Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1CB5D4C36211EFB772CF91762E951A.roa
File: DD1CB5D4C36211EFB772CF91762E951A.roa (raw, json)
Hash identifier: Im4upQi5lznCKpiX0tIKd9juuUBW6L/Pdcqx1mSWIrQ=
Subject key identifier: 25:F7:70:3F:DE:C1:8B:30:38:86:C1:85:4C:BB:26:28:F9:E0:0C:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01267A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1CB5D4C36211EFB772CF91762E951A.roa
Signing time: Thu 26 Dec 2024 08:24:46 +0000
ROA not before: Thu 26 Dec 2024 08:24:42 +0000
ROA not after: Tue 04 Mar 2025 08:24:42 +0000
asID: 138915
IP address blocks: 154.93.110.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75386 (0x1267a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:24:42 2024 GMT
Not After : Mar 4 08:24:42 2025 GMT
Subject: CN=676d12cd-6eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:e0:eb:94:80:36:f2:c6:86:37:8c:1e:71:
ef:db:e1:27:5d:bf:a3:9a:dd:a3:dd:8a:3c:66:f3:
bf:2b:9c:23:53:da:67:0b:cd:57:7c:4e:56:2d:75:
69:7f:49:e3:dd:cc:45:c3:86:a1:6d:08:8c:dc:57:
89:b7:1b:ee:20:5f:c5:6e:35:be:b0:8d:dd:9c:04:
f1:d8:8f:e7:d3:5e:b3:a5:08:68:22:a0:57:38:24:
38:8f:8b:11:cd:e7:8d:eb:52:d8:30:c1:fb:7b:3d:
7b:5d:5e:ef:51:60:50:bb:17:40:95:5d:e6:98:8d:
34:a3:ea:c3:ac:d5:10:8c:19:ef:0f:0d:f9:66:df:
95:d3:c9:50:7e:dd:36:36:71:31:01:70:ef:fc:a3:
a2:08:e7:a8:3e:e6:2c:6e:08:ac:d7:b2:60:77:d8:
20:b0:0d:14:37:d2:08:1f:12:ff:d7:26:55:02:05:
86:82:7f:7f:57:5e:cc:f8:aa:86:b5:5b:b8:80:71:
1c:1d:b7:7e:1f:91:de:ac:05:78:73:9c:a9:29:8f:
6e:f3:d4:f7:53:2b:c9:e8:ca:4a:46:b5:e3:61:0c:
c3:ff:eb:3d:db:07:36:e7:7e:7a:38:aa:85:f1:d7:
8b:02:46:14:fb:be:63:22:41:ff:9d:b9:c2:2d:fa:
9f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F7:70:3F:DE:C1:8B:30:38:86:C1:85:4C:BB:26:28:F9:E0:0C:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD1CB5D4C36211EFB772CF91762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.110.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:10:59:bf:de:1b:50:73:92:ce:1c:0f:b6:b7:4f:f8:c4:c3:
1a:91:38:22:d3:67:1f:aa:68:93:48:33:99:45:f1:a8:d4:a1:
42:57:57:f5:c2:48:70:62:95:74:8c:fc:b6:06:72:47:d5:19:
11:40:01:32:14:b8:b8:1c:19:45:c5:95:56:d7:44:82:d9:de:
fd:d0:ba:a5:1a:0b:c8:6f:e8:51:ab:c3:1f:21:83:bb:25:7d:
34:a0:6f:49:c2:f2:94:8c:c0:50:49:b4:43:1f:d1:32:50:80:
4a:1a:71:c5:69:39:b0:0f:d0:77:b9:90:c7:52:c7:ae:2b:3a:
cc:38:b9:db:9a:eb:99:2b:aa:08:07:02:e3:b1:8f:41:91:c5:
cf:ae:5f:31:50:95:85:8d:2c:a8:99:15:86:d6:08:a7:a3:f2:
cd:a0:4c:73:51:63:d1:62:1e:31:61:bb:f1:2f:29:e0:de:3c:
85:17:3e:ae:7f:56:bb:10:6b:e8:38:ce:37:97:79:e1:1e:f8:
8a:1f:df:84:44:71:01:e9:5d:37:54:8f:45:ce:e9:4a:76:b1:
76:c3:73:42:7b:90:f3:51:e4:58:ed:a1:20:87:73:55:4f:33:
e6:94:8d:ed:ca:94:d1:30:b1:f8:cb:ee:54:53:e5:0b:77:5c:
5c:66:a2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:42:32 2025 by rpki-client