Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B35412DA5E11EF8B2BDEB5762E951A.roa
File: 93B35412DA5E11EF8B2BDEB5762E951A.roa (raw, json)
Hash identifier: WUSPEdKrqm2CT3TBF9PBjjKYnyW9Q6zqg+PsqRKoiR8=
Subject key identifier: 03:88:A6:65:2B:7F:22:A9:7A:24:AC:A2:6E:D0:11:A5:85:2E:CA:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014813
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B35412DA5E11EF8B2BDEB5762E951A.roa
Signing time: Fri 24 Jan 2025 14:22:01 +0000
ROA not before: Fri 24 Jan 2025 14:21:57 +0000
ROA not after: Sat 01 Mar 2025 14:21:57 +0000
asID: 44559
IP address blocks: 154.205.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83987 (0x14813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:21:57 2025 GMT
Not After : Mar 1 14:21:57 2025 GMT
Subject: CN=6793a209-8df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:b7:96:a2:23:da:73:ff:52:0c:7a:82:c1:
47:ed:31:aa:80:58:ca:2e:9d:30:28:7d:38:2e:cd:
77:66:5f:27:21:5e:0a:77:0b:56:1c:1c:b7:38:a8:
e5:46:00:0e:b8:51:67:6b:88:f4:be:41:9c:01:89:
67:92:46:f5:95:76:8b:47:8a:27:01:21:c6:e0:98:
54:98:7e:b4:11:9a:87:7c:a8:58:68:60:b3:95:71:
dc:aa:4b:0a:95:68:d7:28:71:87:25:6f:9e:00:22:
d1:69:6f:4a:03:de:d8:4e:38:d0:b7:ba:05:e7:94:
68:48:6c:39:d4:4c:38:e0:ca:60:77:77:5f:8d:a0:
a7:a8:10:a4:d6:3b:8b:7f:42:96:f6:a4:36:05:11:
e7:53:f3:39:9f:7b:3f:d1:46:da:fb:7c:71:67:9e:
55:24:89:fd:56:24:f5:57:43:65:29:02:57:c5:21:
d1:df:b7:ed:86:67:89:c1:55:1c:cf:c8:b6:d4:7a:
54:6c:30:28:86:13:df:56:67:b3:ed:59:38:6f:a1:
32:66:f8:13:29:97:b6:44:9c:60:fb:f6:fd:69:c0:
e6:ca:ec:28:8a:e2:3b:ef:a6:40:c3:86:00:14:85:
33:44:c9:cf:1f:e4:20:cc:e0:6f:c7:d7:0a:75:7a:
c2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:A6:65:2B:7F:22:A9:7A:24:AC:A2:6E:D0:11:A5:85:2E:CA:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93B35412DA5E11EF8B2BDEB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:be:a6:36:52:c1:a7:7b:03:2d:38:ef:80:94:8d:33:2f:23:
05:94:5d:91:c6:77:ff:b6:ae:e0:86:42:a4:57:25:24:31:32:
15:b8:6d:03:06:1b:fa:a0:d6:39:54:9d:bb:91:e1:5d:5b:d6:
c8:2d:bf:18:db:1a:0f:8d:29:43:15:dd:1c:72:29:8a:4a:a9:
8f:c7:f3:ef:da:1f:b3:bd:46:d9:35:5e:c9:ae:82:f6:50:6f:
82:72:11:1e:fb:9b:db:2c:3e:e0:8b:41:ba:1f:1d:d2:dc:ce:
af:37:e7:66:d4:2d:cd:b4:5e:d7:9c:60:f7:cb:02:53:62:6d:
58:b8:3e:99:55:ae:43:85:eb:f5:dd:bd:a4:6e:b7:c1:c7:2a:
f8:f2:2b:86:a9:66:96:28:58:34:2e:d1:00:f5:e0:2c:5b:32:
aa:69:6e:ea:68:76:93:a6:38:f5:3a:3d:de:6d:48:dc:ed:c1:
1d:80:08:a6:dd:fa:0c:75:01:56:7b:1a:dc:2a:dd:b8:b9:d7:
50:22:93:10:38:a8:b5:b0:6e:65:fb:f2:77:a3:2b:5b:b3:09:
c2:ff:bb:bd:54:44:c7:84:d4:65:e7:81:6f:90:45:42:24:58:
ad:32:d3:a7:fd:8e:d0:0c:c2:c3:95:86:1a:58:4c:0f:94:d0:
15:96:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:38 2025 by rpki-client