Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EFDCED4D8A411EF921FC391762E951A.roa
File: 5EFDCED4D8A411EF921FC391762E951A.roa (raw, json)
Hash identifier: sl2tNG65kmJHVKevA9I5+xZxP8Xy/pqQIPLD2JiT8i8=
Subject key identifier: 43:1F:B1:8A:5E:05:EB:9E:86:0B:71:F7:11:34:60:BA:85:14:41:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EFDCED4D8A411EF921FC391762E951A.roa
Signing time: Wed 22 Jan 2025 09:36:35 +0000
ROA not before: Wed 22 Jan 2025 09:36:31 +0000
ROA not after: Tue 04 Feb 2025 09:36:31 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81548 (0x13e8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 09:36:31 2025 GMT
Not After : Feb 4 09:36:31 2025 GMT
Subject: CN=6790bc23-4c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:29:32:30:8f:84:ca:57:38:5f:f8:10:61:97:
2f:77:41:07:7d:3b:c8:08:9a:8e:ef:5a:04:f1:15:
5a:a8:59:20:f0:80:d4:6d:49:bb:68:e6:40:67:46:
76:7d:bc:6f:32:51:29:11:dd:65:ab:38:81:7b:99:
5a:d5:d8:7c:38:29:73:59:22:25:97:4c:24:ad:3d:
87:5b:42:12:a8:22:1e:ba:90:c0:56:e5:21:4f:86:
85:2a:d8:3a:40:77:2a:7e:f1:1e:f5:16:59:20:78:
4d:1d:67:f8:16:29:c5:85:c4:54:2c:d1:4c:6d:49:
f7:58:74:15:60:1e:aa:ec:40:fe:37:6e:5e:27:33:
13:ed:58:84:ae:34:64:c4:9a:a4:4b:f1:2a:62:34:
7f:30:f6:c1:ce:f7:ff:9f:30:d0:72:66:a0:ec:ed:
04:c3:e4:5e:cd:8c:54:93:81:3b:02:31:ca:99:7e:
47:cf:85:22:21:a4:2f:37:3d:b5:19:2e:0c:05:7d:
69:bc:f8:1e:59:29:8a:88:62:b9:d0:00:57:b3:c8:
21:3a:21:13:36:59:b6:1e:d2:ad:b4:57:91:60:85:
5c:0a:26:45:56:f4:ef:0f:68:ef:fd:ec:6f:f7:94:
d4:21:e4:c0:02:65:b1:64:fb:6a:a1:a9:7c:5b:d2:
c7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1F:B1:8A:5E:05:EB:9E:86:0B:71:F7:11:34:60:BA:85:14:41:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EFDCED4D8A411EF921FC391762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1a:3d:0b:e9:d9:cb:b1:89:3c:91:ee:35:b6:bf:f4:2f:f4:
20:04:b4:d9:53:5a:7d:f4:23:c5:a2:db:da:ae:88:d1:c7:12:
29:74:5c:22:2d:c7:30:6e:f1:5c:8d:68:f6:7c:97:1f:40:e7:
5b:38:fd:a2:01:0a:ad:a6:f8:3e:38:ae:08:39:44:c5:ea:72:
25:69:9b:1d:a0:42:6b:a8:0d:3a:71:76:78:01:0a:86:ac:ca:
bc:88:1a:a9:f1:c6:a7:49:db:9b:c1:e8:63:e6:11:33:84:0d:
bb:87:4f:b4:34:78:46:82:89:49:30:ea:f4:ac:3a:87:f7:0b:
b6:30:c5:15:51:ca:a9:4c:52:f4:a5:c8:60:18:fb:b6:e5:4d:
26:b3:4f:ba:f4:6c:56:0e:18:be:1c:98:7b:fd:f9:d8:b0:23:
25:42:d8:de:18:e7:c1:4c:51:a3:da:4e:40:e7:c4:8b:f3:c3:
57:1a:64:16:a5:5e:85:4a:6d:67:f0:d7:ff:87:bf:79:53:2e:
46:b2:d0:3a:98:69:0a:9d:4f:18:29:73:c6:e8:d5:a7:f8:05:
77:4b:a6:53:f2:04:76:9f:23:66:87:2e:4f:49:77:aa:6c:6d:
c8:79:31:8f:f3:ab:42:50:c6:a0:75:bc:96:c6:d2:a7:ee:56:
68:29:f7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:38 2025 by rpki-client