Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0252FB4C36011EF957AD682762E951A.roa
File: A0252FB4C36011EF957AD682762E951A.roa (raw, json)
Hash identifier: Kc7coUzI2boW0oHa4mtBiVJnLrkCFaHC4VduM4i/S6o=
Subject key identifier: 39:6F:30:44:C3:E7:48:68:20:FD:71:3A:19:FC:4A:92:67:81:B2:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01264A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0252FB4C36011EF957AD682762E951A.roa
Signing time: Thu 26 Dec 2024 08:08:44 +0000
ROA not before: Thu 26 Dec 2024 08:08:41 +0000
ROA not after: Tue 04 Mar 2025 08:08:41 +0000
asID: 63139
IP address blocks: 154.93.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75338 (0x1264a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:08:41 2024 GMT
Not After : Mar 4 08:08:41 2025 GMT
Subject: CN=676d0f0c-0320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a4:72:b0:b8:dd:f1:63:a7:fa:33:12:76:1c:
e5:07:62:92:83:42:8c:1d:91:6a:28:f0:6d:a2:bb:
f1:85:6f:e6:04:be:f2:cd:bc:f8:09:c5:1c:91:6e:
9c:03:0e:35:65:9d:f7:05:80:aa:c7:23:96:4f:59:
88:76:6d:51:cb:b4:29:88:b2:11:06:78:e0:20:3a:
92:f8:5f:c0:da:d3:6a:31:b3:f7:a8:8f:5b:aa:7f:
c8:66:59:fc:7f:ac:7a:9d:b6:ad:6f:85:33:0c:46:
cd:d0:a7:cb:24:5b:3d:f8:6c:a5:bc:67:0f:ac:89:
b7:fa:c6:ef:6c:d5:73:a4:b6:8c:9a:34:0e:f3:cb:
9c:2e:01:d0:0a:fc:2e:e6:97:8e:ec:de:8b:98:59:
72:97:e7:0d:f5:bb:a1:16:5b:d0:27:48:c7:ca:eb:
80:d8:c0:96:fc:dd:15:4d:e4:ed:74:12:23:d8:72:
e7:e1:29:76:48:c1:a8:df:97:6e:11:c8:aa:99:e0:
7b:96:80:d4:67:18:02:ed:f2:df:cf:12:fa:f8:d7:
4f:e9:b4:0b:2e:b4:19:4d:f7:ce:56:a7:05:fd:2d:
3c:9b:88:d5:3d:6c:6a:19:a9:9b:1c:82:21:f5:84:
ab:85:54:01:4c:14:4e:c4:b3:31:e0:c9:5d:03:09:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6F:30:44:C3:E7:48:68:20:FD:71:3A:19:FC:4A:92:67:81:B2:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0252FB4C36011EF957AD682762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0/20
Signature Algorithm: sha256WithRSAEncryption
c8:f1:d3:bd:c2:d2:3f:0e:fa:64:e6:9d:c1:8e:2a:0c:f0:52:
30:48:61:ff:75:d5:7e:8c:26:39:48:ea:2f:73:c4:71:2c:ac:
21:4c:c2:51:91:5b:bf:fd:9c:5e:49:5a:c6:77:a6:18:47:71:
fd:10:b5:95:1d:1e:d5:04:a9:e6:44:28:d0:1e:73:9c:bc:66:
5c:ae:df:6f:39:1d:80:b7:39:d1:d5:b8:e2:39:a7:2c:fb:b4:
d3:ad:a9:56:ed:c4:48:91:fc:f7:f3:bc:14:10:d4:61:c9:dc:
2b:b5:39:8a:cc:80:f6:ed:77:21:87:35:63:b2:22:b1:8a:80:
cd:d8:41:54:2b:a4:94:5a:ff:9c:2b:13:a1:94:16:99:ea:30:
cb:0c:c3:cd:70:7d:ef:6a:1b:e3:af:52:43:7d:44:1b:d2:13:
7d:8e:03:48:15:a6:7e:8e:13:d2:ee:32:25:50:64:05:ea:e5:
64:ae:4a:7b:c2:81:d9:63:6f:25:0d:62:7e:b6:08:2c:e9:f1:
31:34:e7:4f:b8:ec:58:c1:b2:fc:f9:1c:05:17:ad:a6:19:2f:
d1:84:21:a0:55:4f:82:31:db:b7:69:f7:f9:6a:f6:45:dc:03:
78:f1:cc:06:1d:bf:64:c9:7c:59:2e:17:34:78:85:d4:03:3b:
08:cf:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:24:11 2025 by rpki-client