Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77993764C29511EFADD32C7A762E951A.roa
File: 77993764C29511EFADD32C7A762E951A.roa (raw, json)
Hash identifier: jOsg6De411HQEsserKZGjlMXLhqAKV0WFYG+cgTuzuw=
Subject key identifier: 95:8C:F9:95:88:B4:B5:06:91:C6:44:FE:F6:A4:D3:FE:DA:3B:F3:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77993764C29511EFADD32C7A762E951A.roa
Signing time: Wed 25 Dec 2024 07:54:28 +0000
ROA not before: Wed 25 Dec 2024 07:54:25 +0000
ROA not after: Tue 04 Mar 2025 07:54:25 +0000
asID: 138915
IP address blocks: 154.93.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74986 (0x124ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 07:54:25 2024 GMT
Not After : Mar 4 07:54:25 2025 GMT
Subject: CN=676bba34-7439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:7b:4d:8b:83:61:98:91:bf:56:24:5e:f7:
92:ad:0a:7d:80:6f:d5:41:83:b1:d8:02:5c:a8:0f:
9c:aa:7b:5c:f4:73:86:fb:d2:c4:81:f5:ba:76:9d:
21:40:39:ff:4d:13:b1:9b:6e:48:0c:e8:9d:b1:c7:
96:2a:23:cc:29:50:7c:d8:2c:6e:ea:f1:33:29:af:
ef:da:17:7b:ac:3e:94:49:2d:09:03:53:2f:0e:4e:
bf:cb:3b:33:e7:dc:ff:d2:6e:dd:0b:4e:8c:5a:b8:
2f:77:48:d3:fb:d7:af:ef:dd:fc:b2:1a:47:f9:60:
cd:a0:7d:4e:7e:1e:16:fb:66:02:88:c7:08:72:df:
e3:81:91:b4:d1:6e:c8:27:ad:31:35:ef:38:e6:eb:
3b:d6:87:cb:48:c1:e5:ba:cf:f7:6f:27:3e:97:56:
84:47:78:9a:ee:7f:a0:a2:14:01:8f:75:33:ef:6c:
fd:ed:e1:fb:b9:37:c5:f7:a7:11:c6:23:bc:ae:3f:
46:5c:a0:b5:9d:f5:4e:d5:c0:25:a1:a3:51:af:12:
0d:60:f6:67:79:a0:ac:08:f4:10:64:83:14:25:f7:
3b:c4:ed:10:ab:aa:ac:7e:e7:6e:19:6d:dd:8e:a4:
3d:a9:a3:ba:a5:47:ae:b0:86:10:df:dc:a9:7b:d4:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:F9:95:88:B4:B5:06:91:C6:44:FE:F6:A4:D3:FE:DA:3B:F3:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/77993764C29511EFADD32C7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.125.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ce:9a:75:33:e0:34:c5:65:23:b2:c8:f0:0d:76:37:4b:93:
bb:2f:91:44:ff:21:13:9c:5e:8e:33:4f:9f:36:be:a6:63:46:
c0:ad:85:b2:12:f7:5d:ef:c9:59:fd:49:6f:02:81:24:f5:ca:
4a:88:22:f6:42:b2:f3:23:cf:60:ea:c6:99:f4:23:f3:c4:13:
a8:45:51:28:5b:fe:03:62:58:a8:8c:db:8d:c3:8e:5e:71:2e:
59:83:a2:c2:77:2f:70:69:24:e4:af:7d:56:64:c9:d5:19:49:
c2:b3:17:eb:85:85:f4:75:83:7b:3b:d2:e2:b3:4b:2a:e8:09:
77:89:e6:94:d4:b4:ae:7f:f0:e6:0f:9b:1a:bb:70:7f:b5:00:
6e:b1:0e:2c:ec:c7:a7:ee:09:d0:1b:de:5c:94:6b:62:e9:f5:
1c:15:e6:bc:d0:02:ac:a8:3a:6c:bd:55:b3:e4:af:7a:c2:3e:
19:fe:5d:1b:e5:a2:2f:3b:55:51:0f:75:24:31:70:f5:44:df:
34:b5:b9:69:72:82:c7:59:9a:be:b4:81:3d:44:d2:5f:69:85:
fb:ab:25:27:e0:e8:36:91:ba:2d:fa:51:4e:8c:55:e9:68:42:
9e:57:78:13:30:64:63:5b:9d:13:7b:ed:4f:87:d2:09:16:97:
69:63:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:25:39 2025 by rpki-client