Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0492B24DBF411EFA830D56B762E951A.roa
File: A0492B24DBF411EFA830D56B762E951A.roa (raw, json)
Hash identifier: QGjhfAgUbWk5mru1tZbLmqOaePCtm8wf9dn8uSh1hh0=
Subject key identifier: 87:98:C0:C8:22:2C:BF:8E:69:13:14:76:98:15:9D:41:C1:1B:B5:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014ADA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0492B24DBF411EFA830D56B762E951A.roa
Signing time: Sun 26 Jan 2025 14:48:38 +0000
ROA not before: Sun 26 Jan 2025 14:48:33 +0000
ROA not after: Fri 21 Mar 2025 14:48:33 +0000
asID: 138915
IP address blocks: 154.93.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84698 (0x14ada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:48:33 2025 GMT
Not After : Mar 21 14:48:33 2025 GMT
Subject: CN=67964b46-b094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:24:82:db:64:13:98:b4:35:53:7f:c2:83:27:
11:34:0c:49:ba:8f:8a:7c:e9:78:8d:f9:8f:ca:3f:
17:72:c1:dd:7f:f2:34:b3:eb:c5:c3:3c:3c:21:41:
2a:05:70:c3:f1:4e:58:f3:14:1a:0f:b3:9d:47:4d:
80:2d:48:de:74:d6:4b:ce:02:0c:ae:cd:10:84:82:
5e:40:a2:59:4b:9f:9e:3a:37:63:28:f0:8e:7f:d9:
fb:ba:12:0c:21:e2:f6:da:a9:e8:2d:2a:54:88:9b:
5e:39:93:8a:7a:4f:16:1b:d6:46:00:99:b5:12:60:
18:f5:7c:a4:cf:fa:dc:b9:7b:5e:56:ab:57:9f:dd:
7a:63:5d:c9:18:5c:1b:b6:34:fe:7e:97:22:69:c0:
d5:94:02:7c:81:aa:31:07:e3:14:31:47:6b:d1:28:
d0:22:18:78:51:07:23:5f:7e:9a:54:9c:2b:04:60:
c1:ac:da:91:69:a9:77:5c:4c:38:67:b4:00:01:b4:
2b:f9:24:e1:21:2d:ef:4d:59:a0:c6:a5:74:33:43:
4e:22:1c:ff:62:85:82:49:ae:b1:42:5c:9a:b1:13:
18:c7:02:3b:c5:df:94:a5:a9:a1:93:a0:93:fb:0e:
a9:54:8c:af:84:e2:a4:5c:ae:33:71:e7:c0:cc:bf:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:98:C0:C8:22:2C:BF:8E:69:13:14:76:98:15:9D:41:C1:1B:B5:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0492B24DBF411EFA830D56B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
06:e0:6d:98:1c:6a:cb:58:43:b9:e1:db:bd:84:ff:0d:36:08:
4a:08:a7:2c:70:d7:d6:9f:47:b6:37:fe:24:5a:90:bb:81:27:
90:cb:ae:94:1d:8f:34:78:02:06:10:76:4e:b4:e6:67:68:a7:
28:1c:3a:e3:37:d6:24:1e:83:8e:7a:f6:75:cd:e0:17:72:2a:
36:6c:f9:94:6c:79:af:14:b2:1a:e5:48:ed:16:8f:58:a2:d5:
51:79:e2:c7:64:50:05:74:8b:25:f3:c9:5d:a2:1f:c6:65:c8:
fa:68:bd:06:7a:05:5d:0e:e5:cc:7e:1d:0c:23:c0:61:73:d5:
3e:ed:d9:4f:f8:cc:57:12:2c:ae:51:8a:c3:2a:8a:bf:0f:f7:
ee:e1:9e:db:58:2d:55:66:40:ce:1f:fe:2d:e2:42:f7:ad:39:
e7:f1:0f:38:be:99:81:f2:23:0e:39:52:a5:be:70:71:e6:2a:
9b:a0:1d:39:12:3d:9a:65:b9:5d:06:1a:48:ec:67:c8:1d:aa:
d7:5b:1e:51:1d:36:66:c4:1e:39:3d:8b:c2:1a:b9:31:4c:30:
09:06:d3:6a:a6:8e:83:50:5d:ca:fe:89:4e:09:8c:65:cb:89:
dd:4a:b0:1f:70:4f:d3:d7:69:54:b5:83:b4:0d:9e:da:f1:16:
00:66:fc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:58:25 2025 by rpki-client