Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C801FB0DA4011EF8B21ED67762E951A.roa
File: 1C801FB0DA4011EF8B21ED67762E951A.roa (raw, json)
Hash identifier: ZG7RCuj6S9id6mTjae+l6sqva2cfNn7QWola3zpw148=
Subject key identifier: 4C:AD:C1:B1:2B:59:06:AD:B3:1A:10:9F:B4:82:73:B9:AD:ED:67:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C801FB0DA4011EF8B21ED67762E951A.roa
Signing time: Fri 24 Jan 2025 10:43:56 +0000
ROA not before: Fri 24 Jan 2025 10:43:53 +0000
ROA not after: Fri 28 Feb 2025 10:43:53 +0000
asID: 62240
IP address blocks: 154.196.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83376 (0x145b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:43:53 2025 GMT
Not After : Feb 28 10:43:53 2025 GMT
Subject: CN=67936eec-aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:af:bf:bf:40:39:52:86:d6:24:b2:2d:4d:
c1:f2:23:60:8b:8e:a6:5c:c0:bd:b8:57:29:94:b8:
f8:b6:a9:57:e8:76:ad:6d:2d:5d:78:4e:c5:b5:30:
b8:f0:6e:b8:14:bb:55:bf:a0:f7:03:bb:94:4d:5d:
a0:94:4a:4e:58:37:3e:9c:d6:f5:4f:5d:d8:96:34:
2b:7f:12:c9:c1:45:9b:95:93:6e:85:e2:94:57:1e:
37:02:35:60:8f:6e:c3:cd:c8:5a:01:75:f0:00:4c:
31:30:67:80:1d:9f:f3:ba:30:9e:c4:95:b3:7e:22:
fe:72:45:91:83:2a:9d:92:21:14:f5:28:78:a9:f0:
25:a4:ac:cf:44:38:7b:6f:6f:5c:d4:11:89:dc:34:
7a:26:32:e0:ad:f6:8b:39:03:39:06:c6:2e:6d:fd:
9f:e8:1a:c2:04:3a:15:a6:a8:a9:09:93:f0:ca:b6:
89:eb:7b:9f:ba:b2:a9:7a:b9:09:66:bd:bb:28:8e:
01:99:49:81:32:4c:78:4c:0f:b3:92:18:b1:e5:b6:
13:de:96:40:7e:9f:08:fb:96:81:ba:de:30:83:22:
11:cb:a3:2e:f3:ed:b0:9a:00:59:9b:8a:9b:8d:18:
a3:1f:9f:53:85:f5:6d:8e:8a:eb:9c:27:9e:30:75:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AD:C1:B1:2B:59:06:AD:B3:1A:10:9F:B4:82:73:B9:AD:ED:67:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C801FB0DA4011EF8B21ED67762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:36:cc:93:7b:4c:6b:6b:91:e3:2e:60:51:4d:d6:62:f3:76:
f5:b0:3d:b0:e8:fb:f9:7a:d4:80:f0:27:2b:b6:9b:59:0a:8c:
7d:78:38:4e:e8:4a:e2:a3:28:22:fd:c8:fd:a7:64:cb:cd:fd:
01:e5:f5:f2:f0:be:28:dd:79:49:ab:f1:11:85:41:76:35:66:
be:4e:67:76:c0:4e:11:36:9b:05:91:09:3a:be:34:55:00:00:
dd:03:dd:f0:b8:e3:bf:59:1d:c3:f7:71:1e:33:eb:0f:9f:d5:
e9:9d:de:8a:5e:0e:e6:99:13:05:7c:6d:b6:44:b5:c0:d9:21:
f0:1d:0e:37:5e:4a:ec:08:9c:c7:02:10:ac:ab:51:8e:ae:06:
18:83:c2:4d:b1:0e:0d:a6:7a:3a:9e:cc:72:8d:9b:05:c6:1c:
76:ef:36:b8:24:01:21:61:3c:0a:94:b3:05:da:4c:59:55:ad:
0f:1d:67:74:65:1c:de:40:cf:f1:07:1f:34:b3:d3:ad:85:d5:
17:5f:15:d1:7f:d5:83:12:61:0e:f6:e1:b5:4b:ea:08:57:89:
de:57:e0:f5:ac:5d:d1:c0:64:97:6d:7b:0c:a3:af:18:73:1e:
6e:17:5c:b9:d5:9b:ee:af:6c:3b:28:07:2f:dd:33:53:8a:20:
d2:24:43:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:07:04 2025 by rpki-client