Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43A29B0ADA3A11EFB64BB4BE762E951A.roa
File: 43A29B0ADA3A11EFB64BB4BE762E951A.roa (raw, json)
Hash identifier: iS/PzypX11887yR1RdxItEP+CgpoD+R4U8NOzTyLBGg=
Subject key identifier: F2:BF:33:A6:0F:12:66:50:F5:35:5E:EB:2A:03:CD:CC:3F:50:39:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014546
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43A29B0ADA3A11EFB64BB4BE762E951A.roa
Signing time: Fri 24 Jan 2025 10:02:05 +0000
ROA not before: Fri 24 Jan 2025 10:02:01 +0000
ROA not after: Fri 28 Feb 2025 10:02:01 +0000
asID: 62240
IP address blocks: 154.196.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83270 (0x14546)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:02:01 2025 GMT
Not After : Feb 28 10:02:01 2025 GMT
Subject: CN=6793651d-982e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:64:14:6c:8e:07:6b:9d:77:39:b7:0d:86:13:
5c:db:87:d3:87:c8:19:74:4e:ba:58:8d:e9:b7:88:
91:34:ef:31:67:53:49:fb:70:13:b4:59:aa:e7:02:
ad:a7:59:37:92:9f:fc:4f:6d:6f:a4:10:d3:14:6d:
72:ae:e0:01:11:6d:3e:8b:47:fb:44:86:76:20:c9:
02:10:19:e9:46:f1:c6:26:0a:e5:90:9e:68:22:04:
c4:b5:d8:16:18:d6:fe:58:19:d8:7b:7f:01:ed:43:
95:d9:a6:9f:fd:3e:34:7a:3a:69:ca:b5:96:03:79:
ba:f5:39:31:cb:20:47:99:70:4a:ba:f8:3c:f0:37:
73:ce:d5:40:2e:4c:f0:e1:19:de:18:e8:b3:15:74:
ed:88:5a:5c:5a:8c:c2:4b:ed:d0:54:fc:67:3d:67:
2d:a6:95:fd:7d:48:13:c8:51:b2:cb:5f:a3:48:f2:
3a:11:b5:9e:e7:24:d5:55:d3:21:76:ca:f3:ea:82:
1b:90:9a:c4:ec:40:ee:26:04:4c:5a:2c:e4:a8:76:
f2:dd:c7:0c:c2:be:e3:6e:02:f7:39:f4:70:72:67:
ee:fe:27:7c:b2:6e:6d:93:36:3c:c4:45:91:9c:29:
47:68:d4:ec:3d:99:9c:d2:b7:01:22:f8:bb:09:3c:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BF:33:A6:0F:12:66:50:F5:35:5E:EB:2A:03:CD:CC:3F:50:39:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43A29B0ADA3A11EFB64BB4BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:61:12:12:f4:c1:e8:ac:e5:9b:ab:d7:20:03:b8:bb:50:50:
7d:7e:39:23:03:e0:b0:9e:62:d5:f0:f3:f6:eb:a1:25:87:54:
72:c8:50:40:3a:3b:c9:b4:a5:78:f2:2d:ae:01:5b:b1:02:5b:
5c:7a:8e:b9:3b:4b:36:42:c8:32:0e:40:93:ce:aa:dc:e3:51:
17:85:49:42:21:e8:10:12:1b:5c:e3:2a:a0:f6:b2:4e:50:57:
ed:98:16:63:cb:ff:2e:f8:5a:13:08:ba:5b:82:27:c6:6e:5f:
99:7e:3e:70:8b:f6:18:f4:2b:43:8a:8f:97:52:ca:26:5a:7b:
39:87:55:92:bb:34:c4:1c:80:27:00:7e:5b:83:cb:f4:50:80:
45:01:22:ad:ca:ca:eb:6a:dc:f9:de:2d:5c:ac:9a:9c:e3:81:
a6:ad:9c:a3:86:68:c3:12:b2:27:6d:a5:1b:f9:c4:8c:0a:d7:
9e:92:c9:41:0e:b4:35:cf:50:06:26:f5:f5:51:cc:76:81:aa:
5c:0c:80:31:a4:32:d3:98:18:73:45:de:66:3a:5d:39:6b:18:
f7:1f:bf:6f:a1:da:f0:f4:3b:12:2c:18:94:5a:dd:91:58:1f:
c4:35:13:17:56:a9:4a:8f:ff:03:d8:7b:6f:e8:98:52:f5:a8:
f4:21:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:26 2025 by rpki-client