Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9280D56DBF511EFAA6C8C74762E951A.roa
File: D9280D56DBF511EFAA6C8C74762E951A.roa (raw, json)
Hash identifier: aaa1bvRN08SNENTQvc2KWs8FEQYgxB3LfOcPweRRvBg=
Subject key identifier: 5C:43:0C:E3:8F:AB:4A:01:B4:6F:B3:DE:99:2C:86:06:69:F0:19:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9280D56DBF511EFAA6C8C74762E951A.roa
Signing time: Sun 26 Jan 2025 14:57:23 +0000
ROA not before: Sun 26 Jan 2025 14:57:19 +0000
ROA not after: Fri 21 Mar 2025 14:57:19 +0000
asID: 138915
IP address blocks: 154.93.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84706 (0x14ae2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:57:19 2025 GMT
Not After : Mar 21 14:57:19 2025 GMT
Subject: CN=67964d53-768e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:1a:d3:10:51:8a:bc:04:bd:22:36:19:68:
67:8b:3b:81:d3:35:df:a2:53:e2:32:6f:8f:c3:f3:
04:31:60:e2:12:ca:97:d0:5f:f1:5c:8d:62:8d:d7:
d8:48:cd:b5:a0:72:ee:64:58:e9:e0:52:23:bc:a6:
22:64:88:ba:c7:e9:45:90:66:5f:53:ab:01:fb:b9:
75:0b:1b:0e:98:ed:39:29:e8:40:e8:6f:38:97:c8:
b2:0d:19:cd:dd:6c:e8:ff:d0:e7:38:fd:23:c9:2e:
0c:49:95:e7:2c:69:d5:25:83:9b:36:fc:29:c3:31:
56:12:a0:dc:8f:ed:d1:6e:84:3f:26:98:7e:16:28:
b0:22:29:18:e1:4c:ee:06:45:a8:24:dd:80:b5:fb:
c6:b3:5b:ed:c4:7d:ba:14:cc:8b:eb:5d:92:5d:a3:
ab:b5:0d:6d:58:6c:45:03:09:c0:45:28:c4:74:8c:
3f:16:cf:ee:65:27:df:9e:93:d5:ff:94:a1:d1:91:
e0:ee:b9:a0:cf:f5:59:ce:c8:fe:8a:32:fc:f9:a2:
fe:49:e7:6f:de:89:a2:ae:30:f4:1e:28:be:a6:83:
83:84:96:2f:38:e4:75:bd:ad:05:e9:c1:a2:b4:97:
41:4a:62:1d:b1:fb:c1:d5:8e:66:3f:7f:b9:da:92:
16:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:43:0C:E3:8F:AB:4A:01:B4:6F:B3:DE:99:2C:86:06:69:F0:19:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9280D56DBF511EFAA6C8C74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.50.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a9:4d:f5:30:78:81:56:d6:6c:bb:bb:2c:c1:a2:f9:8d:7a:
92:9c:fd:10:9f:0d:4c:90:ab:23:a6:cc:2c:23:05:ef:cb:81:
dd:f6:4a:3f:a8:d0:86:24:b8:54:f1:b2:44:a5:67:25:b6:7f:
63:e4:e2:33:dc:d7:20:99:f5:94:08:4d:32:16:be:18:d7:6f:
12:58:04:1a:64:ee:ff:fd:c6:5d:8a:f3:74:3a:b5:c1:dd:10:
c0:3d:1b:19:35:e1:bd:71:88:6a:c1:45:20:f8:11:00:65:d4:
64:1c:6b:c2:b9:04:2c:86:c1:bf:9e:37:ff:50:74:5a:b7:92:
7a:e5:0d:f1:1e:dd:6f:7d:bb:95:01:69:85:3a:83:e3:cc:c5:
22:84:d1:82:54:27:3d:06:22:a1:0d:3b:fe:f5:c0:58:bb:5b:
57:e2:88:de:f0:4f:83:fc:59:fd:e1:96:27:6d:3f:a8:63:10:
fb:1f:65:db:c5:54:7f:84:b9:c4:45:fe:42:ed:d4:7a:67:26:
e0:05:c1:b3:02:e9:bb:1d:3a:58:66:25:36:95:43:b2:76:fb:
03:97:fb:7d:75:73:45:ac:d3:3a:01:48:81:da:0d:87:e5:f7:
8a:71:d5:51:15:00:90:bb:8b:67:cb:ed:56:ca:8f:e2:e2:65:
09:36:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:21 2025 by rpki-client