Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4512E0A4D96711EF986F62B0762E951A.roa
File: 4512E0A4D96711EF986F62B0762E951A.roa (raw, json)
Hash identifier: 5R+VlwQemTSy1EPPbA/1D5Oft3aO40DDGlra/XHx+8U=
Subject key identifier: 41:69:D2:F4:74:AE:5D:18:BA:2F:C0:F9:2D:7B:2F:BA:EB:45:EC:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4512E0A4D96711EF986F62B0762E951A.roa
Signing time: Thu 23 Jan 2025 08:51:44 +0000
ROA not before: Thu 23 Jan 2025 08:51:40 +0000
ROA not after: Fri 28 Feb 2025 08:51:40 +0000
asID: 62240
IP address blocks: 154.194.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82088 (0x140a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:51:40 2025 GMT
Not After : Feb 28 08:51:40 2025 GMT
Subject: CN=6792031f-aeb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:bf:dd:72:ba:b1:cb:fc:b6:c5:f7:6e:0f:
c0:88:1a:05:e7:95:b1:69:fd:01:8e:6b:ad:c7:80:
94:b7:7e:8e:3c:b6:79:01:c5:d8:4f:5d:ba:06:75:
6b:d0:4b:f9:3f:f0:f2:7e:05:27:23:63:c5:bf:2b:
1b:6b:b2:97:4b:2b:c2:7c:de:27:f4:60:df:31:b5:
34:17:b7:7e:88:e8:23:c5:67:cf:17:d9:a1:e4:00:
95:da:0d:2d:b5:ac:bb:6c:11:d8:16:4a:b1:04:b2:
38:a3:66:c8:de:42:2b:3c:47:5c:c6:5e:75:cd:32:
ca:c1:f1:2c:cd:8c:43:94:0a:01:ac:1b:1c:5f:c2:
8f:2c:72:a9:e5:47:9b:d5:3f:ac:48:46:f2:33:9b:
f1:10:18:37:2c:5e:d7:53:08:32:f2:09:e9:6f:35:
27:4f:e2:ed:88:f8:21:92:de:f2:c7:25:06:ba:9e:
00:3b:df:21:ba:83:27:f5:45:93:2c:93:8b:fb:fc:
b3:cb:d2:e1:fd:9d:fe:cb:e6:cb:7e:ad:ed:5a:fa:
4b:e4:b5:95:d9:91:ae:d3:d7:54:ff:b0:4e:06:32:
89:48:d1:c2:3e:1f:04:c8:d2:b1:d2:ea:94:ac:5c:
6a:51:00:e5:84:7e:db:67:3a:ba:c5:38:ff:8c:08:
ec:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:69:D2:F4:74:AE:5D:18:BA:2F:C0:F9:2D:7B:2F:BA:EB:45:EC:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4512E0A4D96711EF986F62B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.74.0/24
Signature Algorithm: sha256WithRSAEncryption
43:52:fd:78:40:ac:7a:77:ec:88:ec:93:a4:53:c5:8c:92:36:
d5:9d:eb:03:83:94:0c:62:56:87:13:5f:19:95:c6:36:9f:12:
94:fc:c3:54:27:09:c5:55:a9:6e:34:00:82:a7:f9:2c:51:86:
d1:b3:bf:5e:e5:6e:4e:34:54:e9:9f:85:be:4e:a4:ce:27:e1:
db:14:63:30:ee:be:dd:e9:b5:d7:35:24:5b:27:80:dd:7a:8a:
34:7e:be:ef:5c:03:92:18:c5:eb:87:f7:09:c2:ca:16:fb:94:
d7:56:93:82:e1:df:f6:8c:7b:ba:7b:2b:56:9a:ac:d7:c8:cd:
46:8a:6a:42:50:1c:f8:47:37:55:40:ad:df:0f:74:8b:20:fc:
52:14:59:bc:3e:c5:6b:c1:41:78:ec:9b:5e:91:c6:c7:61:e1:
fd:fc:79:cf:6f:69:de:4f:00:c7:e9:46:d5:bd:a9:0d:ea:39:
dd:11:64:5b:43:af:c7:fd:1f:70:eb:39:22:b8:15:c0:d6:5e:
88:14:09:66:ff:4a:6e:4e:5c:ce:87:cb:7b:54:73:f4:1b:6c:
40:e0:e9:b3:4a:a3:ec:37:11:b1:d8:ab:2e:6a:e7:8d:96:11:
50:42:e6:d8:18:ef:ac:ac:45:9e:1a:44:53:30:58:b7:fe:12:
f2:ed:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:31:05 2025 by rpki-client