Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10ED6D42DA5911EFA48E5192762E951A.roa
File: 10ED6D42DA5911EFA48E5192762E951A.roa (raw, json)
Hash identifier: ie5P2YePP693Vr4S/FRJw0vL8zXS3modqV7Eut0Re8g=
Subject key identifier: 64:9C:17:D9:EC:EF:E0:6F:65:58:DD:F3:47:CD:7E:F0:B7:71:E9:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01479F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10ED6D42DA5911EFA48E5192762E951A.roa
Signing time: Fri 24 Jan 2025 13:42:34 +0000
ROA not before: Fri 24 Jan 2025 13:42:30 +0000
ROA not after: Fri 28 Feb 2025 13:42:30 +0000
asID: 62240
IP address blocks: 154.195.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83871 (0x1479f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:42:30 2025 GMT
Not After : Feb 28 13:42:30 2025 GMT
Subject: CN=679398ca-97a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:99:8b:64:26:85:31:27:8a:f6:95:5c:84:ee:
88:55:d3:41:fe:76:27:cc:df:c6:03:67:16:5c:e3:
bd:e0:b2:60:d8:34:c0:a2:c5:49:58:8e:8d:73:43:
f5:37:9a:ec:b7:5c:28:e4:12:36:d4:60:f8:91:0f:
46:8c:05:29:36:af:37:b0:38:d3:a5:9c:03:77:8e:
3b:1e:bc:13:cb:a3:d6:98:3a:61:d6:93:52:35:00:
57:71:81:32:bc:c5:d9:21:52:07:d3:fa:b8:65:ec:
f4:2c:f4:23:bc:fa:50:d4:4f:97:e0:1e:0a:ab:e0:
6e:4b:ba:b4:b3:45:ca:5d:34:2c:8f:b3:62:84:6e:
31:e4:7b:8d:68:a6:4f:9f:d5:8e:06:b1:44:ff:6b:
9c:d9:a9:ce:93:93:94:ef:c5:59:7b:20:22:c7:bc:
35:ab:af:08:b3:5f:d4:95:45:94:42:99:cc:f0:c2:
4e:91:e4:5e:cd:89:c5:50:a2:3e:47:28:f7:ba:4b:
f9:73:41:03:d2:af:82:24:29:f3:99:71:0d:03:f0:
32:f5:f7:c9:bb:b1:46:ab:4e:eb:46:3b:5e:0f:d0:
e3:69:ff:30:69:96:1e:d0:53:3b:ee:2f:2e:ec:15:
f7:14:c3:c2:80:c7:15:50:9b:6d:bb:38:b2:2a:0f:
36:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:17:D9:EC:EF:E0:6F:65:58:DD:F3:47:CD:7E:F0:B7:71:E9:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10ED6D42DA5911EFA48E5192762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/22
Signature Algorithm: sha256WithRSAEncryption
cd:dd:55:c5:7a:10:d7:e6:95:da:f7:31:92:b0:d6:41:c0:3c:
eb:f8:45:b3:97:c6:5d:4a:46:7b:86:04:b4:f1:b1:e5:0d:26:
dc:78:74:f4:71:f8:38:26:1b:4a:2c:c9:c5:a9:8b:1f:49:94:
cb:b6:36:f4:fa:6c:d0:49:9d:d8:2e:8b:ee:23:38:50:73:ca:
60:44:6c:54:6f:50:e5:ae:15:a9:07:1f:4f:dc:29:e8:23:84:
89:f1:5b:22:90:32:e7:55:3d:f1:d6:41:42:d3:1a:68:82:9f:
76:8d:dc:fe:34:02:e1:54:3a:69:40:c2:3c:8c:de:ba:c5:66:
9a:71:f0:c6:d1:ff:01:f2:d3:8e:4e:32:f9:c2:d7:be:38:76:
c0:27:b3:23:13:2b:a0:de:47:4a:57:42:b0:37:c6:9d:45:7e:
a6:85:10:68:b6:49:dc:76:2a:cb:20:16:f3:22:64:9d:ab:97:
ee:26:6c:27:2e:4f:3f:82:da:2f:69:cd:29:2e:34:13:9b:b4:
5d:13:48:a6:de:1c:64:90:e6:be:43:70:ea:ed:0d:28:e7:b9:
61:bb:57:52:95:a1:1b:d9:3e:02:c9:aa:79:e4:51:24:2a:13:
6a:7c:18:87:37:a9:7b:8a:35:b5:80:fa:0f:63:1d:3b:00:e6:
e3:5f:30:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:45 2025 by rpki-client