Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4553CFF0D96D11EFA1B84459762E951A.roa
File: 4553CFF0D96D11EFA1B84459762E951A.roa (raw, json)
Hash identifier: 1x8aRRUtQZ7R40w9H9dAE7+AmUNrjajxHKsBViHjKtM=
Subject key identifier: 3C:B7:94:7E:47:3D:F2:9B:B7:5F:4F:6F:1B:D2:66:2F:90:29:CF:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4553CFF0D96D11EFA1B84459762E951A.roa
Signing time: Thu 23 Jan 2025 09:34:41 +0000
ROA not before: Thu 23 Jan 2025 09:34:37 +0000
ROA not after: Fri 28 Feb 2025 09:34:37 +0000
asID: 62240
IP address blocks: 154.194.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82160 (0x140f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:34:37 2025 GMT
Not After : Feb 28 09:34:37 2025 GMT
Subject: CN=67920d31-c7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:67:d7:0f:7d:3b:9e:e0:9c:53:32:cf:fa:2d:
c5:91:41:37:3a:71:10:4a:ba:0c:2a:61:32:91:84:
76:6b:a5:27:22:36:d0:16:bf:9e:03:49:a2:f2:4d:
3d:80:aa:c3:0f:cd:e2:fa:49:03:b3:91:9c:7d:c2:
fe:09:1a:bf:3d:ef:8d:54:d6:90:a9:71:b7:ff:c3:
5b:b6:e1:4a:6b:43:c7:87:cd:cc:77:e7:d8:46:38:
f5:7e:05:1f:2a:f7:fc:af:d9:93:f2:74:eb:9f:6a:
0e:57:82:22:da:4b:3c:c9:f0:dd:73:46:e9:35:8b:
22:9e:cb:07:e1:3e:8e:b7:11:5a:08:bd:26:c5:6f:
b4:d8:72:8f:bb:9b:10:55:2e:e5:4a:48:a0:2c:fe:
07:32:83:8e:ed:81:82:62:8e:e3:5b:02:a1:d4:aa:
2c:ea:19:f4:d0:25:0e:c9:11:21:1c:32:78:c7:e1:
e4:d9:79:5a:55:c9:3a:32:5c:1d:dd:3b:23:10:56:
fb:69:14:3f:ae:75:d2:fa:bf:a6:b3:95:df:d5:51:
3a:3b:08:db:72:24:18:86:21:89:65:d4:ae:00:14:
c9:e2:fe:f3:dc:35:55:c1:f4:94:78:65:78:41:48:
5c:67:09:11:a4:3d:dc:f1:4e:24:10:3c:da:41:e0:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:94:7E:47:3D:F2:9B:B7:5F:4F:6F:1B:D2:66:2F:90:29:CF:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4553CFF0D96D11EFA1B84459762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:46:88:f1:47:00:dd:77:a2:34:0f:88:e3:e8:9d:41:40:72:
6c:d1:99:76:e4:c2:8d:7e:94:0f:c9:72:ea:75:15:88:0c:80:
af:b9:42:29:6c:8b:0f:c8:6a:6f:1f:bc:62:90:2a:3d:d1:a1:
be:e4:26:9e:41:e3:ad:af:71:12:b2:d5:7d:82:a3:fc:cc:08:
68:a7:d2:97:80:cf:cc:a4:b9:25:fd:f8:00:66:8e:c9:03:7c:
11:1e:33:e9:af:19:7a:a0:44:be:ae:33:66:87:74:63:32:e9:
97:5c:1b:c8:dc:8f:d7:4e:54:1e:a7:80:89:51:30:ec:dd:a9:
7d:6e:ae:82:43:24:bd:d8:c0:b8:53:ab:d7:48:3d:82:52:bf:
33:23:0b:2e:26:31:9f:12:60:82:9a:64:bf:87:63:a9:72:c1:
6b:8e:3a:23:14:d4:4c:e1:b8:c0:36:98:23:6a:0f:64:3e:55:
f8:89:df:49:f1:1a:a3:ac:ef:45:86:12:66:ac:29:19:4d:fb:
ba:1b:41:ea:de:a7:1a:52:77:53:ce:a3:3b:25:95:a1:46:eb:
c1:80:86:b3:07:6d:4f:84:8f:f0:bd:ef:bb:40:8e:8d:cc:cf:
75:61:f3:d4:14:9a:90:18:49:f3:ce:17:13:50:0e:c3:33:2f:
15:b1:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:59 2025 by rpki-client