Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC89E6D96811EF946002B5762E951A.roa
File: 0EBC89E6D96811EF946002B5762E951A.roa (raw, json)
Hash identifier: inmNwa3m+REJtmkQFthQNPwunJKZzOUfv01MblJfP0Y=
Subject key identifier: 88:20:AF:0F:CA:CE:18:41:55:7E:34:5B:78:6C:8E:31:FD:32:5E:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC89E6D96811EF946002B5762E951A.roa
Signing time: Thu 23 Jan 2025 08:57:22 +0000
ROA not before: Thu 23 Jan 2025 08:57:18 +0000
ROA not after: Fri 28 Feb 2025 08:57:18 +0000
asID: 62240
IP address blocks: 154.194.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82100 (0x140b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:57:18 2025 GMT
Not After : Feb 28 08:57:18 2025 GMT
Subject: CN=67920472-d765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c1:f7:e7:fa:14:c8:a5:2e:83:07:c0:25:83:
96:9a:9e:90:10:67:18:11:7b:24:87:f0:88:b5:86:
6b:92:6a:82:05:c5:61:33:9d:b8:60:c9:47:2d:27:
9a:58:61:32:fe:17:c4:e1:66:46:dc:c9:5a:15:f6:
25:ae:94:32:71:eb:77:92:b0:57:62:39:b6:12:f5:
ad:95:32:8b:78:98:f1:95:5f:c4:19:8e:77:dc:e1:
92:18:d3:27:3c:e9:04:a1:40:ee:03:45:dd:94:a8:
c8:e8:e4:fa:50:b2:34:20:3b:f0:1e:24:f7:54:b7:
72:46:ad:f6:28:0c:59:24:db:30:45:d5:b1:51:e2:
19:4a:b5:10:05:2c:b1:0d:eb:41:8a:06:66:45:50:
0c:e3:6b:56:96:d3:b5:b8:9d:6c:82:51:50:f3:b3:
dc:e3:a9:3c:f6:40:7d:9d:37:02:78:9f:d0:5e:35:
e4:8c:dd:6e:db:ab:2b:9b:d1:8d:52:f2:05:da:26:
0b:01:90:8c:d4:ee:ce:2f:1f:85:ea:98:65:62:97:
95:dd:6e:0d:95:f5:7e:38:f7:69:a6:9d:16:a3:04:
92:8e:15:2c:98:a6:1c:9e:6e:63:ce:f2:29:5a:48:
6b:a8:17:01:b8:f8:ce:c9:8d:54:26:3c:8a:ac:98:
df:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:AF:0F:CA:CE:18:41:55:7E:34:5B:78:6C:8E:31:FD:32:5E:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EBC89E6D96811EF946002B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5c:5d:7a:e5:6b:74:86:06:4c:04:6c:8c:a3:7e:7d:e8:62:
97:4a:5a:34:b6:58:09:71:00:0a:a0:8a:33:60:c1:fd:e3:de:
ae:cd:4f:7e:2f:95:78:7c:ea:4e:38:30:3c:e3:24:b0:2c:d4:
fa:3f:a0:ca:8d:3f:86:51:c7:78:88:26:89:7e:82:fe:34:c9:
b2:1b:e4:14:c2:d1:f9:74:1f:6d:60:6c:5c:96:00:70:9e:3c:
dc:ae:15:71:82:f7:b0:82:79:dd:70:2f:2a:97:34:54:a0:d5:
c9:6b:3c:e2:b1:b2:e5:ad:27:96:9d:96:b9:02:15:bf:22:23:
77:ec:d4:32:54:56:ea:e6:cb:3c:21:58:ff:dd:ac:4a:ba:be:
a4:27:27:05:a9:9d:06:90:45:0c:c4:3b:be:51:2a:dd:7e:dc:
34:fd:c5:5a:1c:dd:2f:6d:a4:84:26:ba:65:41:de:80:cf:7a:
dc:21:a4:4a:66:56:98:7d:18:40:52:ea:e7:33:e6:57:97:57:
ec:54:a3:76:a0:10:a4:96:52:34:b7:f3:a4:26:50:71:30:f7:
2e:a5:be:08:59:fe:e4:7c:fa:01:bd:06:5a:f0:55:79:52:5f:
92:73:2c:0c:6f:68:0c:11:39:94:df:ca:14:d3:ed:40:12:67:
aa:f9:35:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:23 2025 by rpki-client