Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0284C30AD98B11EF9D5E07A2762E951A.roa
File: 0284C30AD98B11EF9D5E07A2762E951A.roa (raw, json)
Hash identifier: rK25awfdc6IAwVMs01gxvuRhBkk2mhLjCxajQ0KScDk=
Subject key identifier: 56:19:93:C6:9F:05:33:4B:68:4B:BD:20:BA:BB:05:26:0A:AF:E0:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014264
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0284C30AD98B11EF9D5E07A2762E951A.roa
Signing time: Thu 23 Jan 2025 13:07:34 +0000
ROA not before: Thu 23 Jan 2025 13:07:30 +0000
ROA not after: Fri 28 Feb 2025 13:07:30 +0000
asID: 62240
IP address blocks: 154.195.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82532 (0x14264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:07:30 2025 GMT
Not After : Feb 28 13:07:30 2025 GMT
Subject: CN=67923f16-8f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:98:11:a7:c6:df:09:83:ef:5c:9f:f0:1e:
85:fb:3e:8b:b2:6b:ac:40:10:a1:6a:3d:20:ce:61:
9c:27:5a:04:0a:5f:cb:4d:23:36:e0:8a:47:0e:0b:
6e:51:4f:17:a2:d7:60:10:aa:ec:0c:0a:2c:68:21:
b1:41:51:37:e8:8d:2b:6c:a6:90:38:41:ac:0c:3c:
4b:7e:6a:a7:8f:c8:57:90:3a:09:94:17:40:ef:22:
06:eb:35:d6:d4:2f:a1:d8:72:03:6f:44:7b:59:92:
e1:fa:01:9a:c6:bc:28:a4:3f:59:34:8a:3e:ec:52:
9d:be:1f:fa:7a:4a:40:a8:9b:63:ab:10:42:67:25:
76:0f:e2:0e:44:48:35:38:40:8c:47:e5:da:0a:0f:
8d:44:79:8b:a6:88:2b:13:12:92:89:e5:4d:a4:e1:
3f:95:3f:ed:3e:12:95:d3:0e:14:60:1d:c6:ca:e0:
fe:bf:90:57:7f:af:de:8b:4a:bb:d9:ad:65:13:8a:
81:cf:e0:f5:50:2a:a5:76:5d:3f:ff:a9:42:57:69:
e0:87:a1:8b:d5:c9:fc:ff:2e:41:0a:9f:42:ed:de:
b4:c4:35:4e:fa:85:27:ac:bf:b1:74:2e:19:f5:9b:
4e:f4:d6:07:a7:b0:bf:ee:71:87:94:5d:32:1a:8c:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:19:93:C6:9F:05:33:4B:68:4B:BD:20:BA:BB:05:26:0A:AF:E0:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0284C30AD98B11EF9D5E07A2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:38:58:7a:7a:36:3d:b1:7a:88:af:2c:8a:e2:d1:9f:26:6b:
d3:8b:8e:32:ad:f2:86:b6:4e:cb:93:50:e5:2d:62:e8:29:1e:
cc:51:ec:a8:1f:c9:ac:d2:0e:5a:f0:25:90:d0:85:c2:21:34:
cf:7a:d0:d8:9b:12:6c:41:c4:a3:54:57:b7:64:e5:a8:21:b6:
0e:32:a8:96:7c:d6:f1:bc:d7:c4:ea:9c:e3:72:f0:9c:21:e5:
89:1f:c0:6f:2d:4c:0d:72:e9:2f:6c:d1:2e:07:ae:72:79:ca:
4e:0c:42:81:b7:e4:ee:ee:ee:2d:e0:49:1e:b0:e1:16:85:f2:
68:41:f3:a4:e8:dd:96:24:69:0a:a8:9c:7c:bf:9a:a8:24:9c:
33:82:77:f3:4a:ae:b9:55:7e:38:95:72:e5:49:65:be:97:1a:
32:2e:85:bb:90:2a:c0:b2:58:88:54:ab:54:d4:a0:51:68:ff:
05:fe:3f:21:21:ba:a5:a2:d8:b7:e7:67:39:78:ce:f7:93:00:
89:df:14:64:c3:e9:3b:11:7e:e8:4f:26:4b:4d:51:36:10:49:
b0:ba:3a:ce:10:5e:2d:ca:a5:5d:49:58:c0:22:b7:f2:38:51:
04:36:ab:bb:bd:8d:01:58:ca:7f:45:cd:08:01:12:39:16:80:
29:97:61:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:12:44 2025 by rpki-client