Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65BDDC58DA3611EF80AA21A5762E951A.roa
File: 65BDDC58DA3611EF80AA21A5762E951A.roa (raw, json)
Hash identifier: kN2hpJZeS/aqvqOaAjBc3VNjpQCMUXtAybyrM4F7aL0=
Subject key identifier: 77:CD:65:DF:4A:EE:EA:0B:A8:34:1D:34:E3:77:0B:CE:44:68:F2:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65BDDC58DA3611EF80AA21A5762E951A.roa
Signing time: Fri 24 Jan 2025 09:34:24 +0000
ROA not before: Fri 24 Jan 2025 09:34:21 +0000
ROA not after: Fri 28 Feb 2025 09:34:21 +0000
asID: 62240
IP address blocks: 154.195.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83196 (0x144fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:34:21 2025 GMT
Not After : Feb 28 09:34:21 2025 GMT
Subject: CN=67935ea0-78dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ff:80:66:fb:a7:ce:0f:ef:eb:21:eb:7e:1c:
b8:f1:32:f1:f6:f5:2d:93:b5:51:03:e8:1c:f2:3a:
e8:61:ff:05:37:aa:65:03:7c:29:83:50:bd:00:4c:
77:66:b1:5c:47:db:0c:1a:26:87:27:af:d3:d5:e5:
fa:f7:bf:42:4e:76:18:d5:c1:de:2f:66:f8:30:7a:
d6:43:78:58:cc:98:b5:2e:01:71:43:09:e3:a8:90:
38:5d:ab:74:66:bd:bc:b0:26:f5:75:a1:35:81:19:
d5:a6:25:fd:a0:c4:ad:92:09:9b:f4:da:7c:8b:80:
53:64:1f:e5:8d:50:0e:e9:e3:b9:84:85:b7:4f:3f:
5d:41:47:01:89:cc:8e:66:14:e9:86:f9:fd:c7:c9:
0e:d3:8a:66:73:0d:1a:86:5e:49:98:07:fe:78:24:
7a:61:4c:73:e8:56:1f:dd:16:02:d3:a3:0a:c1:32:
a4:3c:2d:0e:8c:12:ed:cc:5a:3a:94:80:fc:8b:18:
09:9e:ba:e0:e5:d0:c5:92:94:a8:c1:ce:04:78:6d:
1f:f0:20:c7:d1:cd:4a:ff:ad:e7:95:8b:2a:f6:a8:
68:9b:cd:e5:85:e0:25:17:3d:c1:42:47:47:71:2c:
e4:66:0c:4f:77:47:86:4f:35:9d:38:8f:e2:52:4b:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:65:DF:4A:EE:EA:0B:A8:34:1D:34:E3:77:0B:CE:44:68:F2:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65BDDC58DA3611EF80AA21A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.31.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:c7:31:54:74:1f:47:5e:7b:af:42:9f:61:4c:74:70:03:83:
a8:73:f0:14:42:50:f7:a2:4e:2e:3b:67:df:ab:bc:0f:76:d5:
d3:72:15:3b:a0:f7:01:69:5d:0b:ac:93:3a:8b:af:98:30:ff:
fb:99:37:a0:8d:c1:d4:35:cd:ef:b1:ec:1f:5b:e0:fb:5b:f6:
28:11:69:42:b5:9c:85:0a:fc:e5:d4:0b:73:4c:db:8e:c9:df:
d4:4f:20:7c:b0:dc:a2:c6:8f:44:64:a9:03:50:90:1f:14:de:
d6:02:90:95:ea:5d:a7:65:59:ad:c4:bf:2b:6c:76:04:12:10:
58:6c:29:5f:75:61:37:83:09:f6:ad:97:41:ce:96:01:2f:6d:
14:d9:6b:f6:fc:fc:ce:0e:ef:9f:fc:5c:40:f0:55:aa:a6:96:
16:15:70:7b:09:60:21:ca:bc:fe:62:80:5f:ff:d2:72:1a:3d:
fa:77:f1:35:09:16:cf:fe:fa:e2:81:f5:08:ff:f5:17:d0:74:
c7:e7:e9:97:da:29:88:8c:4b:91:9b:c7:cb:77:57:47:46:af:
3e:31:20:e9:eb:4c:8d:39:30:38:e1:67:85:99:c3:f1:b4:e5:
5c:b1:0e:f4:09:ab:1f:1e:53:62:4f:cc:2e:b1:09:48:3f:b7:
a0:97:10:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:46 2025 by rpki-client