Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D08E554DA4911EFB13386A4762E951A.roa
File: 0D08E554DA4911EFB13386A4762E951A.roa (raw, json)
Hash identifier: 4m66fo3Wyizs2x7ytbBFhk4R+ZUqSs7SScAEHl2bsws=
Subject key identifier: 6A:C1:FF:33:2B:B9:81:AA:3E:29:B2:6E:7F:48:BA:7C:A0:D0:BA:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014646
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D08E554DA4911EFB13386A4762E951A.roa
Signing time: Fri 24 Jan 2025 11:47:56 +0000
ROA not before: Fri 24 Jan 2025 11:47:52 +0000
ROA not after: Fri 28 Feb 2025 11:47:52 +0000
asID: 62240
IP address blocks: 154.195.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83526 (0x14646)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:47:52 2025 GMT
Not After : Feb 28 11:47:52 2025 GMT
Subject: CN=67937dec-29fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:da:1f:37:12:5e:ba:e8:d3:5a:08:d4:c4:
77:93:07:e1:a5:fc:c8:a7:7e:d9:31:3f:36:61:8a:
68:9d:11:fb:a3:fd:49:1c:77:62:59:0d:36:c4:09:
b1:a5:0a:ad:2a:b2:35:f3:c4:8f:7f:92:51:14:5b:
94:a0:ed:47:eb:d4:96:f9:c5:a1:b1:1d:91:ed:d1:
e6:18:e2:7d:56:e9:ec:44:26:c1:4f:6c:eb:e5:d1:
9a:22:ef:07:2e:d3:50:0e:81:49:f7:e5:c2:01:e0:
f3:b6:38:d5:71:08:7c:65:db:1a:ed:a6:77:99:90:
d9:43:40:e4:c2:72:03:fb:4a:a0:03:b8:eb:d4:65:
b6:94:2c:d8:14:1f:66:07:52:01:78:ed:37:90:38:
59:5c:06:8a:5a:b6:25:55:67:5e:6c:37:05:1c:44:
0c:f5:75:83:29:fc:ec:c9:d3:1d:d5:24:e2:ec:7c:
f5:03:c6:b8:f6:c4:e9:23:d5:82:30:87:5e:69:c6:
9a:35:b6:86:1b:c1:1c:42:88:ed:57:ab:ac:f7:f8:
47:e2:0e:80:13:d9:6b:6e:ff:db:b8:50:61:7a:76:
91:5a:8e:cf:4f:ff:c2:b4:f4:2a:f8:28:93:26:66:
e7:50:1c:cc:61:5e:ed:2d:2e:bd:52:18:a0:8c:11:
64:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C1:FF:33:2B:B9:81:AA:3E:29:B2:6E:7F:48:BA:7C:A0:D0:BA:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D08E554DA4911EFB13386A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:89:12:e6:56:75:93:69:73:19:a2:b3:4e:7c:7b:91:6f:ea:
4c:0c:1c:4a:21:ac:64:a8:83:b9:d3:9a:df:f8:8b:c1:d6:ff:
81:de:f7:68:50:17:a6:b8:d0:81:5c:f7:aa:15:bd:de:b0:d4:
45:1d:15:35:89:14:37:9a:a0:4f:0c:34:99:af:51:fc:a2:cf:
26:02:3d:2e:56:cf:36:15:e7:78:e3:df:bb:48:cc:87:c3:00:
96:b7:67:b9:c4:7e:e5:33:68:08:4c:78:96:08:c3:aa:9a:bf:
fc:ad:e9:6b:6b:09:d6:13:09:6f:63:ba:58:97:f9:f1:3e:98:
82:fd:07:36:b3:94:72:30:44:d2:21:cb:9e:c6:d4:47:ca:1d:
ee:45:01:46:ef:df:e1:7d:36:b3:e5:6d:a7:1a:a9:63:5c:70:
36:44:48:8f:e8:e5:f8:bc:8a:bc:9a:13:09:19:54:a9:78:72:
53:a3:b3:69:a2:58:4f:e6:c0:71:2d:d3:f9:c2:42:98:96:3f:
95:21:d8:f2:fe:62:4d:36:80:14:1a:bc:0a:4e:e6:b1:7b:b8:
d5:72:83:ad:89:a8:c9:91:9d:f7:4d:61:de:d7:a8:66:a4:73:
72:8f:24:18:b1:e8:97:6d:49:7b:f2:d4:6a:ad:d6:8f:18:ab:
e4:94:a2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:43 2025 by rpki-client