Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDE6ABB8DBF311EFA44D5467762E951A.roa
File: FDE6ABB8DBF311EFA44D5467762E951A.roa (raw, json)
Hash identifier: /8kn8s+O4ky+tu2vw9Th2SqjbH8o+ICVt73fOiyJREc=
Subject key identifier: 50:1D:96:48:E1:08:12:1B:33:5E:67:9D:9C:5F:11:43:D4:B9:0E:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDE6ABB8DBF311EFA44D5467762E951A.roa
Signing time: Sun 26 Jan 2025 14:44:05 +0000
ROA not before: Sun 26 Jan 2025 14:44:02 +0000
ROA not after: Fri 21 Mar 2025 14:44:02 +0000
asID: 138915
IP address blocks: 154.93.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84694 (0x14ad6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 14:44:02 2025 GMT
Not After : Mar 21 14:44:02 2025 GMT
Subject: CN=67964a35-1b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:62:e0:8b:9f:7c:ef:e1:90:78:69:c1:49:
c7:7f:ac:5c:25:86:81:3f:2c:2b:7a:52:37:1c:ea:
dd:27:68:c8:4d:e2:e0:4c:00:5c:74:0e:fa:70:6e:
b1:d1:e7:a5:99:af:11:89:2a:fd:13:22:f9:27:fb:
84:5a:2a:2c:e1:30:2e:c9:17:ec:91:14:2f:98:ad:
5b:b9:7f:a5:6b:4d:d1:4d:f1:2c:9e:e0:08:2d:e8:
53:90:36:44:ef:23:9e:85:fa:f6:3b:b1:cc:d8:1c:
6e:9e:90:06:32:66:cc:fd:25:f2:43:18:fa:6a:98:
fd:c5:93:2f:4f:69:96:3e:9d:db:ea:ae:9f:02:df:
b4:61:ac:ad:cb:b5:48:03:e7:7f:34:1c:6f:a9:82:
91:78:95:47:86:6f:45:e4:24:13:54:90:3c:19:59:
8f:b1:1b:2f:9b:2a:d9:c9:8b:1a:e9:c5:86:08:a0:
e3:84:61:0a:77:19:99:b2:62:d4:bd:d2:71:54:2e:
a9:57:87:99:59:e8:e8:59:ac:cc:2b:5f:2a:8a:86:
12:3f:f6:a2:16:79:60:34:32:42:ca:4c:a4:67:c0:
f7:16:df:9f:e0:57:2b:38:38:be:40:b0:34:3f:90:
d6:5c:00:52:d8:86:5d:c1:18:c5:f2:64:0f:b5:62:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1D:96:48:E1:08:12:1B:33:5E:67:9D:9C:5F:11:43:D4:B9:0E:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDE6ABB8DBF311EFA44D5467762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.58.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f6:06:54:f3:f4:e2:9c:f1:c6:bd:76:0b:da:a2:9e:6e:05:
3b:8a:1c:46:63:0f:9b:5b:89:2c:f8:17:e8:c7:b7:49:12:6a:
25:6b:9e:3e:9b:31:57:ab:7c:1f:8e:e5:2a:43:1a:f0:0f:14:
2f:7e:5b:55:ef:66:e0:28:85:10:38:dc:16:f0:0c:7b:4c:67:
70:33:49:82:4c:b8:04:01:aa:14:0a:e3:83:01:8e:fd:a4:c9:
1e:b1:a4:04:30:bf:96:38:f2:ad:d4:f8:8b:fc:3d:30:db:2d:
ac:c9:9a:da:76:f2:a7:cf:a7:2d:63:7c:0d:fc:32:00:65:76:
b0:b8:09:c1:24:58:72:97:79:ba:c6:0e:14:89:8f:cb:6f:86:
5b:9a:69:b0:fb:15:01:ea:bf:cf:69:f6:e7:d7:c9:98:73:7e:
09:b4:e5:fe:09:e3:e3:84:b7:1e:d1:b0:37:5a:29:5a:a7:28:
42:b1:8d:ed:4c:50:3a:1c:3a:e8:6b:36:14:62:6a:12:da:af:
d1:05:28:6a:ce:23:3c:b9:1f:5e:cf:cf:3c:11:f7:59:76:5d:
96:16:a4:29:41:63:d7:02:e9:32:1f:24:a9:1c:ee:81:05:46:
f8:c0:3d:9e:74:72:c4:f5:b7:a4:e6:df:eb:22:12:12:60:78:
b2:e7:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:59:18 2025 by rpki-client