Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CFE91E4D98611EFAE0E6082762E951A.roa
File: 5CFE91E4D98611EFAE0E6082762E951A.roa (raw, json)
Hash identifier: gMlkQcvCg5YRBv1d/aOgIjQa+esVMB4aeR5a3trcIpE=
Subject key identifier: B6:A0:25:58:74:FA:0B:28:EA:C9:90:50:6F:6A:9F:D3:BA:14:24:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014226
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CFE91E4D98611EFAE0E6082762E951A.roa
Signing time: Thu 23 Jan 2025 12:34:18 +0000
ROA not before: Thu 23 Jan 2025 12:34:15 +0000
ROA not after: Fri 28 Feb 2025 12:34:15 +0000
asID: 62240
IP address blocks: 154.195.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82470 (0x14226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:34:15 2025 GMT
Not After : Feb 28 12:34:15 2025 GMT
Subject: CN=6792374a-291e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:c8:4d:6d:f3:37:89:d5:d8:f9:ae:a1:13:
63:48:44:32:08:7f:6d:0f:0d:ab:94:29:a3:90:cd:
ce:13:76:5f:0e:5e:79:bc:13:f0:84:60:bc:54:b8:
08:3f:f0:eb:dc:a7:80:55:63:21:99:be:e0:76:4b:
42:c4:a7:e7:8c:76:de:a9:54:da:7c:fc:a9:9c:93:
a7:0c:3b:4b:4d:5b:10:cc:88:af:6f:a6:3a:b0:86:
5a:da:91:44:58:0e:56:22:be:02:07:fa:c2:de:d6:
05:f3:b3:c4:10:9b:d0:01:fe:d4:72:6c:d3:68:ba:
14:32:47:8a:87:51:79:31:e6:63:90:15:10:b6:6b:
dd:34:ec:fb:a6:be:ac:47:55:37:ae:12:8b:73:97:
fb:ed:29:3c:85:f0:e6:43:b3:bb:3d:e3:a7:ad:94:
d9:d2:c2:28:ab:19:2f:1f:0a:a8:4b:5f:71:9e:f3:
e4:5d:75:53:14:5f:86:72:77:68:62:7b:43:d0:6f:
8e:fa:52:5e:54:88:7b:45:ea:54:44:c0:5d:2c:ba:
17:be:3b:b2:22:dc:96:c6:7e:2e:d6:31:16:45:57:
ce:ec:6f:b4:ee:72:3e:e1:5e:9c:67:be:dd:b0:e1:
17:26:c2:dd:c9:c3:c5:d1:88:3b:f4:db:c4:3d:c2:
b4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A0:25:58:74:FA:0B:28:EA:C9:90:50:6F:6A:9F:D3:BA:14:24:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CFE91E4D98611EFAE0E6082762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.22.0/24
Signature Algorithm: sha256WithRSAEncryption
37:3f:88:e1:56:62:e8:da:16:da:57:3c:40:2c:a7:d7:7c:d1:
c1:dd:96:f4:d4:ae:78:5f:d5:ac:2a:89:9d:ea:9a:8d:24:98:
a0:6c:f4:d4:df:c6:b0:19:26:76:70:2c:70:a4:7a:87:ef:0c:
51:1d:2c:cf:82:a0:6a:f2:1f:2f:44:50:e5:cc:ad:7f:40:a5:
b8:0f:88:53:de:78:17:d4:de:87:dd:bc:37:2b:f6:07:04:73:
ad:16:f8:44:47:da:9d:d1:c0:34:de:1f:9d:00:d3:a6:64:66:
ad:d4:63:f7:7b:3f:a2:fa:c5:6a:30:e6:c7:cb:e8:b7:33:40:
36:f0:2a:47:09:f7:9a:26:df:ec:0c:e6:7f:bb:24:ae:d4:4c:
7b:3e:e1:9e:c8:a0:d9:47:38:7f:d8:25:9a:51:ce:7c:77:7e:
9f:62:5f:a2:9f:25:76:36:93:21:07:62:80:e6:67:e8:be:f4:
87:e6:81:06:18:3e:b2:a8:a1:0c:ae:bb:bf:d8:fd:f0:10:5e:
74:a9:b0:ad:dd:3e:fa:b4:20:b4:65:26:09:54:17:29:7e:11:
14:cd:e0:e7:03:5a:bf:6e:84:e9:34:f7:22:87:1a:b5:99:0e:
ee:6e:dc:aa:09:52:9a:15:e5:2f:1a:e0:98:44:ad:72:3e:f4:
0e:9d:3e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:09:21 2025 by rpki-client