Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B7C74ED9D311EFA098487D762E951A.roa
File: 52B7C74ED9D311EFA098487D762E951A.roa (raw, json)
Hash identifier: 9gRS+1Tn8fyzEzv/cdJrAxS7qYpHecSqpZNKtniuShA=
Subject key identifier: 65:2D:98:33:EE:C1:57:03:B3:0C:6A:C5:BC:E3:3F:76:58:56:18:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014321
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B7C74ED9D311EFA098487D762E951A.roa
Signing time: Thu 23 Jan 2025 21:45:12 +0000
ROA not before: Fri 24 Jan 2025 21:45:07 +0000
ROA not after: Fri 28 Feb 2025 21:45:07 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82721 (0x14321)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:45:07 2025 GMT
Not After : Feb 28 21:45:07 2025 GMT
Subject: CN=6792b868-b40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:e1:8d:41:ca:68:cb:c6:ff:ba:72:6e:c0:
b5:c5:04:8f:ea:f1:c0:e8:25:ae:9a:73:27:43:3f:
2a:9a:85:fd:4b:67:d7:39:0b:66:70:2e:4a:ff:f6:
57:7d:d6:65:9c:cc:a6:ab:73:1c:c8:a4:62:28:80:
c4:66:52:87:74:08:39:7c:b9:88:29:30:47:52:6e:
63:6a:00:d5:01:e2:6c:90:f5:76:da:25:d7:15:e9:
9c:b0:8a:7b:53:d9:a4:88:58:3b:19:2a:e5:2f:2c:
63:47:ca:4e:8b:c3:54:84:30:3f:cb:ae:67:78:5a:
e6:e1:3a:ee:e8:3b:b8:15:b8:d8:ee:d8:c6:62:5b:
8e:74:e2:c2:79:96:86:21:4e:26:53:78:8f:7c:16:
83:78:d6:fc:d2:79:e7:8d:de:07:aa:6c:0d:60:0a:
54:fe:5d:d3:17:01:bc:5b:63:03:a9:16:42:ad:eb:
8e:c8:a6:8b:94:d0:60:b3:fd:83:97:91:dd:bb:93:
ba:63:74:e1:a9:0a:5c:5d:71:4f:69:fc:0c:a5:f3:
39:4f:5d:b6:76:36:68:05:ad:00:f7:c6:e3:c6:0c:
23:aa:b8:b0:20:79:bc:ac:47:61:89:05:06:01:a4:
93:32:4b:18:b4:4d:d6:67:6a:8f:06:15:37:cc:53:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:98:33:EE:C1:57:03:B3:0C:6A:C5:BC:E3:3F:76:58:56:18:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B7C74ED9D311EFA098487D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:5e:a9:47:bf:6d:28:15:32:ee:a1:aa:f2:6a:9f:f1:29:13:
10:00:4d:5c:4c:b1:f6:28:7d:fb:a6:8b:17:ae:ac:bd:0c:1a:
3b:02:13:5a:0f:77:c4:6e:6b:a8:0a:48:9a:de:c1:44:86:7e:
4f:79:3e:f9:cc:4d:2e:ba:9a:17:a4:bd:27:ad:a8:0c:8b:40:
9d:88:89:64:b1:1f:58:8a:92:8a:21:24:3f:b6:6d:f9:e1:27:
c6:c0:48:56:45:0e:ab:05:56:64:f7:a9:93:ff:39:ce:b3:30:
eb:57:06:e2:ef:da:a8:d7:30:b0:b7:08:f8:c7:f7:f2:d3:8b:
53:e1:c7:eb:09:b9:88:bb:1b:ef:6b:35:a9:e4:9a:f4:85:ec:
df:db:2b:73:d1:96:36:b1:f5:0c:d3:bc:f6:a7:26:35:d5:f6:
7c:a0:f1:cf:31:49:b2:b6:ec:9d:fd:7a:fa:db:ce:38:74:12:
a8:db:66:88:ff:b8:51:d1:15:7a:48:e3:11:e3:87:9f:e4:39:
d6:31:82:fb:9c:2e:25:c9:e7:7d:38:33:ac:c7:5b:38:69:e4:
6b:e1:d7:4e:65:cb:18:80:19:07:a7:e7:84:a5:24:8e:68:28:
ef:71:12:65:b0:74:05:e5:00:bd:17:c7:61:f9:0b:22:60:e6:
e7:ee:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:20:20 2025 by rpki-client