Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24DCC9CB21C11EF937CCCBC762E951A.roa
File: F24DCC9CB21C11EF937CCCBC762E951A.roa (raw, json)
Hash identifier: ltUpdPIZx5Wm6XiKgoyaNxCWs/jjft0o1hBqzebC4os=
Subject key identifier: 70:09:8E:22:51:15:19:57:87:4C:BE:99:53:D5:EF:65:B3:27:7A:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24DCC9CB21C11EF937CCCBC762E951A.roa
Signing time: Wed 04 Dec 2024 08:51:27 +0000
ROA not before: Wed 04 Dec 2024 08:51:23 +0000
ROA not after: Sat 01 Feb 2025 08:51:23 +0000
asID: 63139
IP address blocks: 154.93.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71676 (0x117fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:51:23 2024 GMT
Not After : Feb 1 08:51:23 2025 GMT
Subject: CN=6750180e-a018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6f:00:fa:19:66:f7:0f:66:1b:b2:1a:c6:8d:
af:9c:7e:97:18:54:f6:24:49:42:a6:59:79:75:d6:
d3:87:8a:5c:ef:78:a6:bc:7f:d6:f1:ba:7a:9f:6c:
7b:4b:29:66:ad:14:b7:cf:81:2b:07:57:b7:a7:96:
93:b3:ea:31:97:e5:aa:1b:63:09:9c:b8:a5:64:10:
22:ac:98:66:23:50:70:b1:77:45:18:eb:ce:ec:c5:
8d:01:a3:5c:96:0d:e9:1b:cb:98:f5:16:a9:69:24:
01:61:74:73:8b:0d:16:54:60:e3:2b:9e:67:de:2a:
66:00:25:82:df:64:1e:f7:b3:f7:40:14:57:98:43:
5f:57:98:a8:98:ee:9a:1d:9d:b2:a2:d5:9e:5d:6a:
11:49:b6:aa:c9:78:8c:f1:78:51:9f:d4:f6:6b:24:
37:30:52:c6:3c:15:eb:91:0e:54:9b:14:e2:1a:bd:
39:7b:a2:06:a3:a9:b4:29:16:43:cd:93:f7:9b:3f:
62:8a:3b:eb:35:40:3e:a0:bc:65:c6:32:07:e2:20:
a4:3d:03:f4:88:18:33:f0:08:ef:f0:e9:af:54:a4:
c5:63:12:97:b2:27:4a:26:fa:3d:ab:72:6c:a8:9d:
6a:a0:da:bf:79:95:93:91:56:0e:d5:f0:ac:dd:6b:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:8E:22:51:15:19:57:87:4C:BE:99:53:D5:EF:65:B3:27:7A:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F24DCC9CB21C11EF937CCCBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:5a:43:f3:6f:fc:57:b8:11:d2:c4:53:56:54:71:5f:a3:62:
2a:c0:4c:c0:95:47:52:1f:81:f0:3d:cd:a5:27:6d:15:a9:ae:
76:e3:7e:5c:be:00:74:c8:f9:95:ed:dd:2a:4e:e2:d0:9e:06:
4c:bb:70:73:1e:fd:93:e6:3e:08:b0:3f:c6:ff:dd:1b:9c:97:
e7:55:7f:23:cc:f8:f3:2b:4e:32:d0:b8:29:c8:4e:d8:85:39:
38:8d:cc:48:d6:76:bc:ba:1f:3a:e9:72:6c:7f:a1:61:07:30:
12:4a:df:3b:1a:85:a4:00:9d:9b:f1:a9:18:2d:ff:22:7d:8d:
1b:cc:b1:a8:4b:47:aa:54:0a:9d:33:57:ae:0a:4d:03:a3:e4:
89:08:6c:77:40:93:78:e9:d6:80:58:f4:69:05:41:e1:5f:40:
83:fa:b6:71:ba:92:73:f2:13:59:e7:e7:89:6c:20:23:43:e4:
26:d5:c4:5a:27:76:99:f1:95:3e:00:04:b3:0b:60:90:c8:a6:
ce:36:ba:ca:fc:19:6a:2a:b7:86:84:24:91:e7:6a:23:b1:f1:
0f:74:fc:79:ae:de:11:da:9b:38:cd:08:b7:e2:2d:f1:3d:41:
f6:15:23:f8:d0:29:e6:cf:2f:de:14:65:fb:82:6f:5f:95:5d:
ee:ef:4b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:31:48 2025 by rpki-client