Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E41DCEC35E11EF8F019275762E951A.roa
File: 94E41DCEC35E11EF8F019275762E951A.roa (raw, json)
Hash identifier: jYatDe9WXj8uoRfdU7MNuMl/OFFxESxYOtB+KwNTjWE=
Subject key identifier: 27:F8:81:B9:50:6B:BA:A4:CF:3F:FE:35:C4:B5:5A:5C:21:FD:54:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01261E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E41DCEC35E11EF8F019275762E951A.roa
Signing time: Thu 26 Dec 2024 07:54:06 +0000
ROA not before: Thu 26 Dec 2024 07:54:03 +0000
ROA not after: Tue 04 Mar 2025 07:54:03 +0000
asID: 138915
IP address blocks: 154.93.102.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75294 (0x1261e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:54:03 2024 GMT
Not After : Mar 4 07:54:03 2025 GMT
Subject: CN=676d0b9e-c0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:e7:1a:2f:53:cf:35:71:86:b2:aa:ce:70:
d0:c8:0f:6a:2f:65:d0:a1:6c:9c:5c:71:fd:ee:03:
77:ec:04:26:bd:1f:f1:7d:df:80:80:06:47:36:7a:
0f:2c:b4:fb:67:55:40:b7:b0:87:22:ce:04:61:45:
da:71:1d:e6:b8:7b:41:d8:66:b9:e8:cf:3b:3c:d7:
5b:67:89:f3:2d:13:c6:a4:50:02:e8:9c:fb:bb:1c:
9c:49:8c:1f:88:e1:d1:1a:93:bc:b7:60:28:4e:e7:
40:42:86:a0:be:64:6a:eb:3c:c3:1b:53:b0:2a:e6:
c6:f8:69:f3:e3:5f:93:b1:1d:9d:48:6b:1d:23:da:
0e:40:bc:57:b9:2a:06:19:07:e3:e3:59:05:1b:4a:
b2:74:63:a0:40:5d:ad:ca:75:30:21:c4:e7:a8:dd:
21:4b:ab:8e:20:f9:ec:a4:60:fe:11:5b:64:a5:f8:
05:9c:62:5d:79:99:31:97:e4:91:9d:9a:50:06:65:
70:69:de:2f:ac:bb:3b:8d:92:7b:ab:e3:c2:81:8a:
f2:63:20:88:3b:c4:2a:2e:da:63:42:75:60:fb:54:
01:e5:94:b3:bb:56:c0:09:3b:f6:f9:65:9f:4d:99:
68:ae:e8:ce:79:cf:90:ae:fc:0b:41:59:a6:9e:56:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F8:81:B9:50:6B:BA:A4:CF:3F:FE:35:C4:B5:5A:5C:21:FD:54:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94E41DCEC35E11EF8F019275762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.102.0/23
Signature Algorithm: sha256WithRSAEncryption
19:cf:0e:cc:33:a0:64:8c:df:12:ba:6e:d5:69:33:38:69:fa:
f9:0c:95:01:9c:82:8c:66:26:0a:df:74:3e:43:eb:73:1a:9d:
0b:eb:9e:7b:a9:db:5d:21:cf:c1:3b:56:d7:35:dc:a7:42:82:
3e:8b:0f:ea:34:02:f8:cc:80:6d:54:c2:2e:40:91:8e:6d:20:
e0:8b:29:c8:be:c5:32:a8:d3:75:3c:53:63:00:52:da:2d:e2:
1c:e6:8a:4f:68:09:f2:c1:c1:57:61:15:7c:50:2e:b0:fe:12:
21:23:e0:7a:66:09:f5:58:26:db:9a:ef:e0:02:88:2d:4c:24:
21:11:9c:e4:64:4c:d9:73:6b:bd:0e:25:34:c8:87:f1:3a:71:
c0:70:49:45:4e:5f:ff:ea:87:81:f6:0e:93:95:95:78:19:ef:
b8:3c:3d:2d:be:c6:c3:53:25:09:7c:a0:ac:41:3f:36:20:38:
5a:b9:1e:0b:66:3c:1a:f0:b5:78:93:e0:de:33:de:db:33:d7:
e6:36:16:d3:55:e2:f4:4b:bc:16:8b:af:98:ac:77:ae:bf:c0:
d0:4c:69:68:d2:08:f0:48:b7:39:71:33:ff:62:dd:49:d9:ab:
70:98:eb:1c:cf:4b:30:d7:6a:f5:2f:53:6a:97:4a:5f:17:e1:
24:e2:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:52:03 2025 by rpki-client