Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD7C674DBEF11EF81E91C48762E951A.roa
File: 5DD7C674DBEF11EF81E91C48762E951A.roa (raw, json)
Hash identifier: PW33+W8yBbTa1ZWjupeuSwi2WI+9GLIHzi+EfTlbHx8=
Subject key identifier: C6:44:8D:79:68:C0:97:9B:86:3D:27:81:17:CC:20:75:18:01:AC:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014ABA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD7C674DBEF11EF81E91C48762E951A.roa
Signing time: Sun 26 Jan 2025 14:10:59 +0000
ROA not before: Sun 26 Jan 2025 14:10:55 +0000
ROA not after: Fri 21 Mar 2025 14:10:55 +0000
asID: 138915
IP address blocks: 154.93.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84666 (0x14aba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:10:55 2025 GMT
Not After : Mar 21 14:10:55 2025 GMT
Subject: CN=67964273-f856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:ea:31:65:23:ed:a0:50:13:a8:98:fa:0d:
c8:93:9f:53:4c:72:29:71:8a:0f:04:b0:00:21:85:
b9:2f:09:78:21:d7:31:cf:fc:6a:25:f1:e8:12:02:
1d:d1:ec:e0:b9:39:df:b1:b2:82:0a:58:e1:80:70:
a4:36:48:ec:7a:a8:9f:74:62:f6:2f:10:04:9b:5a:
0d:f0:5e:89:8d:ba:55:62:ad:97:0f:9a:22:73:80:
ea:01:39:5c:ed:85:35:cb:42:ad:c6:c3:75:28:fe:
40:a9:d7:f8:a8:f5:3a:ee:10:da:a2:a4:22:4b:15:
73:c2:d3:8d:41:cf:4d:b9:f5:c5:8b:2d:8a:40:7b:
fd:ae:4d:2e:a4:66:f1:e0:2b:28:66:24:5b:b1:e7:
01:3f:90:15:c6:ac:57:4d:b7:8b:5c:b8:c9:21:54:
f2:96:ba:c9:ed:63:18:1c:35:c0:72:a4:a7:2e:f2:
86:34:8f:77:5c:af:e7:52:37:77:d9:ae:7a:ea:e9:
5f:77:65:f1:f3:4c:ca:db:02:6f:7e:55:1e:7e:6a:
b1:b5:85:e6:b0:db:23:7d:3d:09:42:25:96:fc:01:
de:e7:44:84:4f:f5:21:31:37:66:84:eb:52:da:b3:
d4:ec:ed:96:3b:70:fc:2a:8e:bc:92:44:79:b6:1f:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:44:8D:79:68:C0:97:9B:86:3D:27:81:17:CC:20:75:18:01:AC:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DD7C674DBEF11EF81E91C48762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.38.0/23
Signature Algorithm: sha256WithRSAEncryption
91:ed:2c:0c:30:db:40:33:c3:15:06:f2:15:44:ee:a7:f2:59:
1c:67:e8:6b:2d:a1:8b:33:5a:b7:80:7e:21:6c:da:34:c2:84:
6a:9b:b7:0f:d1:a5:26:8b:3c:1a:b5:af:15:a4:f2:cd:9d:c5:
c8:4c:fa:ef:38:b5:6f:85:95:71:de:11:27:75:e2:49:e0:bd:
0e:6d:a6:c1:1d:2f:71:11:e0:5b:23:04:47:df:c3:66:6e:0b:
fd:d4:97:75:87:48:76:61:12:ac:00:46:d9:91:88:5f:ce:5a:
0f:39:af:71:39:9e:c3:08:e5:7f:e4:07:d5:16:b4:d5:20:76:
0d:ea:be:a3:37:46:51:b6:8a:be:a0:13:44:b8:12:7b:4e:49:
4b:0b:8d:17:fa:c9:4d:8e:f2:0d:b7:31:9f:e2:9b:1e:7c:1b:
08:f2:51:06:4c:de:b4:c4:77:ec:6e:1a:bc:2b:c4:77:12:88:
eb:0b:ad:97:b8:5d:65:4f:63:11:f4:6d:14:09:1f:76:09:16:
21:8e:56:9f:0b:a8:fa:2f:6d:c9:63:bc:af:9f:06:5b:e0:b1:
3a:db:00:71:dd:79:f6:b8:cf:c0:43:14:29:25:f3:4d:f9:48:
f9:16:b4:ab:a8:d7:63:97:2e:cf:ee:38:6b:46:d7:f5:7f:5a:
f8:99:82:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:31:41 2025 by rpki-client