Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE451800DB2611EFA6111F81762E951A.roa
File: BE451800DB2611EFA6111F81762E951A.roa (raw, json)
Hash identifier: xgm1EOY9F3Zz8xaG00LdflNETvIjgv2IP5vMZ7I+L1k=
Subject key identifier: AB:5D:C2:AC:63:9E:D3:23:D0:44:A6:A6:62:3C:E8:6A:A2:F3:BC:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE451800DB2611EFA6111F81762E951A.roa
Signing time: Sat 25 Jan 2025 14:14:52 +0000
ROA not before: Sat 25 Jan 2025 14:14:48 +0000
ROA not after: Wed 26 Feb 2025 14:14:48 +0000
asID: 149513
IP address blocks: 154.201.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84429 (0x149cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:14:48 2025 GMT
Not After : Feb 26 14:14:48 2025 GMT
Subject: CN=6794f1dc-feab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:35:4f:67:54:82:fd:b9:41:24:38:5d:84:
29:3f:9a:e7:ec:fd:49:75:65:43:0f:c8:17:98:cc:
27:ed:d2:4b:0b:c9:aa:bb:45:25:07:90:95:19:4f:
22:7c:57:48:d4:63:c5:04:9f:a5:96:2a:d2:61:c7:
fa:f5:6f:17:86:8c:aa:7b:ac:82:15:fb:ee:71:03:
a2:68:f2:e7:9b:6c:86:e8:23:74:49:67:df:c4:aa:
64:89:7f:0d:9b:a0:6f:bc:33:f8:fb:21:45:2f:26:
75:ba:30:ba:1d:4f:55:e4:bd:25:66:f1:f6:33:4e:
5a:38:98:6b:1d:f5:54:83:d3:e1:e0:0e:af:03:ce:
8f:a8:be:02:29:0a:b0:26:47:61:75:27:de:a6:94:
ff:db:56:a8:92:d3:c5:48:1d:d5:6f:1b:cb:e2:97:
67:9d:6b:ff:5b:6b:fc:fd:8b:f2:7f:04:7b:d6:5e:
34:81:dd:b0:ae:cc:6d:7f:92:2e:82:d6:e8:62:cb:
3f:cf:23:60:3d:c0:07:ff:fc:21:ff:ce:2f:de:61:
7f:96:9f:de:21:a9:25:da:7f:da:4b:fe:cf:f9:89:
b0:ea:19:c1:bd:2a:54:04:6b:a9:3f:b5:40:ae:0f:
e4:13:ca:11:ee:14:af:aa:fc:59:66:f9:1b:03:86:
4a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:C2:AC:63:9E:D3:23:D0:44:A6:A6:62:3C:E8:6A:A2:F3:BC:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE451800DB2611EFA6111F81762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.93.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:1e:ea:9e:c9:20:a0:7b:98:a1:2e:d0:be:72:bf:ab:91:65:
de:8d:0b:d8:8f:9d:8b:53:77:e2:67:71:70:9f:a0:10:8a:f5:
8d:81:42:ba:ec:51:82:83:58:6c:d8:d1:90:ad:f0:ac:40:dc:
59:61:ba:c8:8e:ed:20:97:94:06:d1:3c:87:0c:d7:79:12:ab:
1f:9a:6e:d4:aa:32:a4:bd:ed:bd:2a:51:75:b5:68:d0:64:03:
06:14:59:ae:71:c6:88:39:fd:01:2a:78:a3:e7:33:03:96:19:
11:31:b0:79:b4:57:51:b1:2a:9d:c1:86:d6:b7:ed:86:86:2c:
28:ee:71:1e:9c:1f:35:28:e9:b8:4d:72:e7:27:6f:63:59:bf:
9c:83:51:5b:c0:75:c0:c8:80:bd:66:76:bd:2c:b1:5f:c6:6e:
27:08:57:63:77:eb:b5:f7:60:c8:fe:08:dd:75:46:c3:a3:71:
9a:a8:c9:2b:7f:74:e5:13:e6:e7:52:b5:f2:05:fb:93:ab:56:
c5:89:e1:0d:1d:30:35:66:ae:34:bf:b7:c7:c2:ac:e6:41:9f:
8a:04:9a:fa:50:2f:69:8f:f5:04:7a:83:45:9a:d0:c2:43:68:
9d:fb:b7:3e:ed:a8:39:34:6e:6c:fc:dc:38:dc:bb:17:dd:2c:
42:4c:68:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:18:11 2025 by rpki-client