Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE93106D9C911EF91584ABA762E951A.roa
File: 3BE93106D9C911EF91584ABA762E951A.roa (raw, json)
Hash identifier: a4HlH7RNx+D2KYU7B1c0AD3kSJAfRsgmjEj1UJ7LcGk=
Subject key identifier: E0:B9:D0:E0:0D:49:85:55:69:52:A2:DA:29:2D:42:57:0B:1C:0C:C1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE93106D9C911EF91584ABA762E951A.roa
Signing time: Thu 23 Jan 2025 20:32:59 +0000
ROA not before: Fri 24 Jan 2025 20:32:55 +0000
ROA not after: Fri 28 Feb 2025 20:32:55 +0000
asID: 62240
IP address blocks: 154.196.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82646 (0x142d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:32:55 2025 GMT
Not After : Feb 28 20:32:55 2025 GMT
Subject: CN=6792a77b-5e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:69:60:73:e1:36:ab:a6:44:91:5d:64:bc:
37:34:3f:ca:ba:18:18:7f:c3:0e:4e:94:a0:7f:c6:
f8:31:7d:8c:c2:ad:28:83:87:30:2c:f7:b1:5e:75:
8d:f7:34:b1:9a:21:2d:be:6a:95:0f:5e:a7:2f:f5:
6a:b0:73:bc:59:97:2c:c4:29:14:c6:8a:7b:ef:88:
4d:11:38:1c:93:1f:1f:12:80:29:91:b7:5d:4e:55:
b3:6e:2e:7b:ba:15:80:c4:af:e9:b9:31:bd:bb:6a:
86:84:31:c9:f8:15:93:24:2c:22:e1:ea:ea:6c:1b:
4d:f6:33:2a:2e:63:87:d0:3e:7b:c3:fd:36:06:97:
6e:49:ae:d4:d9:2a:a8:3c:b6:64:ed:82:8b:8c:25:
09:06:1d:56:2b:9a:02:e0:c9:ae:37:96:20:8b:59:
a8:da:2c:56:26:2c:57:45:71:ce:dc:23:6b:d8:0c:
77:83:5d:58:e4:ed:c1:c1:fe:ed:b1:f2:27:fe:c6:
36:89:9d:26:40:3f:79:05:d4:1c:19:14:0e:a5:0b:
00:21:e7:00:b9:c2:92:78:40:80:c7:6b:92:69:8d:
d1:d1:2d:71:79:7b:9d:a8:af:58:36:c9:40:2c:b4:
19:4f:79:3b:04:69:6e:94:31:9d:24:97:5f:bb:5b:
f2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:D0:E0:0D:49:85:55:69:52:A2:DA:29:2D:42:57:0B:1C:0C:C1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BE93106D9C911EF91584ABA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5d:2a:86:ce:bc:6b:9c:ff:09:0d:b9:cc:2a:5f:81:a0:81:
68:dd:44:0a:39:0c:30:1f:79:0b:c2:95:fc:6c:b8:b8:67:40:
ba:0f:66:8f:0d:85:41:39:a6:61:d0:10:bb:49:47:04:44:37:
01:a5:c5:50:b2:f3:d9:f9:a8:ec:b9:eb:1e:9a:9b:7d:e5:d3:
f3:31:d1:48:26:07:21:3c:43:26:9a:7d:87:6d:fa:11:90:8d:
92:b6:75:e1:bf:90:cd:71:72:47:a6:12:2e:64:3e:12:b0:a4:
c2:4a:41:9a:2d:53:04:0d:5e:35:c3:fe:24:7c:de:7b:54:8a:
b6:32:e0:ec:af:81:de:68:23:a5:41:6b:70:8a:11:19:73:14:
40:06:ae:b2:60:85:f8:ff:ff:63:36:24:79:8e:18:6d:8e:89:
50:0c:64:c8:81:de:d8:34:a4:8d:05:7c:16:8c:44:b6:40:36:
22:0b:77:5f:d7:34:83:33:b4:41:e2:ee:93:24:e0:24:49:a2:
f4:4d:98:ba:59:03:c4:55:a7:ed:fc:87:5a:1b:5d:bd:12:de:
df:a1:c2:aa:5e:24:5e:bf:a0:c7:a1:f0:65:60:2d:bc:70:16:
c3:5f:e4:ef:6c:8a:39:9d:10:f9:8b:6f:5a:bb:07:dc:46:14:
5a:92:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:33 2025 by rpki-client