Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/495C7084D97711EFA4B9BF9C762E951A.roa
File: 495C7084D97711EFA4B9BF9C762E951A.roa (raw, json)
Hash identifier: gyvnLvi2J8DltLQ38V7vYg5K1JChcaaFsCnYKl631Hw=
Subject key identifier: 18:47:BA:71:F9:35:D9:12:2C:E1:94:3E:3A:B1:8F:7E:49:4D:C7:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014149
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/495C7084D97711EFA4B9BF9C762E951A.roa
Signing time: Thu 23 Jan 2025 10:46:23 +0000
ROA not before: Thu 23 Jan 2025 10:46:19 +0000
ROA not after: Fri 28 Feb 2025 10:46:19 +0000
asID: 62240
IP address blocks: 154.195.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82249 (0x14149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:46:19 2025 GMT
Not After : Feb 28 10:46:19 2025 GMT
Subject: CN=67921dff-880a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:82:4a:df:e0:f1:d0:c5:9d:0b:41:4f:e4:7e:
d2:38:3f:8a:05:12:52:f2:3b:a1:cc:58:a1:76:09:
d2:21:94:e3:2d:25:b0:13:eb:b8:79:a1:c8:1e:80:
af:dd:6b:7b:a8:c4:c9:73:27:71:5f:e7:b3:b6:4d:
94:a5:6d:e2:cf:d2:6a:38:73:78:49:bc:6b:aa:2c:
40:93:94:52:9e:f6:df:f9:ab:e5:97:8b:df:74:fd:
c8:2f:3a:f7:a1:f8:58:3b:9c:ad:e6:03:b2:da:d5:
34:9e:bf:4d:6e:bc:64:0b:4d:2c:08:bf:6a:fb:5e:
76:d9:04:4d:79:01:1f:15:01:b2:21:57:53:78:8f:
b3:d0:e0:8d:9f:c8:33:5f:84:ab:5b:01:27:63:b7:
38:a5:42:be:6f:fb:e6:b9:f9:af:94:8a:c0:dd:e8:
e3:66:5d:c0:32:a3:ad:11:41:01:15:82:b3:4c:e4:
27:fb:61:2c:fb:1a:4d:08:d1:45:90:e8:35:72:77:
df:c8:d5:98:62:37:be:11:86:09:38:ee:b0:6f:fd:
cd:85:02:5e:7f:2f:e7:2e:b5:a6:28:2d:bd:7b:28:
65:04:01:33:8c:15:4f:74:3c:20:11:62:9c:37:63:
c7:7f:a9:c7:ad:24:ce:4d:49:e9:25:26:28:ed:59:
0f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:47:BA:71:F9:35:D9:12:2C:E1:94:3E:3A:B1:8F:7E:49:4D:C7:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/495C7084D97711EFA4B9BF9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.135.0/24
Signature Algorithm: sha256WithRSAEncryption
72:cc:3d:6c:ba:59:36:64:90:80:ea:14:dc:72:1a:a4:2e:d5:
6b:59:3a:c4:95:fc:0b:66:ec:83:d4:06:00:47:01:9c:24:81:
e8:3f:e5:32:4d:f7:6a:43:c7:a4:4d:d6:f9:56:dc:01:10:a6:
82:d6:af:93:94:e2:a7:e7:43:51:ad:cb:ff:e9:06:d9:df:4f:
b1:3d:8a:2f:2a:6a:22:53:ae:b5:04:b0:99:26:46:05:dc:e4:
75:0b:0a:e7:1c:88:be:e2:6a:a1:38:98:e2:54:97:b4:a5:b9:
46:29:b2:39:40:34:6e:0c:f1:9a:09:66:97:6b:6f:4d:a0:2a:
da:4f:87:1a:6f:49:b6:01:79:71:ad:6a:a8:fa:ba:6f:ea:4f:
19:a8:2c:45:d0:8b:35:18:44:c2:69:78:a2:ae:4a:98:44:74:
31:58:06:ca:44:12:04:b5:2a:ad:c1:d3:29:7d:59:90:b6:86:
31:f2:83:27:ff:73:c8:63:7c:fd:10:6e:26:53:63:72:0c:eb:
2f:07:c3:97:b3:e8:fd:62:5a:18:b5:7c:2b:ff:52:c2:9f:4f:
dd:01:c9:18:1a:93:0a:78:9b:fd:55:b6:38:f6:23:31:96:21:
a5:f9:7c:69:32:76:92:44:30:69:1d:ed:1e:85:ef:29:c0:ce:
8a:e7:e7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:16:51 2025 by rpki-client