Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB4E2D2C36011EF88702F85762E951A.roa
File: FDB4E2D2C36011EF88702F85762E951A.roa (raw, json)
Hash identifier: RdUQ3tTmVx1g2JpH3F+4y9f1VP6oP8hi8UkQGTMq2oU=
Subject key identifier: 92:A5:DD:AD:24:20:BC:F9:C9:BD:FE:C6:25:A3:09:E2:E7:F9:CD:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012652
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB4E2D2C36011EF88702F85762E951A.roa
Signing time: Thu 26 Dec 2024 08:11:21 +0000
ROA not before: Thu 26 Dec 2024 08:11:18 +0000
ROA not after: Tue 04 Mar 2025 08:11:18 +0000
asID: 63139
IP address blocks: 154.93.82.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75346 (0x12652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 08:11:18 2024 GMT
Not After : Mar 4 08:11:18 2025 GMT
Subject: CN=676d0fa9-f6b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:4a:d3:e8:ae:bb:60:5c:73:3c:3f:b1:2a:
15:d1:ba:fe:09:29:d9:68:ce:7b:b0:cc:cd:04:15:
fd:8c:d5:ce:68:0b:51:f2:49:90:f4:c2:ae:14:e5:
1e:58:44:83:16:ff:04:c3:86:30:07:71:2d:61:96:
30:9f:5a:f6:b2:7f:62:80:2d:5f:0d:0e:45:66:d4:
61:bb:2c:7e:61:48:a6:e6:a1:6d:01:7b:05:1a:fc:
cc:a9:19:3f:aa:9a:61:07:10:ac:a6:31:1f:cb:dd:
9c:7d:73:43:d6:5b:a9:b7:4b:80:fb:3b:c8:14:6e:
4f:d4:83:28:ec:e3:be:9f:c5:8f:bf:31:6b:f3:03:
d7:91:ab:e0:65:1e:33:7d:da:1d:23:b6:85:95:d2:
6b:d3:8e:3b:f3:ac:1a:e1:6c:77:75:a3:fc:ee:3a:
67:85:21:ab:42:82:a0:53:2e:21:9c:26:e8:99:4b:
66:0a:73:48:95:80:95:fc:33:d9:ce:53:1f:db:75:
27:84:9a:02:5d:9b:68:f9:51:b5:1e:ab:af:b4:55:
8f:cd:95:b2:12:5e:60:21:d3:69:56:95:e0:3b:86:
fc:89:0f:dd:fe:19:bf:30:17:af:17:30:da:8a:09:
c5:e8:07:1b:9d:27:01:65:9f:8c:b8:d4:4e:d3:ce:
fc:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A5:DD:AD:24:20:BC:F9:C9:BD:FE:C6:25:A3:09:E2:E7:F9:CD:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDB4E2D2C36011EF88702F85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.82.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:67:be:63:93:d5:b8:e3:31:43:d4:db:aa:07:67:6c:f8:36:
63:1b:77:f1:c3:24:28:96:36:7f:d4:bb:74:60:a6:cf:53:d6:
6a:37:e3:42:29:57:c0:a6:ed:06:c0:12:e5:47:79:6b:6a:bf:
a2:13:97:f6:16:13:f7:97:ec:12:e6:51:4f:92:fa:40:76:02:
0a:0b:40:b4:51:cf:62:01:5b:4d:87:4e:3c:d4:e1:b6:b7:dd:
7d:af:bd:ba:f7:40:d0:50:10:9e:8c:36:f2:2f:9d:b7:43:08:
67:be:f9:8e:cb:a0:9c:c0:5d:d4:65:ab:b3:6c:08:65:19:48:
c9:9b:d7:82:5f:62:a6:af:85:a1:d7:74:6c:23:9d:31:a5:ca:
d9:fa:96:9b:c4:b2:c6:62:27:16:92:42:1c:a4:92:70:52:01:
bf:dd:1a:3d:3a:79:0d:1a:2f:b1:64:30:e4:04:38:e0:69:7c:
ae:d4:92:f9:63:5d:eb:ac:2d:11:54:08:14:d2:76:e6:06:bb:
90:28:b3:04:9f:bb:1a:b6:1a:eb:84:82:72:a1:2b:25:98:32:
5b:f2:59:3c:e9:0d:20:8b:5f:4e:10:1b:15:9f:b6:1a:43:51:
cc:b7:d9:66:ad:ea:82:42:ea:7f:93:d2:35:07:85:d3:21:81:
c0:6c:c3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:37:33 2025 by rpki-client