Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F87BCB6D99011EF91247544762E951A.roa
File: 4F87BCB6D99011EF91247544762E951A.roa (raw, json)
Hash identifier: jCwjgAcevAya92LXiOSehnHUpiUToJFf3+0kJJHCTQA=
Subject key identifier: 37:EB:C3:B4:28:31:50:60:0F:FA:23:FE:52:5C:1A:03:B7:03:34:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014288
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F87BCB6D99011EF91247544762E951A.roa
Signing time: Thu 23 Jan 2025 13:45:31 +0000
ROA not before: Thu 23 Jan 2025 13:45:27 +0000
ROA not after: Fri 28 Feb 2025 13:45:27 +0000
asID: 62240
IP address blocks: 154.196.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82568 (0x14288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:45:27 2025 GMT
Not After : Feb 28 13:45:27 2025 GMT
Subject: CN=679247fa-2471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:7d:b3:c4:9a:03:2c:b3:e6:56:89:85:be:
e5:f3:4b:7f:86:04:df:33:ae:ca:a4:c0:8c:a9:49:
22:58:53:c2:4d:64:0c:e1:6c:81:66:60:31:92:bb:
57:c9:74:68:13:61:0a:1e:ed:f3:84:51:d9:10:77:
b8:9b:15:fd:cd:da:e9:39:0b:dd:09:d4:f2:e2:71:
9f:98:13:06:ee:cd:ff:9f:09:bb:08:1d:22:ab:e5:
1a:27:59:e3:d6:60:7b:06:d0:0a:1c:07:35:25:ef:
c1:29:c7:c0:ac:1b:fe:db:87:82:b1:46:18:1e:b8:
43:c2:06:2c:59:03:43:0f:36:89:eb:00:7f:1e:5e:
b5:cb:ec:8d:30:c6:b8:99:29:ee:9a:69:77:2c:34:
00:b9:94:84:c7:9e:9b:78:53:15:5e:18:c2:ca:e6:
41:15:53:09:18:01:e6:76:f8:84:dc:39:cc:ae:f7:
ea:fe:c6:21:9e:2b:99:8d:e2:b0:30:5f:d4:0f:58:
02:e9:89:84:d5:32:93:bc:26:07:4f:3e:d1:1a:48:
f4:c5:cd:51:46:0d:78:86:0c:80:34:63:7c:2c:1e:
45:87:2e:e1:ce:bc:7c:27:f5:5d:d4:64:c3:d0:3f:
c0:77:8b:e9:63:14:58:6b:a0:8f:e3:ac:27:eb:ce:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EB:C3:B4:28:31:50:60:0F:FA:23:FE:52:5C:1A:03:B7:03:34:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F87BCB6D99011EF91247544762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3e:d7:1a:d0:aa:ab:4a:26:69:d9:a3:95:58:c8:35:f9:83:
88:cd:da:fa:94:21:c0:2c:ff:ee:4f:27:30:5c:93:ee:f7:c9:
57:dd:10:c0:11:df:ab:16:0e:bb:90:bf:9e:4b:f5:ae:88:e8:
c6:d5:a1:ac:7e:f5:a7:bd:a3:a0:b6:68:15:6a:49:99:15:54:
88:51:18:45:4e:7e:0d:cc:94:35:78:78:95:86:96:56:ed:41:
96:a3:7d:ef:51:a9:69:f9:e6:9d:a6:65:5f:08:a3:5c:cf:64:
b5:1e:9a:b8:45:c7:43:02:00:67:8d:0e:27:67:d5:50:27:51:
92:a7:c9:5a:79:6f:37:1f:00:e4:59:e3:35:60:a8:69:ed:0e:
f4:ce:1b:2d:bc:90:e1:a7:5e:25:8a:82:58:34:76:fc:bf:bc:
8d:c6:95:d8:84:28:d0:67:40:c9:e1:7a:6c:a1:4a:fd:24:33:
40:b7:67:85:af:b9:b2:58:89:21:c7:0b:79:07:f6:b0:c7:23:
de:5d:ff:be:69:89:1d:9c:df:78:9c:1f:d0:e3:30:ee:ba:00:
b2:a1:52:37:ee:79:4e:94:1d:44:9c:f3:f0:85:eb:76:70:58:
9d:cd:21:80:e4:c5:f9:42:ac:9e:42:d3:82:cf:e3:6b:e8:18:
44:e5:33:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:51 2025 by rpki-client