Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC8D34EDA4511EFB8AE9489762E951A.roa
File: 4AC8D34EDA4511EFB8AE9489762E951A.roa (raw, json)
Hash identifier: xefFvf1LD/IXOP38cCJsr/x5B4BD55MUO776vToL9b0=
Subject key identifier: F5:AE:C1:64:07:61:5F:E6:56:27:E6:DD:D2:DD:A8:BB:C3:1D:1D:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014602
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC8D34EDA4511EFB8AE9489762E951A.roa
Signing time: Fri 24 Jan 2025 11:21:01 +0000
ROA not before: Fri 24 Jan 2025 11:20:58 +0000
ROA not after: Fri 28 Feb 2025 11:20:58 +0000
asID: 62240
IP address blocks: 154.196.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83458 (0x14602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:20:58 2025 GMT
Not After : Feb 28 11:20:58 2025 GMT
Subject: CN=6793779d-98e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:30:2a:61:49:68:3c:88:f2:b8:5e:3f:27:0f:
f9:4c:2e:d2:94:cf:f7:c6:9f:14:ce:07:f4:91:4c:
6c:de:c8:05:69:09:73:55:a2:dd:36:d9:e7:48:7b:
f9:df:45:af:34:42:44:4d:42:9b:31:86:fb:88:d6:
f6:d0:89:db:01:37:3b:14:ac:30:85:a5:52:db:1a:
aa:3c:c5:be:c9:f8:64:fe:6c:d0:1e:9e:98:f9:d0:
40:f7:47:bc:6f:2e:df:e8:6e:f5:91:03:fd:07:44:
09:e7:a1:ad:08:de:1f:f5:51:c6:c1:09:dd:b1:d6:
14:aa:5f:c1:bb:2c:a4:15:41:eb:e4:6b:fd:32:74:
e4:dc:b6:6e:da:17:01:d5:fe:76:ae:21:fa:b9:5b:
a2:45:b1:58:cf:a7:c3:6d:89:e9:47:8d:ed:f4:23:
48:69:77:c5:00:b9:3b:c1:89:bf:3e:c1:01:61:36:
e1:91:cc:6a:86:32:a7:04:ad:fa:9a:29:58:43:06:
90:8d:d2:dc:e8:dc:77:4c:11:3f:21:a0:5f:ad:42:
60:2a:bf:34:5b:7b:d1:26:58:84:39:c1:3f:bc:cc:
af:ba:0d:69:83:e0:a0:85:2e:10:e7:be:8e:2c:69:
ca:d0:e8:61:74:2e:51:ce:f4:ea:53:82:4f:12:1b:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AE:C1:64:07:61:5F:E6:56:27:E6:DD:D2:DD:A8:BB:C3:1D:1D:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4AC8D34EDA4511EFB8AE9489762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f9:f5:db:3b:28:0f:a2:7b:31:1a:c8:37:34:60:25:c0:17:
e0:8b:57:92:91:4c:43:b4:7d:dd:1d:4d:bb:75:f4:59:cc:55:
3c:29:85:9e:22:0b:1f:d5:f2:0e:87:6a:da:e6:21:d1:20:85:
64:e5:3d:f7:f3:3d:2c:ee:c5:08:e8:57:b9:f9:75:1e:c0:a2:
a2:27:ec:3a:30:37:a2:1d:2c:57:89:34:87:0f:9d:58:0a:77:
f7:6c:3e:5e:9b:7f:94:e9:34:32:c0:f0:68:f7:7e:75:50:45:
17:98:13:46:3c:43:e8:d7:eb:e8:64:0b:9d:99:fd:9d:51:b0:
ee:8b:9e:01:62:83:74:0d:d4:89:ac:26:b3:a8:dc:d5:a6:95:
a2:db:52:cb:82:9c:05:da:8a:4e:6c:bb:f5:d1:b7:ff:cf:ff:
6f:af:61:3f:66:dd:9e:b2:23:02:d2:bb:48:a1:7a:a7:d3:07:
84:72:64:3a:de:dc:b4:51:4d:99:be:45:74:9c:f6:ec:34:da:
68:6e:b5:50:84:fa:8f:13:35:34:6a:16:ec:c1:3d:95:f7:ec:
f5:3c:69:90:26:fc:6b:cd:e6:19:f3:56:ce:5b:68:9f:02:39:
c8:a2:79:48:cf:6e:95:9f:b0:cb:cd:6e:66:c5:33:b5:5a:1d:
89:9b:14:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:46 2025 by rpki-client