Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41266996DA6811EFBBD8B777762E951A.roa
File: 41266996DA6811EFBBD8B777762E951A.roa (raw, json)
Hash identifier: e9bxM7+I8/S//MHYnufJr6NmlPA2Lm4/JhchCqumdi8=
Subject key identifier: 9A:34:82:65:4B:A8:6A:2B:4C:B9:4F:AD:D1:D8:35:22:72:D2:DC:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0148AA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41266996DA6811EFBBD8B777762E951A.roa
Signing time: Fri 24 Jan 2025 15:31:18 +0000
ROA not before: Fri 24 Jan 2025 15:31:14 +0000
ROA not after: Fri 28 Feb 2025 15:31:14 +0000
asID: 62240
IP address blocks: 154.195.108.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84138 (0x148aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:31:14 2025 GMT
Not After : Feb 28 15:31:14 2025 GMT
Subject: CN=6793b246-5688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:49:bb:cd:75:fd:41:c4:2a:7d:69:cb:19:75:
3f:e4:9f:7d:6c:e8:6c:3a:79:f4:30:ad:3f:97:6d:
55:fb:ad:b8:f0:60:2f:68:5e:fd:06:91:50:dd:cc:
9f:47:49:f9:49:ff:9c:91:95:cb:08:f8:50:cb:f2:
c3:4b:f5:0a:65:90:71:a4:02:37:28:d6:17:2f:5c:
9f:ae:97:14:c9:a0:3f:ce:44:7f:eb:41:4f:ea:36:
15:30:0d:7d:29:40:91:9e:d4:dc:c8:13:e1:37:39:
46:d3:c6:1e:0d:03:fd:b9:da:e6:4a:59:f9:a4:b9:
e0:ea:74:db:1b:de:f3:5a:8f:84:3e:86:b3:82:ce:
06:b4:6a:3d:ad:cd:d1:19:cb:89:d0:78:4c:10:b2:
8e:9d:20:2b:ce:8c:e9:aa:e0:01:53:7a:f9:a9:d3:
f5:a0:e8:be:1a:9b:61:10:58:f1:a3:a1:ed:d8:88:
ec:22:33:a8:8a:80:dc:07:63:14:a8:01:1f:dd:dc:
36:8e:11:24:9d:ff:dc:ca:da:0d:39:9d:a2:a5:06:
37:36:a0:19:19:2d:d6:40:cd:35:51:df:ba:32:cc:
e7:e8:67:94:e5:3f:37:b5:82:51:41:0f:7f:a9:e2:
a8:3b:08:f6:e7:4a:0e:46:f4:b8:ba:26:cb:0b:9e:
a6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:34:82:65:4B:A8:6A:2B:4C:B9:4F:AD:D1:D8:35:22:72:D2:DC:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41266996DA6811EFBBD8B777762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.108.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2e:dd:b8:93:1d:48:4a:54:7d:2f:87:b2:b2:9b:c3:b2:f7:
f4:e8:c8:fd:10:34:32:63:07:37:79:56:b9:5d:d6:47:b7:9c:
e1:34:5a:54:fa:55:12:1d:ab:aa:80:09:8f:76:61:ec:4b:8f:
08:a9:17:64:bb:ac:d2:d7:32:9c:bb:8a:89:4f:8b:cb:f6:1a:
a9:99:b2:01:6f:e5:0d:7d:8f:f0:21:55:06:a6:3d:62:87:32:
34:c0:7c:82:fb:4a:af:c6:da:e1:df:bb:ed:12:2b:53:d8:1d:
71:22:50:8b:6c:ce:2c:ff:ac:e6:67:bf:49:3d:7c:d2:77:67:
13:d0:de:d7:f2:db:4b:01:e3:86:de:d2:0b:c1:99:5c:56:76:
fd:ab:a9:34:21:54:1f:7b:48:50:99:f8:f1:c5:c9:b0:58:28:
02:5e:01:29:5f:d2:ee:90:27:61:72:9a:a1:3c:98:01:8b:d7:
df:50:51:dc:2c:31:54:bd:fd:4e:67:0b:a1:a6:d8:26:2d:c7:
c5:8f:ac:05:a2:70:70:d1:e8:1c:6b:a4:78:a1:e1:d8:33:13:
22:9b:66:ec:ab:1c:7f:77:04:06:d6:8c:9c:b8:1e:92:48:ea:
81:63:3f:da:52:56:7a:78:19:d9:15:b7:0e:38:d6:5c:7a:e8:
7f:ca:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:00 2025 by rpki-client