Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28B46948D96A11EF86378B44762E951A.roa
File: 28B46948D96A11EF86378B44762E951A.roa (raw, json)
Hash identifier: pYnkC0IYsz4CFhlJFu27w4nGQ/Xpooz9hlmCBRxg/aI=
Subject key identifier: DE:CB:31:D3:A2:3D:A3:D1:82:F2:E8:5B:09:4D:9D:15:9C:30:96:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28B46948D96A11EF86378B44762E951A.roa
Signing time: Thu 23 Jan 2025 09:12:24 +0000
ROA not before: Thu 23 Jan 2025 09:12:21 +0000
ROA not after: Fri 28 Feb 2025 09:12:21 +0000
asID: 62240
IP address blocks: 154.194.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82134 (0x140d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:12:21 2025 GMT
Not After : Feb 28 09:12:21 2025 GMT
Subject: CN=679207f8-b4b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:25:49:1e:1a:f4:ee:83:b3:62:46:41:0f:e5:
24:c0:d1:41:89:b0:0e:8b:4d:34:6e:5b:2e:75:39:
18:1b:dd:d1:30:65:45:8a:26:e2:54:aa:cf:de:6f:
07:d9:2d:a7:85:bb:82:44:d1:68:27:98:46:37:50:
20:11:86:58:24:76:00:47:dc:b3:1d:d4:0e:e4:66:
78:c7:c3:63:82:0b:e5:45:94:b3:0e:90:59:70:03:
b5:bf:4b:9a:67:b9:8c:ab:e7:60:d9:72:35:c6:cc:
43:28:88:ad:c2:75:ea:cf:56:f4:ed:22:80:3f:8f:
64:5b:25:e1:58:a0:07:79:43:ec:ed:c7:49:da:4c:
dc:08:ef:1b:c9:2d:6e:4b:26:ba:7c:2e:f8:c0:ee:
97:e9:e5:9a:a4:09:93:d6:01:00:d3:a0:2f:41:54:
98:da:71:51:0f:fc:a9:cf:55:50:a1:05:e6:6d:78:
6f:3b:56:64:1a:2c:f8:ed:5c:25:2b:85:d3:ca:83:
78:ec:01:28:51:1f:26:d6:5a:af:ec:e0:bb:09:08:
87:c4:cf:6b:f4:1c:7d:31:fe:00:a0:63:c0:43:d5:
16:36:65:ea:be:96:b6:13:4a:77:28:bb:cb:f3:70:
ee:77:a0:ae:f4:ce:2b:ef:9d:9d:7f:91:1d:59:5d:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CB:31:D3:A2:3D:A3:D1:82:F2:E8:5B:09:4D:9D:15:9C:30:96:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28B46948D96A11EF86378B44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.102.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6c:96:04:78:c8:96:d9:4f:b9:a0:c3:8a:9c:1d:c2:ae:d0:
23:44:90:b3:dd:03:91:b4:53:8c:57:a7:0a:be:ec:e7:01:78:
05:6f:17:8d:b9:28:52:31:c3:ed:db:c8:83:8b:4c:44:ea:5a:
e3:59:74:0f:f6:9d:c7:76:62:34:1d:51:b4:a2:c9:36:46:b6:
ac:f5:81:e0:0e:d9:6f:b6:60:2f:4e:c4:8c:8c:c6:8b:08:2a:
55:06:9a:3b:bc:a8:b2:26:94:ce:88:62:66:ac:7e:33:13:db:
7a:58:24:8c:c4:40:39:03:e4:19:83:03:e7:ca:a9:04:ce:d5:
c2:eb:f1:e0:0e:df:9c:12:fe:d9:ea:ed:37:90:8c:ad:16:40:
b7:a3:95:7c:41:3e:ad:47:32:4e:09:56:88:1c:20:e1:76:4d:
86:c9:b2:85:10:5a:c5:73:5d:d4:39:1f:6d:ad:8d:db:b9:68:
57:91:d7:70:0d:ce:d9:6f:5d:86:09:36:fd:f5:a7:07:4a:be:
ed:6b:23:2a:ff:d9:b5:f9:cb:2d:7e:7c:00:07:01:e4:d7:f5:
5f:04:58:87:d1:09:24:1a:a8:c5:8b:5d:08:96:ed:3c:b7:cd:
52:31:27:f7:a5:15:26:ca:e4:51:14:78:f5:45:37:57:65:3c:
4b:3a:a1:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:01 2025 by rpki-client