Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD11769AC35D11EFA04A0473762E951A.roa
File: FD11769AC35D11EFA04A0473762E951A.roa (raw, json)
Hash identifier: JW4F+dFVSFC032X9/3wpMVODXQfEsWHKom9eeznwGNM=
Subject key identifier: 96:98:63:2D:95:C6:40:28:27:07:52:E4:EE:00:17:21:12:29:F0:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012611
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD11769AC35D11EFA04A0473762E951A.roa
Signing time: Thu 26 Dec 2024 07:49:52 +0000
ROA not before: Thu 26 Dec 2024 07:49:48 +0000
ROA not after: Tue 04 Mar 2025 07:49:48 +0000
asID: 138915
IP address blocks: 154.93.120.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75281 (0x12611)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:49:48 2024 GMT
Not After : Mar 4 07:49:48 2025 GMT
Subject: CN=676d0aa0-101c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:27:6f:1a:56:b8:cf:cd:7c:b3:26:c0:fe:
e5:10:32:8b:55:d9:2e:95:01:41:c2:d0:1c:2c:a6:
7e:01:5b:1b:f7:96:8f:9d:37:f7:29:88:f2:b7:61:
c2:8f:0f:77:8b:0b:72:71:fd:f3:cc:3a:71:46:a8:
0b:39:69:fd:90:97:88:d1:cd:ca:96:f3:fc:ab:ef:
48:b4:41:fa:34:96:b5:d8:16:3b:ca:3e:d9:b9:21:
a2:01:e9:3c:8a:17:12:2a:4a:d1:44:30:90:0d:f1:
4c:97:bc:29:7a:a1:0b:1a:31:3d:88:bb:dc:d1:b1:
e0:9c:76:7c:4b:99:1e:bc:52:93:da:a0:5d:c8:d9:
94:e7:82:99:fe:4c:8c:c3:46:49:42:fe:94:34:94:
1b:6b:73:5c:fb:d9:55:af:41:43:05:64:ed:7f:12:
f9:c9:dc:db:ad:e2:1d:32:97:92:e9:50:70:6f:50:
e2:4e:99:a1:e7:77:38:a2:78:b6:78:cb:2f:24:07:
58:ba:f3:92:f2:b0:05:82:a1:70:49:a8:46:52:12:
38:a7:06:90:93:d5:95:52:da:5e:fa:9b:9d:fd:e8:
1e:f7:2a:72:eb:09:a9:17:f3:d9:9a:9e:a5:2e:12:
7c:a9:1c:b8:0e:96:c5:d8:d2:88:5d:53:d0:6b:2d:
26:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:98:63:2D:95:C6:40:28:27:07:52:E4:EE:00:17:21:12:29:F0:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD11769AC35D11EFA04A0473762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:27:00:4f:a8:2b:15:8f:a9:29:c3:58:c0:76:04:f2:7d:ac:
1c:fc:fe:05:ab:32:58:b3:65:ea:39:a6:b6:a1:4f:d1:7c:05:
3e:4e:11:c6:90:30:e0:f7:4f:eb:28:26:95:8e:c0:33:12:f9:
9f:bb:b2:c4:7c:e4:56:51:10:34:54:03:1a:80:cf:71:cd:8d:
62:13:70:de:bd:21:57:87:39:de:53:87:ab:37:66:ec:0f:6d:
69:73:58:2e:49:c9:12:e4:6d:39:0e:42:6e:11:f2:03:e5:4b:
11:ca:0e:0a:0c:a3:c6:77:c6:01:86:d2:13:ff:2e:d4:df:8a:
5d:ce:73:9d:ca:e4:12:b5:38:de:6e:de:54:1f:50:2c:04:9a:
00:a3:5e:7d:a2:b7:24:27:d4:25:14:38:ad:ff:15:1b:e9:de:
18:60:76:de:e4:6f:50:b5:b1:4b:95:b7:06:65:ba:e1:e4:8c:
f1:1b:c3:f7:e3:30:d9:c5:41:e9:49:d0:24:69:54:51:e5:9c:
a8:24:61:46:0a:33:37:9b:93:04:20:94:7e:eb:c0:14:50:5b:
38:73:26:8a:94:15:18:91:89:01:a4:9b:86:65:ac:f6:26:b9:
9d:74:04:2c:32:48:5a:0c:8f:5f:03:55:ad:78:e7:da:08:34:
b7:36:15:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:52 2025 by rpki-client