Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BD48B32DA3611EFB5C1BBA4762E951A.roa
File: 1BD48B32DA3611EFB5C1BBA4762E951A.roa (raw, json)
Hash identifier: vFGxMb7wyAjaZdJMDxCSjROYf3C7EMe3Ww1kxflEEJ0=
Subject key identifier: F4:CD:41:DE:C6:F9:5A:A2:75:74:B6:9B:97:31:5D:E4:B7:D0:D9:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BD48B32DA3611EFB5C1BBA4762E951A.roa
Signing time: Fri 24 Jan 2025 09:32:20 +0000
ROA not before: Fri 24 Jan 2025 09:32:16 +0000
ROA not after: Fri 28 Feb 2025 09:32:16 +0000
asID: 62240
IP address blocks: 154.195.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83192 (0x144f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:32:16 2025 GMT
Not After : Feb 28 09:32:16 2025 GMT
Subject: CN=67935e24-81bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:35:44:ff:20:12:93:61:44:d8:dd:8d:e7:2a:
3d:67:14:3f:0e:5a:99:1a:49:07:3e:16:9b:7d:b6:
2c:5e:16:0b:b4:a5:e2:15:b7:1d:0e:0e:25:54:05:
86:ba:85:68:18:44:3b:f9:33:e1:c7:1b:dd:ea:5d:
3f:d4:f4:79:f9:26:af:67:9b:99:17:6b:9b:cf:26:
78:d1:e9:3d:6d:64:a7:ef:1c:ad:7d:17:d2:c3:48:
94:cd:ae:75:81:2b:a1:5c:a9:ff:5b:2c:16:a0:2e:
08:b0:3a:57:85:cd:04:f3:70:d8:60:dc:4b:78:b7:
bf:58:1b:5a:5c:73:eb:bb:3a:06:16:79:19:9c:62:
f4:f3:89:32:50:7c:8c:5a:42:10:64:9b:8d:e5:2b:
33:aa:5c:34:4d:df:5a:97:ee:27:63:3b:7d:2c:44:
d6:8a:93:62:02:b7:b8:4e:4b:ff:d9:6c:8c:2d:3a:
50:6b:ed:ae:83:72:da:c6:32:3f:13:ef:5a:1b:b7:
df:d7:6f:94:77:cc:dc:5b:fb:d5:6a:3d:9f:c4:07:
d2:0e:45:81:13:4c:f0:eb:99:fe:ec:02:51:66:50:
e2:f6:79:e1:80:0c:55:b4:54:b9:e4:32:b9:3c:f1:
6b:8a:b3:a5:f4:94:56:a7:17:b1:1e:c2:1f:16:a7:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CD:41:DE:C6:F9:5A:A2:75:74:B6:9B:97:31:5D:E4:B7:D0:D9:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BD48B32DA3611EFB5C1BBA4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:17:7d:51:55:e5:f1:cb:6e:e2:cc:39:d5:b3:db:8e:75:56:
b8:6f:85:77:0f:e1:63:e5:73:00:c9:a5:c4:47:59:6c:49:60:
a4:1f:ae:e9:1a:f8:e0:75:c2:e9:68:51:ce:15:1d:b5:a7:8c:
7e:35:b2:2f:f8:88:bc:22:ff:0f:58:d1:cd:95:90:5a:9d:60:
d9:51:69:2c:5b:72:62:35:a9:be:63:f9:73:3d:65:2b:49:ac:
d5:61:24:a6:93:e8:c8:68:61:81:dc:c4:f3:23:63:ac:16:7a:
37:3b:ec:3d:8a:3a:fc:19:64:b6:7e:24:2a:f6:a7:25:35:e6:
65:09:26:fd:fb:2d:a0:11:f0:3e:52:f8:25:df:87:54:3c:4d:
8d:07:da:b5:0b:e7:45:a2:98:e4:04:4d:50:5d:ae:cf:34:5d:
50:29:61:62:2d:cb:46:4c:9e:b7:6a:4b:15:e0:6b:fb:df:43:
73:be:f3:f4:55:c4:be:bf:40:f6:b5:50:8b:4b:15:02:73:f7:
ea:1d:7f:b4:95:42:bf:a7:b6:d7:1b:dd:7e:21:30:c8:ba:93:
56:f1:b2:1f:32:ac:3a:e2:2c:95:aa:f8:15:11:e8:17:63:50:
ba:a6:0e:51:a4:e9:ca:33:1a:1b:49:25:89:18:f4:99:8a:d6:
54:07:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:12 2025 by rpki-client