Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C197B08D9CF11EFB6413961762E951A.roa
File: 3C197B08D9CF11EFB6413961762E951A.roa (raw, json)
Hash identifier: +IH6etRbZkWjSUCYfyuzDDW1kriMDptFse0mGuMjMHU=
Subject key identifier: C7:34:21:E0:72:D9:FF:9E:C6:BC:A9:96:20:2F:E1:4A:57:F3:F6:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014303
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C197B08D9CF11EFB6413961762E951A.roa
Signing time: Thu 23 Jan 2025 21:15:56 +0000
ROA not before: Fri 24 Jan 2025 21:15:52 +0000
ROA not after: Fri 28 Feb 2025 21:15:52 +0000
asID: 62240
IP address blocks: 154.196.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82691 (0x14303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:15:52 2025 GMT
Not After : Feb 28 21:15:52 2025 GMT
Subject: CN=6792b18c-5ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b2:86:2c:ba:57:e7:98:56:bb:40:c8:c4:9d:
fd:1c:8d:7c:b7:92:f7:db:4f:b3:21:ce:84:76:d8:
0b:66:08:44:e9:0d:cf:ea:31:00:4d:91:ea:7f:ce:
06:b5:58:f3:46:6c:f0:bd:bb:ca:6a:c5:61:3e:43:
34:b6:37:d5:4d:8a:52:1e:eb:01:8e:ba:b9:74:63:
86:85:d7:7a:92:11:b0:3f:e5:d8:34:91:0f:f4:cc:
18:38:34:d2:15:9f:71:24:db:34:ed:d8:f9:ed:14:
29:22:a3:3d:d3:65:b0:17:5f:01:71:ce:45:cf:87:
14:43:3a:c4:a7:97:06:20:7d:18:b6:25:2e:5c:95:
fd:fa:9a:45:ca:0f:e5:18:10:2c:eb:96:04:25:8b:
c1:da:7a:39:8c:11:88:61:c5:d6:71:39:3c:fa:af:
15:3e:a9:8e:b2:a9:13:8d:2b:9a:41:f3:da:34:98:
8b:a8:19:05:f8:b9:c0:55:2c:70:f1:65:9b:76:e3:
f3:05:51:86:ed:fb:19:83:18:3a:39:0d:e8:3e:0b:
c7:1e:42:97:df:02:8f:27:4c:85:6a:34:1f:b6:01:
68:c3:ba:87:d5:b3:92:e3:76:63:93:ae:c2:f0:b1:
0e:72:49:00:14:cf:88:d3:cd:cf:2b:a0:fd:b0:5e:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:34:21:E0:72:D9:FF:9E:C6:BC:A9:96:20:2F:E1:4A:57:F3:F6:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C197B08D9CF11EFB6413961762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.77.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2d:fc:05:68:29:e8:ce:22:0f:a6:97:19:19:ad:96:89:7a:
0c:d7:ed:b7:26:dd:0f:99:10:d2:55:97:a2:1b:82:51:73:54:
1e:ef:3f:2e:05:7d:a1:49:7b:3a:95:24:47:b3:54:19:4d:37:
a8:dd:8d:c3:dd:f6:1b:e1:5b:60:ec:b7:36:82:35:41:9b:c5:
7e:26:6c:d9:06:a3:d2:96:be:02:54:9b:ff:0a:d8:00:a0:5c:
69:51:74:35:04:e1:43:2c:dc:0e:d9:62:30:0a:e9:23:d3:8d:
ca:4b:f1:8b:96:02:2c:98:e3:a1:5b:7e:13:8e:f6:41:ee:1d:
40:08:2f:b1:7c:fa:6e:d9:47:c2:6d:60:10:fc:b8:f8:49:0b:
57:69:43:8e:2b:b6:a6:cb:76:12:6d:41:45:48:2e:d9:9e:c6:
00:31:f7:13:15:5d:34:37:57:4c:3b:1b:28:f9:c9:f8:f1:09:
0a:37:eb:84:29:02:ff:f7:53:5f:5a:bc:79:4e:38:eb:d9:11:
09:56:1d:23:16:f2:1d:d9:c0:cb:02:be:24:6d:90:16:16:6e:
4d:14:d7:fa:de:07:26:43:0c:5b:ff:12:51:55:79:b9:13:7d:
d2:6c:2b:50:5a:ff:a0:3c:b1:43:50:69:ec:54:3f:bb:0a:50:
e1:e4:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:09:12 2025 by rpki-client