Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2083F6F0D9D111EF81C5506F762E951A.roa
File: 2083F6F0D9D111EF81C5506F762E951A.roa (raw, json)
Hash identifier: M0CKOAfR8IKK2kMteiMd397ir8peTbPkgDex6zjwP+8=
Subject key identifier: 31:1D:D3:C2:91:8F:0E:3E:10:11:3F:8F:B9:54:BA:CC:95:91:9D:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014311
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2083F6F0D9D111EF81C5506F762E951A.roa
Signing time: Thu 23 Jan 2025 21:29:29 +0000
ROA not before: Fri 24 Jan 2025 21:29:25 +0000
ROA not after: Fri 28 Feb 2025 21:29:25 +0000
asID: 62240
IP address blocks: 154.196.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82705 (0x14311)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:29:25 2025 GMT
Not After : Feb 28 21:29:25 2025 GMT
Subject: CN=6792b4b9-fe74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9f:6f:33:24:b3:4a:3b:f0:e4:ea:c9:3e:3a:
37:4c:da:d4:c9:49:7f:b7:c9:7a:c9:d3:e3:84:31:
e6:8e:3c:ca:4c:94:74:95:bd:51:cf:e6:90:b1:e4:
e6:6c:9d:7a:e1:7d:e4:2e:59:17:1f:94:39:57:0b:
b2:e7:ca:55:92:b2:d2:f9:e9:44:d4:d9:0f:31:62:
e0:82:75:82:3b:82:48:fc:47:0b:56:f4:6e:c9:a5:
fe:5e:c4:b7:a3:c8:50:9e:e6:6a:d3:a7:e8:d8:8c:
24:45:3e:d1:99:ed:d7:d6:f5:bf:30:0e:cf:78:44:
70:75:a6:33:b3:82:b9:06:6b:1a:b9:c6:d6:0e:b2:
3b:10:e1:1e:16:01:56:80:31:eb:1e:21:af:67:59:
24:3c:b3:2d:1f:2a:34:c9:d9:77:31:c7:97:df:90:
ae:78:8d:23:ce:41:24:8d:b8:c4:b3:32:06:8f:cd:
20:11:01:12:5a:de:99:df:84:09:d1:ef:0c:4d:7e:
2f:73:b9:cf:a9:59:50:84:cb:e6:62:8d:7a:d6:a4:
69:ba:fd:c0:de:96:51:15:50:83:21:ec:df:b5:02:
da:4d:b7:65:a1:0e:ed:ad:5a:8e:66:ea:81:da:68:
ba:90:02:4c:b1:ed:df:fb:9e:3f:2a:85:b7:0b:cd:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:D3:C2:91:8F:0E:3E:10:11:3F:8F:B9:54:BA:CC:95:91:9D:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2083F6F0D9D111EF81C5506F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.86.0/24
Signature Algorithm: sha256WithRSAEncryption
af:31:ee:2f:5a:d6:34:88:48:c0:43:8f:16:af:2b:04:61:eb:
98:1b:a0:22:90:05:7d:a4:26:68:58:56:67:2c:49:0d:02:3f:
4e:a5:b8:f3:d2:ab:39:9d:c8:3f:d8:1e:a9:39:ae:ad:ee:15:
53:71:90:27:4a:7e:c9:aa:72:e6:6c:64:7c:43:31:12:e2:97:
b5:6a:b2:f0:d0:82:fb:42:7f:99:14:1a:79:b7:27:e8:75:ba:
6c:a3:98:6a:f0:7b:a6:fd:09:44:14:f8:33:69:8c:e2:67:c9:
1e:03:7e:50:3d:94:ce:c6:61:36:e6:66:ab:19:02:15:ef:f3:
bc:22:e3:34:e8:c2:9e:66:ce:c2:43:a1:6f:3f:c9:3f:2c:45:
03:50:e0:38:da:95:07:ed:d3:a4:1c:d9:0d:bd:3a:9c:59:fb:
3a:07:e9:0f:71:af:b4:02:23:20:98:39:83:9f:ff:ee:36:de:
a2:7e:9c:89:c8:bf:99:ed:6f:e8:32:ce:14:0b:fb:26:39:00:
b4:42:2c:5d:39:f7:12:83:f4:c7:89:ef:48:0b:1d:31:b1:c7:
8f:8c:9d:4c:39:3c:ce:bf:cc:d6:ee:cb:73:dc:c6:37:14:80:
8b:b3:cb:ee:33:36:4a:d4:f8:f0:80:53:be:0b:9f:fa:2e:74:
87:c8:05:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:35 2025 by rpki-client