Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21456CF2D9CE11EF9CC3F15B762E951A.roa
File: 21456CF2D9CE11EF9CC3F15B762E951A.roa (raw, json)
Hash identifier: GrvZzXVf0fP0CrgNFRCxCf7o/EnMS/l9Y60RuVYalzI=
Subject key identifier: 6D:81:16:65:F6:38:3F:F9:84:D7:52:EC:28:64:B5:65:62:50:A5:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142FB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21456CF2D9CE11EF9CC3F15B762E951A.roa
Signing time: Thu 23 Jan 2025 21:08:02 +0000
ROA not before: Fri 24 Jan 2025 21:07:58 +0000
ROA not after: Fri 28 Feb 2025 21:07:58 +0000
asID: 62240
IP address blocks: 154.196.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82683 (0x142fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:07:58 2025 GMT
Not After : Feb 28 21:07:58 2025 GMT
Subject: CN=6792afb2-4fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:35:98:bb:08:e9:83:97:a4:6b:4d:44:a0:
8e:ef:d6:e8:e3:87:28:61:94:fd:df:f6:1e:3c:72:
be:8f:08:1b:6f:b1:84:95:27:60:06:a8:f9:57:6e:
c0:72:ce:76:cf:66:5a:28:33:c3:f6:81:fb:7d:b1:
26:45:c2:3e:a5:01:e8:ad:7b:1f:96:1e:db:63:7c:
50:43:68:18:e5:92:41:f6:82:b9:40:84:41:6a:a5:
ce:7e:ae:99:60:67:70:09:55:d3:a9:36:9f:19:c0:
8c:b5:9f:c4:8f:88:d7:ef:3a:45:ab:ba:25:13:e5:
f3:d7:a5:ae:86:9f:e7:a0:d7:4c:65:63:2b:5a:e2:
56:49:ff:cb:42:5e:d4:29:ef:d2:fb:76:28:f3:f4:
da:b4:8a:a8:9d:d6:12:a8:f9:5f:91:9c:91:be:2a:
41:cc:2a:f7:d2:15:3b:64:2d:f4:05:87:8e:d5:b5:
f8:6a:9c:9e:5c:11:c5:17:92:02:b2:93:e6:fb:2d:
89:8e:0a:71:45:32:3a:bd:74:f6:48:80:e3:9a:e6:
77:07:c3:de:66:ca:f2:3c:f8:d1:5a:29:32:fc:d4:
da:f2:3a:ad:4b:c5:92:c1:df:b8:97:f6:71:23:ee:
ad:9f:53:60:0a:20:0b:4b:88:cd:3b:6c:f0:10:71:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:81:16:65:F6:38:3F:F9:84:D7:52:EC:28:64:B5:65:62:50:A5:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21456CF2D9CE11EF9CC3F15B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.73.0/24
Signature Algorithm: sha256WithRSAEncryption
88:3c:70:cc:61:27:67:0c:da:61:01:6a:4d:a5:20:d7:19:47:
3f:a2:2a:5b:36:79:c3:78:16:60:52:9a:ad:dd:08:c0:69:97:
ca:98:78:69:d5:0f:2d:80:ee:ea:d1:7b:a8:e0:4a:a8:f2:0e:
64:e7:e7:2e:55:fa:31:4d:55:d7:f6:49:0d:4f:d2:16:8c:82:
9a:5b:ed:10:84:9c:bf:71:e9:d7:2f:8b:05:a1:95:2a:cd:9a:
cd:9c:54:ba:bf:00:67:87:cd:ad:be:73:05:1b:45:61:c8:9c:
3b:19:4b:86:f9:15:8e:25:5e:aa:1f:b8:a5:10:ba:d6:af:29:
ba:8f:87:5e:58:ba:39:35:5f:11:d1:81:57:ec:d8:db:46:e5:
70:8a:8a:97:c5:67:73:4c:53:dc:51:89:21:92:53:3d:f4:a9:
88:9b:d6:b5:44:42:c5:7c:da:81:fa:e0:e5:63:3a:89:d3:dc:
94:6f:b3:86:c8:a8:56:b3:b9:0e:3e:0d:a0:34:b1:2e:94:3f:
6d:71:55:82:23:de:35:24:6e:f0:fe:20:21:0e:71:dd:88:f4:
e4:35:74:37:ed:7c:b8:ce:5d:85:c5:57:64:f8:07:56:9e:0b:
bc:a2:0c:4a:8b:f2:aa:ad:2e:95:17:3a:19:79:88:80:02:5e:
05:6d:da:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:51 2025 by rpki-client