Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C0E8FD0D98811EFB16FC58D762E951A.roa
File: 0C0E8FD0D98811EFB16FC58D762E951A.roa (raw, json)
Hash identifier: JktnX2S3VfR4nIeKXO/mnyrAIcdfUBFZEmGXInn0enI=
Subject key identifier: 18:8E:DF:9C:43:E7:25:41:6F:B6:B4:0F:31:E1:6F:47:E1:D7:AA:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014237
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C0E8FD0D98811EFB16FC58D762E951A.roa
Signing time: Thu 23 Jan 2025 12:46:21 +0000
ROA not before: Thu 23 Jan 2025 12:46:18 +0000
ROA not after: Fri 28 Feb 2025 12:46:18 +0000
asID: 62240
IP address blocks: 154.195.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82487 (0x14237)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:46:18 2025 GMT
Not After : Feb 28 12:46:18 2025 GMT
Subject: CN=67923a1d-3f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:e5:fd:87:03:5e:ff:16:a1:b9:dc:b0:ab:
a4:7f:f7:9a:c1:19:92:b3:7b:9c:dc:40:8c:53:a0:
21:11:07:4a:f9:5f:d8:22:cc:dc:54:00:11:92:37:
fe:91:1f:de:09:10:7c:f9:be:9d:52:39:2d:aa:8f:
d1:fb:cb:ba:31:95:b4:96:03:38:f2:99:de:9f:3c:
ad:ea:49:4a:a5:8d:09:5c:4b:31:c0:4b:7e:c7:14:
59:cd:a2:38:b5:ca:6d:8a:29:b7:ae:48:da:df:54:
ca:55:0f:57:e9:e3:e0:8c:35:a0:33:dc:9c:0b:ce:
2b:c1:d0:b2:2e:e8:27:40:d8:f3:23:e0:bf:65:15:
f9:0c:d4:6a:80:a3:41:4b:a9:49:ba:42:0d:9c:7c:
4a:94:46:51:55:1c:ba:d5:be:a5:c6:40:4d:55:11:
31:81:95:3b:d6:5c:e6:ba:4f:ed:b8:09:f4:68:2d:
d0:30:15:30:e7:81:e2:56:21:07:88:46:6f:b5:48:
15:e5:f3:f3:e6:29:a4:79:3b:d8:76:1f:f5:e5:05:
49:4b:ed:cf:d7:b7:84:62:d8:67:c2:50:dc:83:b0:
a7:5e:44:3a:4b:4a:ee:d0:04:22:8d:b6:f3:fe:82:
73:4c:52:90:72:4f:3f:05:5a:76:b5:9c:c5:a8:3b:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:DF:9C:43:E7:25:41:6F:B6:B4:0F:31:E1:6F:47:E1:D7:AA:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C0E8FD0D98811EFB16FC58D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.28.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:ea:fe:71:31:c2:64:32:59:48:c6:40:41:09:5e:60:63:f9:
14:df:fc:5b:67:71:00:78:b2:b2:cd:ea:c7:04:d7:69:5a:7a:
6f:22:78:2a:5e:28:4f:55:30:15:1d:7a:c3:ac:8a:32:13:b7:
9d:8f:bc:37:da:eb:7f:1a:aa:03:c9:9e:4b:33:65:b5:dd:e1:
8c:3f:f1:9f:17:ef:75:78:e7:a6:28:db:4a:cf:29:ca:85:e9:
02:eb:d6:bd:6c:ce:15:98:24:4a:59:21:39:46:a1:1f:77:96:
e7:70:a1:ab:bc:22:bd:91:7b:96:fb:9b:d6:06:27:89:8f:3c:
d8:cc:ed:41:da:da:8c:fe:d7:4e:5e:fe:e9:0b:4a:80:7a:63:
1f:0c:a6:c6:bf:a7:0f:b0:6a:92:58:50:f1:20:4d:8a:1f:7b:
33:6b:a9:ec:7d:95:2f:c2:87:52:67:04:10:6c:2e:83:b5:52:
b4:58:71:1f:3c:54:a3:d2:33:87:af:ff:37:52:ee:b6:d4:61:
89:e8:4c:3b:8c:f7:1f:a8:d6:9a:4f:2e:fa:d3:3c:cc:95:b9:
f8:d0:e9:56:91:95:3f:64:3f:4c:e5:34:ba:32:85:c5:12:39:
67:d4:1a:c8:6d:90:1c:36:a7:97:0a:73:48:81:31:fd:b8:f8:
69:d4:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:09:41 2025 by rpki-client