Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB4FF56D9C811EF8A01A8B1762E951A.roa
File: 1BB4FF56D9C811EF8A01A8B1762E951A.roa (raw, json)
Hash identifier: kI1T9SVW7vKYr/mcaUMCvVezLbL1ShsjkgXpHNotFZ8=
Subject key identifier: 7C:DD:48:DC:E3:CD:1F:95:58:81:EA:7A:9D:95:9E:14:62:03:FC:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142CE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB4FF56D9C811EF8A01A8B1762E951A.roa
Signing time: Thu 23 Jan 2025 20:24:55 +0000
ROA not before: Fri 24 Jan 2025 20:24:51 +0000
ROA not after: Fri 28 Feb 2025 20:24:51 +0000
asID: 62240
IP address blocks: 154.196.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82638 (0x142ce)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:24:51 2025 GMT
Not After : Feb 28 20:24:51 2025 GMT
Subject: CN=6792a597-3ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:cc:11:35:89:7c:55:42:e1:eb:49:01:4e:
36:1e:1a:2b:1d:e2:86:2a:83:8e:0e:c6:85:bd:0b:
63:fa:35:e5:b7:8f:d7:af:92:f4:59:db:7d:2d:26:
a6:bb:0d:32:30:55:fc:28:ba:51:67:ce:68:bd:00:
a8:bd:8b:30:a2:b2:9b:c2:8b:6f:2b:b1:eb:d6:81:
02:a1:c5:dc:04:c6:0d:2f:ec:17:56:49:84:1e:48:
41:c1:02:73:8d:4e:cd:81:a1:c6:8e:7b:ee:c7:04:
c8:42:aa:d6:03:8c:f2:76:66:40:bf:45:85:af:ba:
14:2e:19:e9:3f:d9:eb:f3:8e:1b:7f:45:b7:9b:0a:
26:2a:b0:e9:14:a0:f0:a7:8e:df:40:5e:82:c7:29:
a6:23:c2:43:f3:9f:7e:a9:c5:b4:06:37:0e:1c:32:
30:87:bb:f8:c2:d3:f6:9b:75:a4:fd:5a:a1:3b:d5:
77:cb:57:a3:eb:9b:2d:57:14:7a:ad:ac:78:d0:d2:
a0:e9:ae:5b:78:d7:20:e1:5e:cc:a0:73:89:8b:1e:
59:c2:02:06:0d:2d:86:98:b8:60:e5:e0:2d:99:9e:
b7:74:67:d4:5e:af:37:4d:7d:9e:de:3d:97:c2:14:
70:c1:74:05:5e:e5:27:39:99:0f:22:be:1b:86:34:
c4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:DD:48:DC:E3:CD:1F:95:58:81:EA:7A:9D:95:9E:14:62:03:FC:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BB4FF56D9C811EF8A01A8B1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.51.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:b9:fb:42:23:72:26:9d:72:5b:54:15:c5:6e:0c:42:70:00:
8d:d9:fc:6e:ca:c5:a4:b2:fd:b2:59:b9:8f:6f:5c:be:4c:14:
61:a3:12:93:33:2e:6f:31:6b:ca:ce:e2:67:d4:8a:87:ae:10:
79:56:ae:d2:22:ce:73:70:33:8d:f9:26:f6:0e:f7:bc:dc:9a:
ec:49:e7:e0:6f:3b:03:93:be:77:da:8a:a7:79:10:ad:bc:ab:
ea:14:86:2f:b3:64:2b:e0:64:ab:54:e8:96:01:cb:3d:c0:56:
18:40:7a:6f:cc:d7:7a:ae:0c:cd:f2:f9:1e:fb:ef:15:9a:45:
1f:f5:b9:3b:ca:b3:7b:a2:aa:ff:1e:b4:78:08:80:91:71:29:
4f:8b:6a:69:00:e8:f3:89:ff:d6:f0:9b:c6:66:d7:38:69:ab:
23:c9:40:28:9b:10:ad:0e:75:2f:33:3b:6d:e7:e0:91:9f:dc:
5c:a4:25:d4:4b:58:22:a0:f3:0d:fa:6a:35:69:ba:e2:75:35:
f8:2f:1f:df:c9:6d:7c:9e:55:98:1f:14:30:ce:ec:bc:7e:53:
0f:04:b9:b7:30:51:b5:13:f7:15:94:1e:53:66:4e:bd:08:68:
24:5d:c4:c7:3d:01:34:8d:3f:cf:63:62:d2:b9:60:cf:0f:3f:
e3:0d:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:43 2025 by rpki-client