Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4323F9E6D98E11EF872414B5762E951A.roa
File: 4323F9E6D98E11EF872414B5762E951A.roa (raw, json)
Hash identifier: LeXMxL3Td/FEWwK3xfDY7quAps0BZXTtgPd89Rv8+I4=
Subject key identifier: 49:09:A5:A7:36:69:96:3D:35:6A:D0:73:A4:7D:11:49:3C:48:28:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01427A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4323F9E6D98E11EF872414B5762E951A.roa
Signing time: Thu 23 Jan 2025 13:30:51 +0000
ROA not before: Thu 23 Jan 2025 13:30:47 +0000
ROA not after: Fri 28 Feb 2025 13:30:47 +0000
asID: 62240
IP address blocks: 154.196.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82554 (0x1427a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:30:47 2025 GMT
Not After : Feb 28 13:30:47 2025 GMT
Subject: CN=6792448b-2cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:aa:59:e7:64:fe:61:87:54:0a:88:52:e5:
6f:e4:02:6b:d8:3e:39:11:d9:8e:9b:69:7d:48:b8:
11:5a:9d:11:92:16:47:a4:4c:e6:e6:f5:36:f8:0e:
a6:03:79:68:33:0e:e6:53:e0:18:d1:1b:a3:6e:85:
b1:9f:9c:19:c4:8b:b6:eb:fd:02:62:f2:1a:0b:db:
d3:93:25:7d:9f:35:4e:f1:76:93:36:c8:a6:b7:39:
64:d5:53:f9:ad:51:80:6c:94:ce:44:b7:cf:ab:17:
dc:92:fe:2b:57:81:a0:61:88:ad:79:a2:88:e8:c2:
bd:89:d3:69:bf:be:bf:f3:0f:c0:0f:6e:46:19:10:
ee:e0:2d:1b:2e:23:84:89:61:e7:48:96:9f:9f:ca:
1f:f6:0f:15:7e:10:84:d8:a4:3d:83:51:0d:db:ce:
ff:59:15:97:d1:03:17:f8:98:5f:3d:f4:b5:9b:c2:
b3:db:cf:e8:63:a5:02:4a:53:82:be:b1:5b:11:28:
30:57:54:28:d9:0f:b9:0f:40:af:0b:d7:8b:85:22:
a1:bd:89:73:ee:30:86:93:da:68:74:fd:88:cb:33:
88:dd:15:20:b4:d2:1b:7c:ea:58:1a:d3:b9:97:e8:
2d:b6:bd:b2:6c:2e:4d:a6:49:ab:5e:68:e8:ce:46:
cb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:09:A5:A7:36:69:96:3D:35:6A:D0:73:A4:7D:11:49:3C:48:28:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4323F9E6D98E11EF872414B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:45:21:a2:ec:e4:03:c8:9b:ce:b1:49:fc:90:fb:b2:d9:87:
17:e4:06:1b:ef:3a:a1:34:51:a7:3f:11:16:b2:a2:98:5b:a0:
0f:77:e0:92:db:57:c1:72:0c:09:f4:e3:3d:d3:50:57:a6:fa:
6c:8b:d8:82:25:54:a0:23:fa:d6:73:2f:d7:cf:b9:30:89:59:
76:d5:55:3a:08:b3:f8:dc:24:af:f7:08:90:fd:1c:4a:06:ee:
59:18:d6:ad:e6:db:7c:8d:00:fe:85:60:37:a6:de:cf:80:5d:
8a:af:c8:60:66:5f:1b:18:1b:87:8f:c3:cd:61:d7:8c:2b:78:
79:9f:b7:b4:14:14:d8:87:97:4c:e6:c8:c6:04:92:e8:bf:16:
0f:9e:98:dc:6b:df:90:4a:0b:5e:b2:08:e2:71:9d:97:03:b7:
8a:d1:f3:a4:74:ff:24:cc:77:36:60:e1:fa:d0:5f:ed:90:dc:
ee:6a:98:c4:5a:dc:45:66:2d:84:e7:07:2d:26:09:c3:19:1a:
37:04:97:dd:fb:e0:db:08:ae:ee:06:a8:2f:62:3e:af:49:d3:
82:08:52:7a:06:e6:85:9e:86:61:1e:05:58:a7:31:9d:c8:27:
f1:f9:4b:70:55:31:fc:84:3d:49:62:c3:5d:4a:df:f9:7c:83:
f5:28:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:05 2025 by rpki-client