Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4764D502DA3311EFA4A68890762E951A.roa
File: 4764D502DA3311EFA4A68890762E951A.roa (raw, json)
Hash identifier: 2lEcZxteBNRRcQsoS/uVV4QH5zd3i4+S/HO8+XKG5rY=
Subject key identifier: 65:CC:73:AB:D3:6A:61:12:EF:6E:29:0C:CF:1C:7C:44:E0:31:AF:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144C5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4764D502DA3311EFA4A68890762E951A.roa
Signing time: Fri 24 Jan 2025 09:12:05 +0000
ROA not before: Fri 24 Jan 2025 09:12:01 +0000
ROA not after: Fri 28 Feb 2025 09:12:01 +0000
asID: 62240
IP address blocks: 154.195.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83141 (0x144c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:12:01 2025 GMT
Not After : Feb 28 09:12:01 2025 GMT
Subject: CN=67935965-75c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9f:05:5b:f2:af:73:98:f7:b7:64:0f:82:7c:
ba:3a:ee:f1:35:4b:da:b4:d4:47:c3:a7:f6:c6:47:
26:5a:db:7b:87:2d:2d:a9:90:04:fc:a2:39:b4:3f:
5b:13:cb:c9:60:66:eb:74:32:71:42:27:70:53:7c:
e0:89:86:db:ca:dc:1e:b1:34:b0:b8:be:57:2a:26:
80:b4:99:ae:55:19:49:c3:04:44:96:88:2d:af:e5:
92:d3:a3:a1:ed:f3:fa:87:0e:be:f0:3e:44:4b:6f:
63:9d:51:0d:6e:af:ef:36:90:ce:9b:b5:dd:60:cb:
7b:54:8e:60:83:ce:63:f3:c0:31:28:bf:48:86:ff:
d0:81:fd:71:fa:ab:77:f0:c8:e5:4d:fd:30:73:da:
ff:fd:64:d7:19:b8:8b:3d:3a:a8:a9:d1:9d:71:68:
5e:cb:41:5d:13:14:e8:56:e6:97:d2:92:66:8f:ad:
65:1c:10:9b:5f:00:c3:95:73:7f:d8:cd:f9:10:5e:
10:59:7e:5e:35:7d:5e:61:7b:ca:c9:81:49:f3:42:
cc:f9:5d:af:a9:54:5f:09:3d:45:c9:2e:45:a5:f8:
72:b9:51:b8:42:a3:a5:0c:02:66:33:08:8f:8a:e6:
9f:e5:92:4b:89:8f:9e:03:e7:be:81:07:59:7a:b8:
52:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CC:73:AB:D3:6A:61:12:EF:6E:29:0C:CF:1C:7C:44:E0:31:AF:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4764D502DA3311EFA4A68890762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.147.0/24
Signature Algorithm: sha256WithRSAEncryption
29:16:ac:26:5f:71:18:21:bc:97:20:93:bf:14:fd:42:9b:6a:
46:54:de:f6:2a:5e:8b:27:a5:19:e0:f1:99:3e:25:c0:d7:a0:
69:6c:0a:53:42:0d:7e:ce:1d:ff:9d:5b:30:06:8f:eb:2b:42:
7f:83:91:67:8c:48:69:95:ad:3d:6f:cd:fe:bd:6b:14:40:6d:
34:21:c0:e3:d0:61:81:c9:53:1c:87:bd:63:7a:54:dd:9c:19:
c9:b1:ce:a6:6d:37:b0:bc:db:4e:b9:24:24:70:04:43:0d:37:
bd:b2:c3:3b:31:68:f5:e6:6f:ab:43:6a:cb:9a:cc:d6:cc:13:
6a:e3:ba:d3:e9:ce:10:e3:75:e7:90:35:9d:ef:26:da:fd:99:
8b:dd:fb:70:57:88:0e:da:7d:a2:56:56:1a:70:72:90:b9:dc:
4b:03:99:49:26:dc:f2:69:ea:d9:d7:39:7b:1e:6a:85:e4:7b:
4f:e1:d4:4f:45:5b:87:5e:a7:77:f2:c3:eb:f6:5a:f9:2e:3d:
72:ef:f2:86:51:bf:4c:79:75:bd:0a:34:97:86:aa:db:59:9c:
f2:6c:ad:b0:c5:2b:fa:9a:63:b4:1a:10:c3:30:21:af:ac:1e:
40:da:40:34:a0:70:4b:fb:4c:7e:b7:ca:a6:2e:c8:10:95:2e:
57:a4:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:29 2025 by rpki-client