Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6604D2ACDA4011EF80978B69762E951A.roa
File: 6604D2ACDA4011EF80978B69762E951A.roa (raw, json)
Hash identifier: qvPiIEUcotzL2CJx6pDSRwTjSxsxSY3IYP3lzQtNx68=
Subject key identifier: 9B:27:80:12:0F:DE:4E:54:DB:37:6C:1E:D8:E7:32:C7:10:BF:6F:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145B5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6604D2ACDA4011EF80978B69762E951A.roa
Signing time: Fri 24 Jan 2025 10:46:00 +0000
ROA not before: Fri 24 Jan 2025 10:45:56 +0000
ROA not after: Fri 28 Feb 2025 10:45:56 +0000
asID: 62240
IP address blocks: 154.196.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83381 (0x145b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:45:56 2025 GMT
Not After : Feb 28 10:45:56 2025 GMT
Subject: CN=67936f68-e7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:b9:1c:77:af:53:59:a9:ac:06:d7:64:43:
75:a4:01:ff:8c:75:53:72:5d:4f:8e:a0:eb:96:bd:
ed:8c:03:aa:45:6a:ee:bd:22:13:af:8f:53:57:09:
c5:ce:4e:1e:be:a1:97:5b:8f:e1:19:c2:75:6a:7e:
71:ec:4d:37:0e:e3:87:4b:e4:41:c7:af:eb:f1:49:
3e:69:11:9e:24:bc:ac:0b:83:29:3a:8b:fa:10:9f:
c0:9f:0c:04:0d:27:2a:60:3a:bf:10:13:2d:3e:11:
93:a9:c0:9c:73:f4:a3:28:8b:25:13:78:a0:8a:38:
7f:96:e4:e9:e7:b0:27:fc:ec:40:45:fb:31:fe:77:
fa:ec:de:a6:a0:33:5e:93:17:93:b8:a7:bc:75:d6:
2c:23:10:34:db:c2:b9:23:7c:7b:25:86:68:1e:fc:
56:3c:1d:41:00:d9:0c:c4:ef:17:89:94:33:66:af:
04:c5:57:1a:90:3d:37:36:7a:6f:03:db:3d:8a:58:
4f:41:4f:e6:3a:ee:4e:31:06:e3:e4:fe:f7:2f:72:
c4:6a:99:cb:2b:30:62:d8:58:2c:18:eb:09:d3:dd:
04:46:32:15:25:8a:d1:bf:df:ef:5f:c2:fc:c5:0e:
bf:63:f4:b2:86:c1:58:11:a1:3e:02:03:31:eb:53:
73:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:27:80:12:0F:DE:4E:54:DB:37:6C:1E:D8:E7:32:C7:10:BF:6F:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6604D2ACDA4011EF80978B69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ac:27:3b:aa:5e:79:0b:5e:4c:d4:ef:2a:a5:d4:08:a6:d1:
a8:45:ac:31:d2:ac:ac:96:23:1c:42:d7:66:b9:ff:db:41:73:
40:7f:80:49:0c:70:3c:cd:04:3c:3f:b5:e5:03:b4:f1:88:dc:
28:d6:d9:0d:a7:a1:c9:cf:b5:9b:c1:65:74:5d:ea:ea:6d:c7:
67:5b:c2:60:d6:79:0d:77:0a:3b:80:6e:ab:32:47:dd:d8:70:
00:2c:3a:8e:8c:d5:89:14:b2:54:79:41:2c:55:c3:84:99:98:
79:ab:8b:8e:4c:f1:03:0e:3e:0a:92:3f:fb:96:cc:d3:60:46:
4f:22:fa:2f:d0:8d:3f:c6:11:91:3a:83:b2:9d:7f:57:60:33:
aa:f8:45:db:3c:bb:8d:aa:7f:e3:e6:a4:27:95:38:50:39:9e:
0c:b5:f8:18:d5:8e:f1:96:de:d3:c4:a6:fe:70:9b:d1:42:58:
54:57:c8:bc:85:6e:ce:05:fe:76:01:1b:17:58:b6:ec:01:6f:
b0:88:39:a0:53:7e:00:a5:ea:3e:b9:a2:13:51:4a:aa:f9:61:
a5:03:aa:c3:89:d9:66:ca:e5:92:a6:b3:10:ad:b4:b0:a0:7f:
dd:85:20:46:e0:68:42:83:51:70:a1:8a:40:6b:09:f3:19:3c:
77:7c:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:18 2025 by rpki-client