Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F706F3AADC9F11EF852AFB6F762E951A.roa
File: F706F3AADC9F11EF852AFB6F762E951A.roa (raw, json)
Hash identifier: at4h5beT/EdhXUJBE+8seLJS4m5wmtsMfLHVEJMz8qM=
Subject key identifier: 03:2D:79:88:12:44:DC:C1:52:57:DD:AE:6C:10:6B:C3:A1:C5:E6:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BCD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F706F3AADC9F11EF852AFB6F762E951A.roa
Signing time: Mon 27 Jan 2025 11:15:09 +0000
ROA not before: Mon 27 Jan 2025 11:14:56 +0000
ROA not after: Sat 08 Feb 2025 11:14:56 +0000
asID: 5065
IP address blocks: 154.93.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84941 (0x14bcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:14:56 2025 GMT
Not After : Feb 8 11:14:56 2025 GMT
Subject: CN=67976abc-56f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:b0:6d:1b:e6:f7:a4:bf:7b:68:e2:fb:ba:
05:d1:02:d4:2c:31:df:43:45:22:47:e9:45:8f:13:
a8:bc:9f:cb:3f:f9:c0:75:46:df:00:81:2d:25:76:
7e:e5:18:c1:45:55:33:18:9a:c8:9f:a5:57:0f:e2:
62:aa:e9:90:60:04:e9:b9:ed:1e:d0:9d:7f:1f:d3:
39:ed:13:d4:3f:f4:4c:c1:34:18:b3:c4:ac:07:fa:
5a:f3:f4:cc:65:2c:5c:d2:b2:fb:d5:32:06:1c:57:
d1:c4:2d:67:98:93:e6:49:de:0b:4b:00:90:e2:12:
fc:6f:4f:37:79:20:0e:19:ce:c0:44:a5:d1:3b:90:
06:84:91:f6:e3:03:8e:16:c7:58:49:7e:fc:36:15:
84:e0:43:33:e1:44:59:27:fe:20:64:03:f4:6d:1c:
7f:79:8f:52:c4:fc:34:9e:96:b5:cb:35:e0:10:5d:
5b:94:17:f4:40:e0:4c:3f:42:e3:3f:d5:30:05:72:
6a:1c:75:0c:f4:b3:e2:f4:de:e9:8c:47:24:02:1a:
09:0d:95:a5:63:a9:13:19:cb:0c:c6:eb:cc:1e:46:
85:52:79:99:72:72:25:66:09:89:de:47:71:79:e2:
7c:a2:72:b7:34:94:1c:7c:43:49:47:3f:b5:69:61:
50:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:79:88:12:44:DC:C1:52:57:DD:AE:6C:10:6B:C3:A1:C5:E6:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F706F3AADC9F11EF852AFB6F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.16.0/22
Signature Algorithm: sha256WithRSAEncryption
61:1b:70:74:a5:73:b1:fa:01:3d:c5:30:4e:5f:58:6c:80:9a:
63:75:10:17:10:1c:7e:8e:1e:b7:58:a1:e9:dd:42:c6:86:63:
ce:c2:6c:55:fa:91:89:c6:7c:29:1a:99:ea:c4:a2:a7:ad:22:
84:0f:cc:9e:c5:b3:44:d2:6f:a0:4e:a3:69:6e:45:56:48:1c:
d6:56:34:f3:c9:33:a8:ef:d0:32:96:0a:a5:ee:9e:7d:8a:a5:
ea:30:2a:b0:ed:bb:b5:d6:bf:8d:a3:51:6d:00:f6:cc:9d:64:
ce:da:6c:23:3d:62:07:48:62:34:c6:76:5a:10:4b:8f:e7:9d:
ad:9f:33:e5:c0:62:6d:df:cf:9e:b6:3d:10:4d:b9:1b:a9:19:
85:f8:e4:90:44:58:0b:44:1b:56:43:1d:e7:fe:f5:75:c8:2c:
45:70:97:40:d9:b2:86:60:8a:9b:f7:18:e6:06:a4:2f:16:a7:
8d:26:bb:52:21:6c:1c:f8:eb:9f:d7:ee:63:d0:92:91:fa:5b:
dc:51:d2:6f:26:d3:3b:eb:f6:1b:10:1a:91:01:5d:f8:ef:9f:
84:f8:7c:f8:33:7b:5e:69:8b:00:10:c6:af:55:67:8c:51:78:
e2:2d:25:32:9d:37:ef:1c:60:0c:b9:8f:ca:fa:5d:c1:9b:b6:
5b:98:c3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:06:06 2025 by rpki-client