Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B54787CDA3411EFB5290C97762E951A.roa
File: 1B54787CDA3411EFB5290C97762E951A.roa (raw, json)
Hash identifier: 5VZE62/TR6nNLWVci78WWDW54tCFmLyHB7DHNYB9p8Y=
Subject key identifier: D1:B7:60:8C:7D:00:A7:41:50:85:9B:51:45:D1:82:EC:C1:9D:1B:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B54787CDA3411EFB5290C97762E951A.roa
Signing time: Fri 24 Jan 2025 09:18:00 +0000
ROA not before: Fri 24 Jan 2025 09:17:57 +0000
ROA not after: Fri 28 Feb 2025 09:17:57 +0000
asID: 62240
IP address blocks: 154.195.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83156 (0x144d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:17:57 2025 GMT
Not After : Feb 28 09:17:57 2025 GMT
Subject: CN=67935ac8-b081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:45:d8:95:b2:16:a7:97:34:cb:3d:96:0f:
ff:fd:72:79:71:63:05:87:ff:a1:29:16:55:e6:32:
ac:7f:60:40:ae:79:1d:9a:21:9b:bb:12:95:a0:6f:
7b:f7:05:71:9f:74:9d:90:b3:6a:3f:25:fe:d6:35:
23:ad:5b:b3:1c:fd:3f:31:17:a7:e5:0e:cb:e3:42:
78:79:2b:4f:89:1f:ad:bb:1f:5e:1b:e8:d7:e3:fd:
b6:11:ba:5f:f6:12:99:9f:12:0a:36:b7:6a:b1:d4:
b5:1b:08:e4:3f:d1:0c:d2:45:fe:f6:d7:2d:5f:13:
52:57:b5:0b:f8:46:14:bd:57:eb:ee:b5:62:32:90:
4a:e3:49:5a:d3:7c:db:13:32:83:69:05:58:50:d4:
7e:f3:79:3b:bf:1c:64:7f:b5:2f:34:70:05:a8:9a:
33:1a:62:d7:08:80:6a:0a:fd:01:c5:b5:f9:4e:9c:
8f:c7:e4:11:6d:86:25:94:95:34:97:4f:dd:f4:98:
79:58:43:32:1c:23:fa:bd:03:4a:87:8d:ed:d5:d4:
fd:6c:02:ae:3f:69:a5:24:54:66:cf:3e:a0:1b:0b:
e9:c0:b0:1a:f9:86:72:f3:59:ab:97:1a:f9:74:23:
5c:e1:34:6b:ef:a6:f8:88:32:b5:61:49:b0:40:ba:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:B7:60:8C:7D:00:A7:41:50:85:9B:51:45:D1:82:EC:C1:9D:1B:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B54787CDA3411EFB5290C97762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.163.0/24
Signature Algorithm: sha256WithRSAEncryption
64:2a:bc:80:32:08:50:25:88:38:a7:44:19:d5:2a:65:fb:0e:
22:83:d5:be:3b:ca:ee:81:ea:f4:77:ab:29:8c:47:c2:cd:fd:
57:55:6f:5e:0c:00:a6:9b:84:2c:37:47:17:68:43:99:91:0d:
1d:9d:dc:aa:f4:2f:4a:85:3c:61:35:f5:49:85:e5:e7:54:63:
a0:54:29:3a:83:3c:86:fb:bc:f4:9e:86:99:c7:ca:19:15:9e:
0a:9a:0f:c4:af:ae:13:72:80:da:73:bb:eb:7c:0d:3d:92:19:
0f:b5:a8:9c:87:3f:a9:ed:9f:93:fa:25:24:ab:55:bc:62:35:
f4:d9:9f:41:a5:ce:23:f9:12:85:29:97:b5:52:fd:57:88:e0:
12:ac:f3:7a:a9:41:f9:9c:36:75:07:12:c4:32:b0:ec:f4:f8:
71:d3:f8:09:db:45:98:63:d9:96:fc:7a:cd:91:1a:3a:c7:90:
7b:78:40:98:7c:49:de:2c:de:04:d1:4a:ee:08:27:b7:43:3e:
c3:8d:5d:f3:69:82:3b:e3:08:c4:23:56:58:8d:b5:aa:68:22:
78:2a:e1:e1:1b:63:12:a9:d9:41:df:87:42:7e:80:c4:6d:18:
cf:04:e2:4c:e6:32:5b:e9:5b:ff:fd:fc:4a:a1:5e:da:61:27:
7c:d4:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:34 2025 by rpki-client