Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/149A7944D96911EF89CAE4BB762E951A.roa
File: 149A7944D96911EF89CAE4BB762E951A.roa (raw, json)
Hash identifier: EMdDIb1hXVIlU13dmQEPIPlZanTzhPddBvl7B7Whs/Y=
Subject key identifier: F9:10:D7:6F:6D:2B:02:7A:48:64:C0:20:4F:38:20:2D:A5:E2:39:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/149A7944D96911EF89CAE4BB762E951A.roa
Signing time: Thu 23 Jan 2025 09:04:41 +0000
ROA not before: Thu 23 Jan 2025 09:04:37 +0000
ROA not after: Fri 28 Feb 2025 09:04:37 +0000
asID: 62240
IP address blocks: 154.194.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82119 (0x140c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:04:37 2025 GMT
Not After : Feb 28 09:04:37 2025 GMT
Subject: CN=67920629-12eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:25:4e:15:61:48:1b:75:ef:8e:f7:e4:a2:
26:4f:60:e4:14:84:a4:ec:d5:b1:07:e9:52:f5:33:
1f:ea:5b:30:7b:c2:18:ce:9f:48:96:9a:cb:41:20:
8a:c6:af:57:2d:10:cf:99:5e:f9:fd:48:28:c5:78:
05:79:8c:82:2a:f4:f0:b8:19:27:29:3b:18:35:73:
e3:88:09:45:27:b1:26:f4:91:78:d4:0c:97:86:17:
cc:60:8f:36:11:c1:88:5b:d3:b4:57:9f:54:eb:0c:
8f:09:cc:98:c5:38:91:56:ff:c2:25:76:c1:c3:bc:
c5:37:77:95:1c:39:c5:fd:7f:07:41:e0:a7:9c:ae:
5b:fd:a1:f1:06:6c:8c:8a:8a:d0:c8:e0:db:c9:37:
15:f9:10:23:87:82:b9:75:6b:be:ee:64:66:65:15:
da:d8:d1:0d:4c:8b:59:84:71:98:77:92:e5:c6:19:
f8:81:c0:0e:c4:89:37:e1:ef:b3:96:1b:76:b8:77:
90:ed:79:cb:72:cd:8a:a2:20:93:91:86:1b:b3:6e:
22:85:ef:20:b3:ef:6c:a6:ae:f0:d4:16:8f:f7:2f:
97:6a:c9:ac:15:35:66:7b:b9:0b:2c:73:f2:6b:8c:
41:9c:f9:39:50:b9:72:cf:d9:48:0a:4e:bd:74:1d:
60:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:10:D7:6F:6D:2B:02:7A:48:64:C0:20:4F:38:20:2D:A5:E2:39:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/149A7944D96911EF89CAE4BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.97.0/24
Signature Algorithm: sha256WithRSAEncryption
38:5b:4f:ce:b4:b5:1d:94:26:65:a9:8a:57:30:f1:0f:df:9f:
20:3d:38:1a:99:4f:04:19:75:a9:61:7f:47:b3:23:88:ac:8a:
b0:68:71:88:c0:85:1f:26:93:60:15:7f:2b:cd:d0:65:e4:c6:
db:88:56:65:21:f1:90:e4:df:df:64:53:f0:d6:d6:23:52:ca:
56:69:0a:21:af:30:0e:f0:ed:2a:e1:6b:15:0e:c8:fb:b5:d0:
93:ae:cf:41:02:52:c9:d7:14:17:68:87:9b:ea:ae:b4:93:57:
1b:f8:ac:40:6c:f5:c5:43:31:df:b1:46:09:d4:be:68:24:e0:
45:12:df:78:44:4b:51:f9:8b:c9:69:5f:50:3e:09:90:ad:d4:
9a:2f:0d:f4:b2:68:37:d2:04:6b:25:34:e5:4e:b0:ba:67:55:
5a:7f:45:e3:eb:a7:68:b1:e6:d4:c9:e8:af:a5:cf:fa:6d:81:
62:2b:7e:1c:99:2a:bb:55:ba:86:63:00:2b:4f:92:c7:bf:63:
5c:78:ac:44:b3:9c:8f:7c:0f:2f:76:dd:82:95:4e:a8:6d:14:
d2:9b:42:9a:ba:be:9e:9b:8a:cf:16:67:12:b4:c0:8a:9d:ad:
f7:a8:89:70:1d:45:08:29:56:cc:02:98:6f:89:a9:6b:f3:e9:
65:fb:50:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:35 2025 by rpki-client