Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2156C2A2DA5C11EF8C2595A5762E951A.roa
File: 2156C2A2DA5C11EF8C2595A5762E951A.roa (raw, json)
Hash identifier: 9HY4Ns5X/9QFF5dJ0kZsYu7Xr+kTiuRi0ah8a2pg4d8=
Subject key identifier: 4B:BE:CF:28:0C:43:E4:0D:16:55:4C:04:DC:F8:DA:6B:BC:BC:D0:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147DF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2156C2A2DA5C11EF8C2595A5762E951A.roa
Signing time: Fri 24 Jan 2025 14:04:30 +0000
ROA not before: Fri 24 Jan 2025 14:04:27 +0000
ROA not after: Fri 28 Feb 2025 14:04:27 +0000
asID: 62240
IP address blocks: 154.196.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83935 (0x147df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:04:27 2025 GMT
Not After : Feb 28 14:04:27 2025 GMT
Subject: CN=67939dee-f22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:2e:cf:6c:a1:93:6b:56:0a:04:5a:c4:d1:
63:21:30:4e:cb:c1:a0:e8:e1:b7:0f:26:e6:20:7c:
c4:9d:8f:d6:a2:d8:c1:2f:f0:d3:23:12:fb:ed:0f:
94:49:42:ac:db:8c:99:4e:8d:e3:e6:3b:4f:e5:9c:
ea:8d:f5:6f:d7:0a:71:e6:2a:6a:07:5c:6e:f1:4c:
f9:a5:9a:53:23:7d:ac:76:fd:8d:83:de:ec:95:46:
1f:ac:1f:b7:95:b4:10:a4:05:43:dc:56:f8:0d:d8:
d1:ee:4c:49:4d:4b:c1:fe:7f:85:74:f1:97:6e:9a:
8d:0a:ca:f3:a3:3d:11:00:11:88:ad:fa:52:52:8c:
de:b5:24:a3:58:a2:25:76:b8:67:fe:b9:fb:60:06:
33:cf:91:88:27:7d:94:38:0b:09:b8:0c:c0:cb:2b:
59:fa:04:b0:31:3a:80:62:f1:27:c4:39:15:dd:3b:
46:01:8a:8f:f2:96:2a:18:3e:4c:d7:ad:13:12:23:
58:11:4e:62:77:8b:77:83:a0:fa:27:02:19:a2:44:
69:8c:cb:03:ee:02:be:f7:06:b8:a6:af:28:ea:8c:
26:b5:30:6f:5d:5b:25:10:e4:56:18:93:25:41:81:
95:1e:e6:c0:54:54:72:f8:a1:d2:66:ef:d8:0b:98:
9b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:BE:CF:28:0C:43:E4:0D:16:55:4C:04:DC:F8:DA:6B:BC:BC:D0:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2156C2A2DA5C11EF8C2595A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.88.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:10:ff:7f:3d:f4:81:e0:1d:f9:a6:c2:17:35:ea:cd:1a:e9:
50:b8:98:35:6b:ba:52:1b:5a:6f:90:1d:70:78:04:38:0d:74:
8a:4d:4e:d3:d8:bc:a6:de:26:cf:6f:2d:c9:d3:13:af:f4:7a:
64:02:21:60:00:e1:8b:47:b0:f7:ed:7e:a5:0f:fc:bf:73:ce:
db:3a:c2:28:0c:67:da:d0:25:53:cb:4d:82:3f:1e:8c:54:00:
77:9b:94:d4:0b:be:af:ea:a9:18:26:29:ee:b2:b9:6c:c3:5d:
0a:84:aa:25:7c:10:85:a1:4f:a5:7b:1b:4c:39:99:fa:86:72:
07:fa:7f:c8:44:2e:b1:00:f1:33:37:7d:85:2e:a5:ba:44:fc:
3a:4b:bf:a4:8a:fe:93:67:cc:e0:44:e2:6c:52:7c:db:fd:d3:
5d:40:0d:f9:61:42:c2:67:7b:d1:66:0f:1b:34:3f:e6:73:e0:
ea:43:60:6a:a3:bf:44:0b:cc:24:3b:57:0d:32:3f:4c:99:c7:
e2:aa:4a:51:85:66:4a:d3:8c:c6:d8:45:1c:bc:a1:0a:48:eb:
ca:30:9f:da:17:6e:54:25:42:20:be:6e:9b:6b:05:47:e3:7b:
72:f1:c5:c3:1a:05:a8:b9:24:1e:74:82:17:7d:42:11:e2:33:
56:a1:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:11 2025 by rpki-client