Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0338078B21A11EF84A8CAAE762E951A.roa
File: C0338078B21A11EF84A8CAAE762E951A.roa (raw, json)
Hash identifier: nvE5B04g9YyM14KDtUMdWchY8JNZOhn9UwN6nLxUWgo=
Subject key identifier: 61:3D:27:A9:16:1D:A5:2A:70:B0:65:ED:84:1D:8D:05:0B:9E:F5:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0338078B21A11EF84A8CAAE762E951A.roa
Signing time: Wed 04 Dec 2024 08:35:43 +0000
ROA not before: Wed 04 Dec 2024 08:35:40 +0000
ROA not after: Sat 01 Feb 2025 08:35:40 +0000
asID: 138915
IP address blocks: 154.93.112.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71648 (0x117e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:35:40 2024 GMT
Not After : Feb 1 08:35:40 2025 GMT
Subject: CN=6750145f-2679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b0:a5:31:10:6b:d4:b5:d6:c7:f6:0b:53:00:
74:9e:38:54:0f:7a:36:8d:08:75:19:b7:7b:fa:b8:
94:a4:5f:aa:dc:bd:e5:60:59:d1:7a:c5:d5:d0:34:
16:a9:68:30:52:19:78:6e:7b:13:e4:32:20:9d:84:
85:69:f1:66:d2:b4:e9:bb:5d:c2:0c:16:c1:e9:50:
57:42:dc:61:50:bc:b3:0f:03:b5:84:1a:c9:d0:23:
43:39:7f:4d:ba:9a:99:a1:18:ef:6e:42:7d:d6:38:
3e:44:60:07:a8:6a:fd:26:fe:e8:97:54:71:e4:ec:
83:eb:b4:0a:a8:9c:97:7f:71:2c:b3:14:5b:df:c1:
c3:a0:44:82:43:4d:33:0a:a7:da:f9:28:e4:f7:dd:
62:be:2f:f0:e9:82:eb:2e:03:15:29:f2:51:4e:42:
bf:f9:b9:dd:01:e8:61:05:24:f4:ee:49:2a:84:cf:
39:7e:31:3e:2f:c1:5e:d6:82:f2:09:33:a2:fa:97:
c3:a0:3f:fc:a8:d9:9b:23:28:19:e7:0a:cd:93:81:
9a:9b:66:08:94:24:f2:37:52:75:df:b0:1b:9d:f9:
df:7a:3d:6a:f4:2d:70:7a:33:cf:51:86:f1:d5:23:
bf:60:f4:6d:5a:a5:09:5f:0a:27:75:bc:c0:da:a5:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:27:A9:16:1D:A5:2A:70:B0:65:ED:84:1D:8D:05:0B:9E:F5:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0338078B21A11EF84A8CAAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.112.0/23
Signature Algorithm: sha256WithRSAEncryption
d5:a2:39:7c:f7:4d:89:df:f9:8d:89:a9:b5:df:7c:5d:15:b8:
4c:73:ab:8c:81:b9:3f:1f:aa:32:9f:77:15:bb:3e:d3:81:d2:
19:db:04:79:8a:ad:d1:78:3c:e1:a6:bd:63:ce:73:1f:61:a0:
a8:10:35:c6:f8:e1:c6:04:79:cd:cf:51:fe:9a:8d:c1:b6:66:
f5:ec:57:0a:1e:d2:f2:1d:c3:4f:a8:02:a2:3e:ca:f8:6c:99:
8f:a3:c2:7b:d4:ee:c0:0c:2b:cd:30:0c:70:6a:40:16:70:5c:
0d:d5:e6:08:86:5c:55:40:bc:82:8e:9c:2b:6b:94:0d:90:34:
ef:fa:d4:0c:38:44:3c:78:a4:98:b3:a8:63:b2:81:ee:7f:86:
9f:2d:f4:27:0d:e9:b4:86:01:50:60:65:f0:a6:d3:bc:81:af:
bd:f0:0f:7d:b4:c3:c8:f4:59:db:1e:b9:d9:be:36:ff:b5:95:
5c:a3:ac:99:52:5b:89:31:72:57:00:65:6e:08:57:91:50:88:
4c:ee:da:60:85:4f:d7:dc:46:84:f9:6f:42:66:c6:7d:5d:06:
e4:83:f6:14:d6:2d:48:73:f9:f2:78:5b:ef:da:25:de:72:18:
98:37:5a:d7:f5:99:42:8f:43:01:f7:d7:0a:79:4a:d5:c4:05:
3d:e1:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:22:28 2025 by rpki-client