Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0882DA32D97F11EFAB4CF650762E951A.roa
File: 0882DA32D97F11EFAB4CF650762E951A.roa (raw, json)
Hash identifier: Vc5sw3oXsSh8F1fXD5qnFo4wEfp3m+OeVg+sSwxVSGk=
Subject key identifier: 59:55:F5:2A:56:BF:DA:33:20:0A:B9:CD:A4:D9:90:6B:4D:69:CC:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0882DA32D97F11EFAB4CF650762E951A.roa
Signing time: Thu 23 Jan 2025 11:41:50 +0000
ROA not before: Thu 23 Jan 2025 11:41:45 +0000
ROA not after: Fri 28 Feb 2025 11:41:45 +0000
asID: 62240
IP address blocks: 154.195.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82357 (0x141b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:41:45 2025 GMT
Not After : Feb 28 11:41:45 2025 GMT
Subject: CN=67922afe-63c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:85:83:1c:68:5d:23:71:71:a5:3a:0b:9a:77:
58:c9:8d:86:64:b4:8a:d2:7c:f9:b7:71:db:f7:c7:
4a:88:e2:d5:42:fe:59:85:d3:b8:8d:3b:28:fb:e2:
54:03:47:1b:39:63:3b:25:18:74:78:b4:3c:c0:8b:
3d:9e:52:9f:9a:92:46:06:34:79:df:cc:89:50:8c:
07:77:f4:dc:18:eb:00:ae:3f:3d:15:9a:88:35:f2:
70:ee:1d:4a:38:b6:0d:c1:f9:87:6e:56:4d:b9:df:
82:0a:b2:df:40:2c:de:56:24:2a:cd:3e:da:44:bd:
81:39:f0:01:87:51:7d:df:51:19:0a:fb:71:18:1b:
f8:16:69:e2:62:d4:ac:43:40:e5:bc:52:74:60:80:
36:79:d3:b3:e6:47:40:b2:ac:cb:af:1d:e0:bd:64:
54:39:8e:75:18:60:d2:09:27:12:79:0b:cb:88:87:
ed:77:ac:ef:78:5d:af:7b:48:f1:f8:d8:d0:e8:12:
e2:e6:1e:35:9b:6d:f6:d5:b3:f4:f2:42:d5:71:d1:
7e:73:0c:2e:70:c7:77:53:26:4a:76:bd:03:6a:44:
7e:08:dc:4c:85:c2:e1:b8:a8:13:56:58:4f:3f:42:
f3:c0:53:6d:af:f1:cd:47:b6:94:32:7d:22:2d:c4:
e9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:55:F5:2A:56:BF:DA:33:20:0A:B9:CD:A4:D9:90:6B:4D:69:CC:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0882DA32D97F11EFAB4CF650762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.166.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:67:9b:d0:ad:57:55:0f:74:d6:82:6f:65:33:d1:4c:7b:eb:
59:b7:1e:b5:d6:7a:e2:be:d0:04:8a:f8:03:9a:3d:37:54:3d:
80:9b:0c:06:56:2d:a0:77:14:77:4d:2e:e4:08:89:bf:c3:f6:
15:56:54:2c:31:0b:41:01:d5:cd:b4:bd:b9:3a:83:cf:63:b5:
aa:7d:dc:79:f1:a6:d2:be:19:dc:75:5d:c1:b6:9b:65:e5:9d:
59:fb:5b:d3:83:29:af:02:cd:97:cc:65:4e:55:67:47:2d:8e:
c0:e6:f8:bd:74:a4:f4:20:51:84:b4:bd:5d:d7:10:53:56:31:
37:29:b6:3e:8f:9e:6b:78:12:e2:80:e2:27:24:0d:e1:20:3e:
30:b8:0f:a9:be:5d:57:b0:c1:fa:e7:0e:fb:33:63:a5:c9:7c:
62:9e:90:3b:0f:e9:7e:e1:de:e6:7e:d2:d6:fc:7a:3c:ea:19:
c8:89:cb:e0:a1:d8:7f:d4:68:57:f9:24:f9:cf:41:1b:68:4d:
7f:e0:9e:fd:d4:68:cc:ea:8a:8d:3f:55:91:46:14:16:c1:13:
2d:3f:23:d9:ec:7f:e2:44:f5:74:d9:e1:d3:42:a9:ab:1e:55:
c8:c0:38:96:24:b3:83:df:31:48:47:6e:ae:3d:04:2b:aa:ac:
c8:e9:a5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:37 2025 by rpki-client