Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63AEE898D98811EF89AEFF8F762E951A.roa
File: 63AEE898D98811EF89AEFF8F762E951A.roa (raw, json)
Hash identifier: Z2ZpzEF/z2qFNvdq+o9qFMQbsabElN7Ig6jIJKgtUZg=
Subject key identifier: 03:81:55:F4:2D:FF:A6:49:CD:75:BF:6A:44:5F:0F:FF:97:2D:D9:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01423C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63AEE898D98811EF89AEFF8F762E951A.roa
Signing time: Thu 23 Jan 2025 12:48:48 +0000
ROA not before: Thu 23 Jan 2025 12:48:45 +0000
ROA not after: Fri 28 Feb 2025 12:48:45 +0000
asID: 62240
IP address blocks: 154.195.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82492 (0x1423c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:48:45 2025 GMT
Not After : Feb 28 12:48:45 2025 GMT
Subject: CN=67923ab0-8c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f1:df:42:1e:af:ed:0e:8a:1c:d4:f5:89:53:
a2:53:5c:5e:4a:c2:6a:fb:e0:53:ca:01:0f:c9:de:
af:d5:8f:57:0f:57:68:28:b6:7d:49:33:52:da:95:
c3:4a:23:93:70:22:e4:fc:21:c2:cb:80:07:56:50:
57:ce:80:1a:a2:33:87:70:4d:1b:42:4f:67:f3:c6:
f7:38:c8:ae:05:c5:19:84:aa:9c:92:71:d6:24:5a:
da:c7:33:48:c6:44:73:e8:6c:2e:2b:ed:48:58:6d:
74:97:8a:ef:46:2b:a0:2f:32:c1:2f:ab:ac:5f:2e:
32:7e:b8:ac:f7:23:c1:92:e6:d5:89:5b:31:c8:63:
49:4d:26:89:cd:f5:3d:d7:0e:02:01:6e:1d:1c:41:
25:d2:c7:82:96:17:f9:37:94:07:86:b0:00:41:33:
d0:ca:ad:ce:da:4c:cd:1b:97:df:21:d9:dc:04:16:
40:1c:f4:67:17:d2:16:9f:37:c1:50:fe:09:ae:e0:
ff:7a:a7:fe:97:d2:a5:65:ec:89:63:4b:73:ec:d5:
4b:1a:8c:f4:ad:24:91:58:4a:d9:8c:d3:08:32:ed:
98:1f:6e:42:18:29:37:b7:b1:84:bd:c2:51:96:21:
78:9e:33:25:df:8f:0a:43:eb:20:df:68:a5:95:e8:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:81:55:F4:2D:FF:A6:49:CD:75:BF:6A:44:5F:0F:FF:97:2D:D9:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/63AEE898D98811EF89AEFF8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.30.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ab:ce:62:50:2d:50:93:76:d1:32:49:bc:39:73:e8:2e:17:
a1:89:dc:6c:ea:62:c3:cf:c8:ea:66:8d:2f:8d:9d:90:7c:97:
ba:8e:c8:32:2a:0c:85:3a:ec:72:19:0d:43:51:32:98:8b:5c:
fb:ab:7f:ea:1f:f2:67:00:18:9d:85:91:0c:65:00:58:b0:d0:
82:bf:c0:c5:50:27:01:85:b3:a3:c1:c1:76:f0:3d:d7:ee:a7:
7a:cc:bf:50:87:06:57:a1:df:e8:81:5e:07:80:b5:82:fe:31:
d2:c2:83:f9:2d:a6:d9:8c:76:9a:13:6b:1b:2a:ee:67:10:cf:
be:c8:bf:a2:97:d4:d0:ee:e5:49:b6:f0:53:56:a6:0f:c5:59:
5a:71:80:43:cc:77:0e:45:7c:ab:88:6d:f9:cf:30:67:c6:6f:
ae:d9:10:7f:74:20:c2:d7:26:a3:1c:a3:0a:cd:f1:f7:35:6b:
c8:ae:58:02:7c:f1:40:f8:9b:0f:a7:30:3c:84:4d:da:97:7b:
58:d2:ee:b9:40:ab:04:9e:0a:0d:56:67:9d:f1:fc:3b:82:72:
4d:85:9b:a1:81:18:77:8a:61:02:c8:5a:ca:22:14:e7:9a:6b:
6d:60:27:17:5d:37:63:3d:42:26:4f:c5:a3:00:1e:f5:e0:79:
d8:9b:dc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:09 2025 by rpki-client