Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBC9788DBEE11EF88794445762E951A.roa
File: BCBC9788DBEE11EF88794445762E951A.roa (raw, json)
Hash identifier: B9BcHnZ47gudgUw42u0CM362D+ajdbD7KULqzR4PGxk=
Subject key identifier: C3:CB:32:30:97:3A:6A:D3:28:91:E9:B4:BD:81:8A:7D:66:60:24:ED
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBC9788DBEE11EF88794445762E951A.roa
Signing time: Sun 26 Jan 2025 14:06:29 +0000
ROA not before: Sun 26 Jan 2025 14:06:25 +0000
ROA not after: Fri 21 Mar 2025 14:06:25 +0000
asID: 138915
IP address blocks: 154.93.36.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84662 (0x14ab6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:06:25 2025 GMT
Not After : Mar 21 14:06:25 2025 GMT
Subject: CN=67964165-4c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:62:63:f8:6b:a6:cb:48:73:e0:15:f7:14:12:
54:1e:11:26:5e:c9:dc:ea:fa:7c:94:ee:c1:09:a6:
1f:91:93:9b:9b:ce:c1:fe:10:06:4b:fc:e6:d5:4a:
2c:12:67:87:47:e0:50:aa:13:c8:d7:e7:cb:0b:5f:
97:93:fc:a7:e8:03:fc:a5:f1:ac:6d:d8:d9:3e:bd:
21:f2:80:6c:49:c8:79:e9:49:d6:a8:7a:a7:bc:5c:
48:f9:ae:c5:da:62:ab:6c:f9:bc:32:95:e8:b7:0a:
26:e4:43:50:c6:38:d1:a1:15:72:01:67:9e:6c:a0:
59:3c:f1:87:c1:10:24:fc:ac:11:88:4b:95:40:34:
3f:01:bf:20:56:c2:8a:0c:99:ce:99:a9:23:0d:8f:
ba:95:a3:30:41:8d:63:0f:79:e8:ec:e4:ed:2c:84:
6b:dc:9d:5b:b5:f4:a7:e2:a3:73:12:6a:37:77:89:
df:ec:bb:f9:01:79:bb:48:b8:17:95:7d:67:a2:21:
69:cb:2c:55:9c:fe:39:65:ee:3f:b1:0a:94:0c:d7:
04:7f:0f:84:24:9c:a9:bd:db:96:c4:cc:bf:49:51:
21:2f:d0:1b:fb:5c:98:65:d7:66:25:c8:3f:69:79:
a1:b4:59:0e:fb:82:a4:6f:4a:6c:87:26:58:ef:40:
39:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:32:30:97:3A:6A:D3:28:91:E9:B4:BD:81:8A:7D:66:60:24:ED
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCBC9788DBEE11EF88794445762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.36.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c7:ad:19:0a:22:96:62:f8:ac:88:35:70:13:d2:4d:7f:c2:
52:db:02:0a:a5:fa:96:03:e1:12:73:69:b7:c8:3f:6c:d5:90:
b2:b0:43:33:f4:98:a4:fc:ee:4e:8e:38:8a:48:fc:52:4b:9f:
da:82:ba:bb:ef:0f:80:e6:02:59:36:e1:03:4b:23:bd:f1:85:
47:94:90:95:81:82:80:68:ea:fc:1f:b4:02:90:43:94:a3:46:
a1:4a:e7:f2:93:4f:31:83:5e:68:d5:65:75:06:f9:6d:d3:c0:
7d:34:d9:09:de:e1:58:c0:11:77:f7:2b:29:80:32:9e:d5:bd:
a6:e0:ca:80:f9:d9:9b:e9:19:fb:43:77:f3:c4:f3:ab:6e:a0:
e2:f7:e8:f3:a7:cf:00:3b:92:6a:2a:67:e6:b3:d1:ed:b9:c7:
58:87:8b:b4:fb:d8:5c:fa:c1:a3:da:98:dd:01:35:39:74:06:
b1:07:8a:93:b1:b7:a8:eb:20:15:b0:ad:de:4c:c0:80:f5:ec:
34:73:c9:ea:63:63:87:b2:79:5d:7d:fe:42:50:41:58:b5:2a:
34:a1:6a:74:50:9f:00:d7:ed:88:e0:78:30:91:70:18:c0:56:
96:98:bc:e6:9e:9f:66:d7:9d:02:a9:08:46:51:56:76:68:2c:
9d:d5:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:07:07 2025 by rpki-client