Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D91A59ED9CA11EF851F17BF762E951A.roa
File: 0D91A59ED9CA11EF851F17BF762E951A.roa (raw, json)
Hash identifier: p6yMk63Jlt2ZSlSoaAR6mHyClOMU6aon3WxFqGRk1N0=
Subject key identifier: 1D:E9:B2:DC:17:01:C1:3D:2A:AA:DF:0A:7A:CB:5D:F6:1D:3F:5D:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142DC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D91A59ED9CA11EF851F17BF762E951A.roa
Signing time: Thu 23 Jan 2025 20:38:51 +0000
ROA not before: Fri 24 Jan 2025 20:38:47 +0000
ROA not after: Fri 28 Feb 2025 20:38:47 +0000
asID: 62240
IP address blocks: 154.196.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82652 (0x142dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:38:47 2025 GMT
Not After : Feb 28 20:38:47 2025 GMT
Subject: CN=6792a8da-69bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:ad:f5:1e:8e:c3:13:19:be:99:1b:16:26:
48:aa:7e:9d:eb:9f:c0:99:e5:a8:b3:01:e5:f0:44:
7a:f5:b2:06:0c:19:89:7e:15:14:72:42:0b:2d:fd:
80:9c:6f:08:41:88:67:5b:f7:a8:8d:0e:ae:70:ae:
85:eb:5c:63:06:35:2e:45:7a:6e:96:35:f1:85:88:
fc:ac:e3:9f:9d:cd:76:55:5c:6a:70:b8:ee:fc:4f:
3e:fb:fc:2a:82:ba:f7:d1:32:c7:78:24:f9:2b:35:
53:41:7f:b3:9a:1c:a2:ed:80:0a:e5:99:0a:cd:88:
75:8e:0a:23:8e:55:31:95:39:4a:64:d3:bf:55:cb:
61:17:6d:84:e8:8a:30:99:e2:27:ed:fb:2a:61:05:
89:36:5d:7d:17:0b:e9:8e:f4:a8:c1:8f:bd:b1:14:
98:0a:2f:f4:59:74:67:cf:e2:f9:f1:a0:04:7e:74:
e5:a4:ed:11:11:7f:7e:73:0b:48:55:36:6a:3f:98:
9d:8a:88:a9:99:c6:1d:61:71:87:64:16:f2:00:ea:
e7:a6:7d:fa:dc:97:5b:35:37:56:fc:12:56:50:23:
c7:0a:e2:5c:d4:95:89:22:4c:5e:22:84:40:61:82:
49:fa:64:42:93:25:f0:26:0b:29:26:f0:4e:6e:57:
25:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E9:B2:DC:17:01:C1:3D:2A:AA:DF:0A:7A:CB:5D:F6:1D:3F:5D:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D91A59ED9CA11EF851F17BF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.58.0/24
Signature Algorithm: sha256WithRSAEncryption
53:4c:79:a3:a6:0c:65:bb:a3:e0:c1:79:ca:3a:e7:06:a0:59:
d0:32:5f:de:bf:6f:39:0e:d7:ea:a2:74:c3:75:ff:e5:cc:81:
2c:a6:3b:cd:89:30:d9:0b:a1:73:f4:1c:8e:04:18:20:13:9c:
87:dc:f2:85:e8:24:37:27:cd:a1:3e:78:e2:d9:ee:d0:80:a3:
71:ad:e5:70:f2:3e:bd:da:1f:62:ad:4e:7c:6f:d3:57:d0:4b:
55:6c:9a:9f:c6:32:ab:83:fd:24:ad:8f:ee:02:94:c8:f2:af:
98:4d:53:93:d0:70:14:dc:17:c7:c1:a2:26:86:c2:33:09:56:
45:0f:68:e2:f5:e7:b5:14:61:60:28:55:bb:42:33:23:08:e9:
70:70:0d:49:dd:6c:00:03:9d:b4:38:e5:8f:e0:05:ce:f6:e5:
aa:74:80:1e:0a:41:15:36:ad:c3:a8:f5:1e:9c:bc:26:5f:e0:
58:18:e5:93:cc:25:45:d3:e3:b1:14:97:6f:10:fe:53:6c:34:
b1:18:f9:f7:7f:6a:26:40:aa:3d:6f:81:2d:91:73:e1:c9:f8:
c7:ff:7d:55:2e:98:2b:8e:ce:19:a3:d0:19:55:82:e1:07:2b:
75:6a:a1:a1:58:5e:4a:b9:94:91:32:55:d7:80:71:df:05:29:
28:e4:00:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:53 2025 by rpki-client