Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68B894E6B21A11EFA0967FAC762E951A.roa
File: 68B894E6B21A11EFA0967FAC762E951A.roa (raw, json)
Hash identifier: eaYSd9KV7y+9cd4Dj366Ch1xocZ0/5nq6gLXL8GKENk=
Subject key identifier: 80:82:79:66:80:CE:DA:5E:BE:49:3F:85:B8:73:DB:42:0C:09:D0:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68B894E6B21A11EFA0967FAC762E951A.roa
Signing time: Wed 04 Dec 2024 08:33:17 +0000
ROA not before: Wed 04 Dec 2024 08:33:13 +0000
ROA not after: Sat 01 Feb 2025 08:33:13 +0000
asID: 138915
IP address blocks: 154.93.115.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71644 (0x117dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:33:13 2024 GMT
Not After : Feb 1 08:33:13 2025 GMT
Subject: CN=675013cd-9f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:61:3c:fd:b5:c8:59:b7:c4:76:38:70:1d:
d0:25:24:8f:81:a5:5e:6f:c9:c3:b2:41:46:39:a1:
61:fc:13:5f:52:38:90:bc:ac:92:f9:11:63:01:04:
48:23:ec:00:e2:3d:a9:5c:27:99:b3:82:58:47:0d:
35:92:ee:9c:91:32:f5:48:be:0e:a8:a7:bf:8f:01:
1f:03:ed:d3:86:a1:44:9c:af:a8:4d:c1:93:87:45:
3f:db:d2:07:60:88:6c:aa:5e:99:be:65:c5:73:a3:
c2:61:03:89:22:08:96:ff:86:51:40:43:de:03:14:
7c:72:4b:5c:17:66:e5:f9:d0:aa:f5:46:1b:b7:e4:
ab:90:8a:0a:43:c5:8c:72:df:15:eb:0b:ed:f1:c8:
a3:3b:7f:bf:bb:eb:c1:69:70:a2:4a:b5:43:a4:b5:
6e:34:fe:28:d5:df:13:c8:ab:5e:a5:eb:34:c4:16:
07:b7:2e:71:5d:58:59:6a:94:97:ae:31:5f:15:c2:
56:1c:5d:bf:4e:b2:66:ef:ea:c9:ce:8d:08:f6:91:
cd:79:ee:ea:e5:fa:ff:66:6a:77:d6:d3:e9:32:98:
64:36:82:db:b7:d9:79:d0:ea:9d:d8:f0:85:06:7a:
1e:07:c1:41:08:69:83:f8:c8:4a:02:29:38:8a:78:
a3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:79:66:80:CE:DA:5E:BE:49:3F:85:B8:73:DB:42:0C:09:D0:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68B894E6B21A11EFA0967FAC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:08:43:96:2a:d7:cd:8d:a1:b9:74:41:17:8e:e7:55:86:ab:
ff:a2:b2:11:e9:1e:83:a0:f0:b7:4c:fe:c6:d9:21:fa:c5:ad:
be:24:59:fd:fd:5f:df:15:36:3b:1b:62:c4:28:be:ce:5e:22:
3c:de:cb:77:15:ef:d5:16:2e:aa:6a:b9:de:70:3f:db:a5:02:
d7:47:e9:66:4d:4e:81:1d:88:ae:e6:b0:62:34:b4:e4:5a:73:
76:88:69:b1:51:96:75:81:5f:c6:3e:1a:0c:64:ca:be:3e:4a:
fe:2e:fe:74:47:54:9b:f6:21:d4:e0:01:a5:41:63:54:c4:62:
53:73:95:00:83:6b:a2:72:03:2f:2a:8a:aa:e0:cf:f1:93:ce:
17:36:7d:ec:44:1e:2d:0e:a7:15:09:e6:49:21:f5:98:f1:71:
2b:cf:6f:d6:67:84:0d:bc:61:ab:43:89:15:98:e4:e1:64:0e:
71:7e:ab:d0:3b:57:9e:a0:a3:82:77:1c:b6:be:fb:70:af:04:
64:08:4e:6e:7c:b4:df:ca:bd:87:37:40:e8:ba:c0:eb:32:6a:
9f:f4:e3:75:25:e7:ad:0b:ce:91:24:01:0e:af:99:2b:6b:15:
29:0d:01:98:d1:a9:90:d7:fe:83:81:08:9f:75:69:d8:f7:33:
06:b5:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:56:50 2025 by rpki-client