Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BA9836DA3C11EFBEF65E4E762E951A.roa
File: 50BA9836DA3C11EFBEF65E4E762E951A.roa (raw, json)
Hash identifier: YLqpmvrH+ieeae2Cs0lfqb45pv8J+s43EdImmAjOrVo=
Subject key identifier: 5D:41:92:DE:7C:59:9A:A5:21:41:2A:6A:62:57:4C:AF:26:84:35:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01456C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BA9836DA3C11EFBEF65E4E762E951A.roa
Signing time: Fri 24 Jan 2025 10:16:46 +0000
ROA not before: Fri 24 Jan 2025 10:16:42 +0000
ROA not after: Fri 28 Feb 2025 10:16:42 +0000
asID: 62240
IP address blocks: 154.196.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83308 (0x1456c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:16:42 2025 GMT
Not After : Feb 28 10:16:42 2025 GMT
Subject: CN=6793688e-bcef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:1c:c2:cf:d7:36:ed:34:25:55:4a:6d:f7:
d9:a0:ea:5e:48:fd:70:0e:5c:22:50:84:7e:8f:8c:
30:5b:8a:18:5e:e6:02:39:46:25:ba:d7:94:92:d6:
5c:c5:f6:7b:99:3e:80:d0:36:1b:ad:7c:b0:e1:32:
7e:3f:13:47:0b:cb:10:47:a9:9a:d4:83:1e:91:97:
3f:f9:4a:0b:47:09:bd:fc:58:fa:60:0d:79:37:eb:
e1:fb:1f:c2:e4:2c:76:3e:c3:c7:a7:cd:36:45:c5:
23:f1:21:1d:2d:a3:d5:f3:c1:be:b7:b0:86:80:0c:
5d:4f:9b:ef:05:e2:6d:b5:d2:0a:06:3d:16:c4:28:
9c:58:4a:8b:1b:05:54:a7:2e:5e:30:5e:aa:59:76:
3b:ad:08:aa:13:65:00:67:51:be:1b:f5:4c:bb:51:
91:6d:6a:63:da:66:6a:c3:0e:99:29:f8:8a:f3:28:
1a:07:da:7d:9c:31:bc:85:fd:9f:4b:f9:0e:28:bf:
29:cc:a7:4b:d8:8b:b0:46:c8:7b:f4:6d:8f:9d:04:
02:c4:57:5f:16:52:bd:32:d2:2e:2b:21:75:8b:89:
4d:31:90:0f:93:b7:36:a3:92:df:a8:73:3c:0f:1e:
23:42:5e:e0:e9:1d:70:12:ba:7d:a3:95:3e:d7:8a:
1d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:92:DE:7C:59:9A:A5:21:41:2A:6A:62:57:4C:AF:26:84:35:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50BA9836DA3C11EFBEF65E4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.49.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:6a:bf:e7:96:72:c3:96:25:0b:07:60:fa:a5:e1:02:0c:53:
4a:c5:e1:9a:f3:db:c1:32:a1:45:71:93:11:8e:4a:df:b5:1c:
4c:4d:8a:08:0d:a2:7b:03:30:9e:df:7b:b9:34:ce:1c:2b:9e:
af:a6:b7:30:3c:7f:0d:0c:0b:f9:61:72:f2:dc:0f:f2:ff:fa:
32:8f:72:3b:e3:8c:07:94:96:6b:b9:d3:74:82:4d:48:86:c2:
ff:a6:69:20:17:15:8e:a7:2f:e7:c9:d3:a8:8c:ba:cc:45:20:
3f:e0:a0:41:a8:8b:b4:b4:86:f1:35:73:11:42:43:16:78:aa:
3a:65:de:d6:00:38:a8:53:a9:9d:09:44:e7:28:ea:a4:f2:29:
04:f3:65:7f:ae:81:f8:a6:9b:71:07:ea:0e:1e:4a:16:d6:9f:
b6:f2:4e:54:6f:ed:06:dd:93:b9:b1:e0:a1:57:b7:38:a2:3f:
27:db:20:57:9f:29:42:97:91:88:af:f9:56:af:90:29:db:00:
be:c0:de:17:56:50:d0:27:31:98:1a:c9:2d:08:cb:0e:53:46:
05:df:44:43:26:5b:a1:c1:20:b9:2b:d2:ea:96:86:14:84:e9:
52:a2:0e:f7:3a:b6:00:e2:27:22:4d:04:98:23:02:4a:45:fa:
4e:f8:f7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:35 2025 by rpki-client