96:1C:1C:C3:AE:48:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/575D82E6C35F11EF997EFD79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.106.0/23
Signature Algorithm: sha256WithRSAEncryption
14:d7:a1:58:c3:99:09:9b:68:4e:45:a5:59:df:7b:44:cf:12:
58:c3:34:b4:9c:5f:d6:79:c6:0e:64:60:da:77:8a:31:ae:30:
38:93:5d:60:f5:c4:c9:b6:92:bd:73:fa:8b:ee:91:06:5b:77:
19:34:76:f3:96:91:9e:04:56:da:59:ce:29:c8:eb:19:38:df:
2d:e7:03:a4:6d:7f:73:aa:d4:aa:0c:ab:63:d1:1e:d3:92:7b:
1c:47:ef:b6:7e:77:dd:56:c9:38:7b:a5:bb:43:11:bb:69:e9:
99:0f:b0:39:c1:c9:d1:80:a1:4a:34:3f:d6:94:b5:27:f5:3b:
02:cb:ef:00:a2:30:63:4f:25:79:5e:2c:8f:6c:54:6a:f6:26:
59:c7:b9:2c:dd:25:1c:60:03:ae:39:81:e0:22:03:79:2c:59:
d2:42:00:8b:b1:fa:18:06:a2:46:8e:bd:c0:d7:bd:b0:d2:2e:
d0:c3:79:32:9b:a3:f5:e2:99:53:3d:32:ad:c9:f2:b0:f0:c6:
7f:31:a2:1a:b0:95:d5:aa:f9:42:1e:26:e0:4d:dd:8b:9b:a4:
8c:63:f1:0e:79:7c:bf:8c:99:64:5b:45:74:5c:b0:86:fa:25:
32:99:92:55:be:7a:df:14:8c:98:02:dc:50:f9:ca:30:3c:eb:
99:34:df:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:32:54 2025 by rpki-client