Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA629A1EB21C11EF96CA97BC762E951A.roa
File: CA629A1EB21C11EF96CA97BC762E951A.roa (raw, json)
Hash identifier: mhhL8eid6+X9kX2M9JraitOIcqhjuDDHvHP8ZOE/kXI=
Subject key identifier: 77:E1:D0:98:85:EA:7F:12:7C:F9:16:49:10:63:EB:DA:CC:15:75:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA629A1EB21C11EF96CA97BC762E951A.roa
Signing time: Wed 04 Dec 2024 08:50:20 +0000
ROA not before: Wed 04 Dec 2024 08:50:16 +0000
ROA not after: Sat 01 Feb 2025 08:50:16 +0000
asID: 138915
IP address blocks: 154.93.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71674 (0x117fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:50:16 2024 GMT
Not After : Feb 1 08:50:16 2025 GMT
Subject: CN=675017cb-f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:a3:71:93:b4:aa:a6:a2:1b:1a:0c:da:a9:
d9:09:b9:f3:a9:d3:ce:dc:e7:38:bd:97:60:17:f4:
ca:03:74:ad:11:85:91:45:4c:90:23:d2:5a:48:fc:
77:61:82:95:66:b9:31:ae:84:12:9e:df:81:a5:45:
9a:e1:0d:0b:d1:a7:5a:f0:9a:21:8d:e4:0f:91:40:
26:60:a1:f9:08:42:ff:78:4e:3c:dd:68:5a:d7:7e:
3a:a5:bc:38:77:b7:65:11:45:42:8d:65:23:42:f1:
e6:1e:a1:5b:e0:14:f5:94:92:70:9c:c6:3a:6f:68:
aa:cc:9f:5b:f3:fb:83:4e:31:54:4f:9e:d3:ef:a7:
e1:a3:a0:1b:ef:d7:b9:5f:bb:29:5a:5b:02:a2:4b:
07:92:78:87:f8:7b:a8:aa:81:4a:85:b9:41:7e:3c:
ee:f9:44:71:1c:93:1a:21:3e:77:e4:7e:a7:54:00:
5b:dc:40:a9:5a:26:7a:4a:b6:57:38:86:54:2e:b8:
3b:7c:ff:c3:9b:10:d3:dd:6d:a6:b2:e7:30:fe:57:
94:53:6c:7a:ea:f0:9c:f7:e4:30:51:53:43:94:c6:
9d:89:4e:34:d7:3b:4b:47:e8:28:3a:ad:b9:5e:8c:
ef:95:5d:bc:bf:cf:d5:91:38:c1:3a:01:ce:64:6c:
75:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E1:D0:98:85:EA:7F:12:7C:F9:16:49:10:63:EB:DA:CC:15:75:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA629A1EB21C11EF96CA97BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.74.0/24
Signature Algorithm: sha256WithRSAEncryption
14:fa:20:4a:d2:a0:e1:01:92:1b:4f:3b:7e:33:d3:73:38:5d:
49:ce:66:91:97:a8:88:d1:11:37:65:38:eb:7c:97:1e:3e:1d:
51:7c:ac:b2:6f:f9:1f:46:67:aa:33:b1:c8:d0:6d:d0:24:e5:
78:e5:91:78:c0:0d:18:a0:60:dc:bb:87:0c:86:47:54:ff:54:
55:e8:63:a6:8d:7c:04:4e:f1:1c:89:27:e7:b4:ea:58:16:7e:
ec:1d:33:eb:e6:ed:05:4d:1e:c7:27:a8:1a:4f:c0:2c:fb:79:
22:9b:88:f8:3e:31:ad:db:ed:b2:cf:86:a3:72:0d:a1:ab:3c:
aa:55:2d:11:80:66:f9:88:c5:46:4c:18:cd:c6:c2:86:ec:56:
c4:35:6d:96:0c:2a:7b:b7:51:69:84:99:7b:a6:5d:fc:70:e6:
d5:79:53:96:53:16:2c:35:aa:f7:ac:c4:1d:cf:fb:a9:68:a2:
e3:b1:50:ad:27:f9:c2:a4:61:b6:14:85:dd:90:a0:b4:33:f6:
61:b1:6a:62:7f:3f:93:4d:0c:f6:b8:c5:27:2b:54:ab:12:59:
45:60:06:2c:56:db:f6:dd:54:b3:48:b7:f2:61:0e:36:c3:14:
87:52:67:8f:20:6e:fb:a6:10:ee:e7:20:92:dc:0b:5f:0c:ec:
1e:d1:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:08:34 2025 by rpki-client