Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB89A4AEDBF011EF93843D51762E951A.roa
File: AB89A4AEDBF011EF93843D51762E951A.roa (raw, json)
Hash identifier: GBR39BjFE4x74eiSM2kwCRHCScnNUYU/XuXplB46fjg=
Subject key identifier: 1A:B7:73:41:71:62:6B:82:BE:2C:81:C2:D0:CB:9C:B3:BA:D6:56:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB89A4AEDBF011EF93843D51762E951A.roa
Signing time: Sun 26 Jan 2025 14:20:19 +0000
ROA not before: Sun 26 Jan 2025 14:20:15 +0000
ROA not after: Fri 21 Mar 2025 14:20:15 +0000
asID: 138915
IP address blocks: 154.93.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84674 (0x14ac2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:20:15 2025 GMT
Not After : Mar 21 14:20:15 2025 GMT
Subject: CN=679644a3-dec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c8:f8:a0:80:e0:05:49:ff:94:fa:09:79:be:
fe:1b:4d:d6:14:ca:b1:c1:86:2b:20:10:bc:92:96:
f6:24:e1:b4:8d:6e:16:72:34:4a:c0:96:ff:40:63:
ba:33:60:55:24:96:dc:2b:18:a5:57:3f:ad:be:5c:
64:dc:69:ce:89:e0:48:c3:2c:0a:bc:6d:0c:55:f4:
5d:ea:e2:3c:e6:7d:7a:7d:87:9f:63:fd:e7:1d:72:
cd:51:76:9a:8f:22:a4:a0:fc:65:dd:4c:6e:89:61:
60:0b:59:ec:c4:47:33:b7:d8:ba:d7:87:dd:4e:c8:
ff:74:27:01:d7:cc:b4:78:0c:28:80:43:e8:f5:b0:
62:90:ab:8c:f4:5d:c3:c9:9e:08:4c:c5:f6:ab:55:
36:8a:2e:87:bf:1f:d9:72:cc:fe:5f:5e:d9:17:89:
99:3b:7a:cf:15:27:68:30:70:44:22:9f:b1:77:25:
a9:da:a9:16:40:b5:7a:ab:8a:95:41:ab:b2:b2:97:
95:d3:72:4b:9f:3b:93:3e:0f:43:6f:56:11:36:a3:
b5:56:40:0b:ee:67:e5:9d:8b:93:92:ed:7b:ad:1d:
c9:61:f2:2f:bb:71:80:f7:de:51:f3:e6:0e:f8:f2:
ae:11:2a:8d:dd:f9:2a:ad:d9:cc:23:ba:53:bf:d0:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B7:73:41:71:62:6B:82:BE:2C:81:C2:D0:CB:9C:B3:BA:D6:56:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB89A4AEDBF011EF93843D51762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.45.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:0f:8a:3d:5f:34:d1:75:00:c0:9f:00:8e:b2:f2:2e:ab:35:
d2:94:5e:0e:25:14:97:10:4d:e6:6f:6e:91:82:07:5a:cd:04:
14:37:48:38:83:ae:be:04:7e:0b:01:98:5c:f1:a6:ba:64:f5:
3b:1b:e5:ac:36:ea:01:af:cf:9a:82:f6:04:24:b4:b4:35:f3:
3e:e8:f1:4b:0e:e4:a8:8d:94:4b:b1:75:8d:31:16:20:a8:f5:
5f:81:65:48:df:28:b0:e2:88:5c:20:2c:6e:e6:f8:50:fc:07:
ab:6d:a0:f6:28:1c:9b:c0:70:1c:a7:8b:f2:62:77:8b:2f:ae:
0a:12:c4:d5:1f:55:4f:ea:13:ff:cb:14:6d:45:ac:57:51:a3:
37:49:ba:bc:a1:de:89:9d:27:89:21:70:a7:4a:11:bf:88:e3:
71:7f:e7:8a:44:e5:3d:11:f6:4f:4b:ad:47:5e:25:a8:ef:3c:
f3:70:7f:12:ff:44:6b:f4:8b:a0:34:74:d7:b3:d8:fc:f3:15:
88:13:b8:74:00:20:1e:63:d1:10:b6:95:90:77:ce:18:e8:97:
ad:de:79:a1:0d:d4:2b:7d:92:c7:c2:db:63:ee:d4:39:f1:22:
e1:01:cb:33:a7:a5:40:b4:62:30:22:25:b7:46:d8:31:6a:bf:
d1:21:95:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:51:22 2025 by rpki-client