Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEB2BB2D96F11EFAC0A0967762E951A.roa
File: 5BEB2BB2D96F11EFAC0A0967762E951A.roa (raw, json)
Hash identifier: bOSkK1+vZITNztHSCqYK5A7QAY+mAttIzwnHf5HPnm0=
Subject key identifier: 77:E4:B2:77:F3:56:34:AE:1E:37:82:9D:83:A5:E8:3E:A2:D6:1C:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014100
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEB2BB2D96F11EFAC0A0967762E951A.roa
Signing time: Thu 23 Jan 2025 09:49:38 +0000
ROA not before: Thu 23 Jan 2025 09:49:34 +0000
ROA not after: Fri 28 Feb 2025 09:49:34 +0000
asID: 62240
IP address blocks: 154.194.122.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82176 (0x14100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:49:34 2025 GMT
Not After : Feb 28 09:49:34 2025 GMT
Subject: CN=679210b2-03c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:dd:39:d0:9b:c7:7c:df:a5:bf:c2:7f:3d:
84:e6:cf:1f:43:86:f5:da:0a:85:d5:30:2d:8d:74:
83:44:3c:24:6d:b2:06:1b:40:46:44:e7:d9:80:ae:
52:cc:7a:c2:7a:62:5b:d7:2d:70:6e:f4:ad:13:80:
89:47:30:40:8d:76:67:ed:48:0c:8b:0c:bd:77:93:
a2:1a:3c:70:9c:10:94:33:4f:ed:35:37:ef:1a:0f:
9e:cf:a7:f3:ba:96:52:8f:70:54:40:73:c6:eb:93:
39:9e:cf:e2:9d:ed:b4:d7:42:6e:88:0a:2a:3b:e6:
b4:e7:ec:e8:f3:f3:b9:bb:a0:23:37:48:bf:96:c3:
8f:bb:8f:64:b5:d2:8f:72:8c:90:bf:e1:f4:5f:c6:
cd:91:a8:42:e1:16:59:c9:77:39:92:bb:71:1b:6a:
01:9f:a8:8c:8a:39:56:9d:ed:bd:6c:3f:71:12:07:
58:02:ba:c6:57:4e:52:9c:c0:0c:49:d1:47:e3:8b:
e7:b9:de:a8:02:ac:2d:06:05:cd:9b:ee:56:40:77:
b6:c2:42:c0:7c:c5:a4:02:db:a3:5b:df:59:69:6b:
af:57:a6:19:1d:87:2d:d2:10:d4:f9:11:03:6d:35:
b0:9b:2c:c1:ce:e5:7f:3d:a6:81:15:19:02:15:df:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:B2:77:F3:56:34:AE:1E:37:82:9D:83:A5:E8:3E:A2:D6:1C:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEB2BB2D96F11EFAC0A0967762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a1:fb:1c:3d:cf:7e:2d:9c:a2:95:12:bf:c1:2e:ae:af:ba:
f0:7c:e9:98:28:08:c3:e5:b1:7c:df:b0:98:16:bb:60:0b:bf:
31:4d:93:fe:1a:f5:36:38:0b:52:82:29:53:b2:2a:5c:94:d4:
80:45:a4:52:c3:a4:95:d8:22:d1:00:3e:54:45:1d:88:ed:2e:
c8:5d:1c:50:5e:66:1c:eb:df:5f:1f:0a:a6:f9:f9:11:3c:99:
61:fc:96:72:12:17:da:07:88:2e:4b:c0:d7:db:87:43:b0:23:
82:ac:3a:e2:8d:9c:ca:76:9a:88:f8:ca:ca:50:dd:05:45:18:
44:de:c6:8e:e4:0c:39:d4:37:ad:f2:07:13:2e:09:6a:4d:db:
99:2c:84:de:1e:4b:05:d0:21:aa:ba:df:7e:ef:57:15:6d:b1:
63:82:fd:15:a9:f1:5c:e6:78:ce:02:dc:c9:f3:5c:5d:40:39:
1f:8e:c8:39:70:61:ef:84:6c:be:3f:63:0a:72:ff:d3:10:76:
f0:3c:b3:3f:05:83:4d:51:75:00:74:78:e3:5a:2a:67:4a:ff:
21:f8:bd:77:49:71:71:54:f5:94:6a:ca:2b:64:2f:29:c1:af:
66:17:4b:d9:d9:3a:2e:b5:75:3f:3f:0e:73:07:c3:f8:71:6c:
28:b8:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:06:16 2025 by rpki-client