Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B96F8CC29511EF96F4387C762E951A.roa
File: A6B96F8CC29511EF96F4387C762E951A.roa (raw, json)
Hash identifier: JFFu8GgdAGerb3WIp7Wa6wOdLFgo3LwfvUd378gLD3I=
Subject key identifier: 27:53:5D:2D:69:0D:55:ED:6B:11:BE:80:48:DF:48:68:27:69:20:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0124EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B96F8CC29511EF96F4387C762E951A.roa
Signing time: Wed 25 Dec 2024 07:55:47 +0000
ROA not before: Wed 25 Dec 2024 07:55:44 +0000
ROA not after: Tue 04 Mar 2025 07:55:44 +0000
asID: 138915
IP address blocks: 154.93.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74988 (0x124ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 07:55:44 2024 GMT
Not After : Mar 4 07:55:44 2025 GMT
Subject: CN=676bba83-ea30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:52:5d:1c:10:9e:81:f9:05:bd:8e:94:a4:2a:
cd:50:6e:83:fc:28:9e:8e:66:a6:53:7d:59:79:58:
22:fd:8a:1d:b9:4c:f2:63:a1:9e:ce:df:e1:9d:e5:
79:7b:f8:38:67:42:f6:f9:28:16:14:dc:3c:ea:f2:
58:b5:7f:f9:7f:89:af:3b:46:a6:33:70:eb:1a:d7:
b9:61:47:db:5c:36:38:ef:7f:fa:1b:cd:3d:2e:7a:
46:cf:6c:03:4d:0e:a2:51:88:08:86:19:df:1a:41:
3d:ec:2f:ac:d4:a5:2c:64:0c:ee:e0:8d:8c:2c:40:
2c:f4:25:4c:29:58:cd:fc:76:18:66:5f:58:d4:d7:
1d:b6:dd:c0:41:e5:80:0f:cd:57:66:d6:fe:d1:d1:
e3:72:ed:5e:c7:4b:6c:4e:34:47:01:63:8e:98:dd:
f5:cf:14:e6:e4:a6:b2:dc:aa:ba:84:c5:30:42:4c:
88:d9:f7:5a:c7:35:f4:c9:e1:a0:55:0f:9e:17:d0:
a0:82:78:f8:ef:90:6d:bd:1f:b7:83:d2:dc:3a:60:
db:00:b6:fa:3a:60:a0:9e:8f:e7:da:c7:33:66:94:
bf:33:dc:dd:2f:e8:d7:95:f4:61:91:63:20:b3:de:
75:34:b0:17:fc:d7:6b:5d:29:77:95:01:9e:ba:16:
56:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:53:5D:2D:69:0D:55:ED:6B:11:BE:80:48:DF:48:68:27:69:20:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6B96F8CC29511EF96F4387C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:33:01:79:a1:f2:6b:f1:5f:89:1a:82:60:14:8c:5a:40:b9:
79:69:93:8d:d2:13:81:9b:26:b0:0e:0e:b2:be:59:2a:3f:95:
22:56:8b:bc:54:44:ba:29:c3:ea:23:d3:24:7f:47:19:f9:a8:
88:e4:45:a0:16:3f:37:56:0e:b6:18:ea:4a:38:bb:28:fc:ba:
6a:4b:cd:6c:55:95:5e:19:27:49:05:59:35:7a:ac:b3:ae:14:
fc:fb:19:31:97:53:f2:80:bd:3b:0a:fc:eb:1c:8c:ad:d5:30:
07:15:2f:fb:e3:e8:09:5c:3b:1b:d6:14:9a:2e:ed:23:53:ce:
be:2c:7a:86:a3:de:af:b1:07:0a:d9:7a:8b:9a:8e:6d:a0:e7:
4b:ad:25:8c:c0:6e:8b:bf:58:f2:0a:0b:b9:dc:81:c5:71:b2:
b0:62:69:7d:e2:25:45:42:95:5a:44:13:13:6b:6f:90:f2:0e:
a9:6b:81:6c:36:12:b7:22:4f:87:ed:b0:99:63:43:6f:44:41:
42:56:d0:b3:28:57:b3:9d:5f:2d:48:5a:31:53:60:ce:cd:54:
07:15:68:82:2e:83:c6:5e:e6:7b:b6:63:d7:a1:ec:9f:83:01:
31:ba:20:6e:e1:83:a8:40:f4:e1:43:60:61:4b:49:dd:da:6c:
c2:a1:27:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:23 2025 by rpki-client