Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/389E80D2DA3711EF899740AA762E951A.roa
File: 389E80D2DA3711EF899740AA762E951A.roa (raw, json)
Hash identifier: OLq3hskY7Se9mqBtS4fyj950n5vOY28ndzhMrh+ZZuQ=
Subject key identifier: 52:60:69:B7:2A:56:D3:53:21:B7:97:96:0B:5F:81:13:F1:10:AE:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01450B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/389E80D2DA3711EF899740AA762E951A.roa
Signing time: Fri 24 Jan 2025 09:40:18 +0000
ROA not before: Fri 24 Jan 2025 09:40:14 +0000
ROA not after: Fri 28 Feb 2025 09:40:14 +0000
asID: 62240
IP address blocks: 154.196.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83211 (0x1450b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:40:14 2025 GMT
Not After : Feb 28 09:40:14 2025 GMT
Subject: CN=67936002-cf0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:a9:5b:75:4c:11:d2:9b:45:87:8f:15:4f:
1e:b8:71:e2:2a:01:07:44:14:dc:8c:c5:35:e7:f0:
7a:0d:6d:0d:1e:10:35:c1:0a:30:1f:64:6d:bd:4d:
06:e1:aa:06:85:66:a5:89:22:18:4f:85:a6:ee:8b:
58:47:4b:e2:21:9c:b2:02:7c:b5:96:f3:da:c3:8f:
50:28:53:f4:a1:c0:a4:7b:5d:64:1d:f8:50:a9:f5:
51:23:c6:db:93:d8:05:d1:85:db:f1:e1:01:a6:35:
79:23:14:1d:b1:e7:33:61:4e:cc:38:47:c1:06:b4:
fb:51:00:8b:11:29:21:72:14:c7:53:e6:35:a3:10:
70:dd:73:c4:ec:95:2c:9b:32:58:b8:75:f7:0b:d1:
de:e4:d1:f6:01:c6:ee:11:5d:97:ec:d0:57:b0:9a:
8a:36:6e:2a:88:62:b0:1e:65:0c:91:b2:2f:be:a0:
36:e6:59:76:fd:65:17:a1:fb:15:df:33:cf:10:ff:
f3:8c:20:15:82:d3:d1:9d:e6:9b:38:6e:40:ea:3b:
2b:56:c9:43:7e:d5:8a:83:4a:e7:8e:9e:7b:52:a6:
94:4c:ff:74:c0:ec:e3:83:4c:d9:b7:8c:8d:2e:20:
1b:18:96:94:53:3c:06:a7:f3:1c:06:01:08:e6:aa:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:60:69:B7:2A:56:D3:53:21:B7:97:96:0B:5F:81:13:F1:10:AE:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/389E80D2DA3711EF899740AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
43:f6:44:90:1e:4d:0f:7e:e8:c2:84:a9:d5:9b:cd:e7:33:f9:
4b:ec:04:ab:20:a5:69:6b:49:ae:89:fc:77:95:f0:d4:dd:bc:
74:db:c8:2b:36:c3:ab:36:0a:0a:9a:a1:47:52:a5:00:c3:26:
5c:69:c7:06:0f:28:d5:69:90:2f:9d:03:8b:83:d0:30:8a:91:
42:19:16:c6:67:61:04:e2:d2:9f:9d:38:98:cd:9e:49:87:1d:
c0:eb:c1:87:cb:82:94:3b:7d:58:38:f4:8d:13:f4:10:f1:dc:
2e:14:64:02:5c:b8:a0:08:ca:bc:2f:f0:fb:75:31:c2:b9:a4:
16:75:d4:37:23:6b:fa:c9:a9:75:4f:1a:e4:eb:1a:8c:79:63:
be:61:f4:b0:27:62:b4:ad:c7:e8:a0:24:38:74:c9:73:c0:33:
f3:ac:fe:46:38:cc:13:7d:0e:bd:d2:d7:5e:da:52:83:c1:92:
ba:2c:cd:45:37:6f:06:98:38:31:2d:a9:02:6e:9c:a2:48:8f:
d2:54:fc:79:39:f3:ef:2e:72:ce:d2:5c:65:eb:43:99:39:95:
7d:35:e7:e2:00:0a:b1:81:72:fe:19:94:e3:74:c3:90:4f:64:
9a:4e:39:99:fe:bd:1a:59:da:fb:3f:ce:34:79:78:ad:18:09:
e1:5e:0b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:16:32 2025 by rpki-client