Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66791F24D98011EFB221355A762E951A.roa
File: 66791F24D98011EFB221355A762E951A.roa (raw, json)
Hash identifier: nimNyAohsfb2EaeTAxbWTzeuL02ZcY+HfsdwPkDtoBs=
Subject key identifier: 65:44:77:08:E0:D0:44:B2:32:20:41:7C:07:EB:74:17:1A:3B:29:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66791F24D98011EFB221355A762E951A.roa
Signing time: Thu 23 Jan 2025 11:51:37 +0000
ROA not before: Thu 23 Jan 2025 11:51:33 +0000
ROA not after: Fri 28 Feb 2025 11:51:33 +0000
asID: 62240
IP address blocks: 154.195.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82380 (0x141cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:51:33 2025 GMT
Not After : Feb 28 11:51:33 2025 GMT
Subject: CN=67922d49-0480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:7e:d8:74:64:b2:0b:d4:bc:52:83:ab:29:
2d:4a:7d:83:67:f0:a9:5e:88:fd:f7:84:a5:62:48:
31:54:1e:d9:3c:d2:56:98:db:5c:8e:f2:0c:8b:f9:
53:0d:52:6c:29:ef:14:82:c7:aa:66:45:d0:f2:e9:
77:52:34:3c:ea:64:89:e7:af:81:ce:52:30:cc:69:
40:c6:30:43:4c:ac:f9:d3:18:43:0d:a1:7c:fe:a8:
78:24:4e:d2:a6:be:07:57:d2:6f:f6:56:f5:ec:e6:
27:4f:34:b8:de:1b:b4:20:c2:62:96:94:d3:6b:d9:
b4:41:7f:8c:7e:90:af:b6:51:80:fd:22:02:ba:45:
0a:48:b9:d7:e1:49:95:86:d5:f7:e0:f5:0b:86:80:
76:18:40:2a:31:66:35:93:ea:f0:fb:18:f3:f8:70:
35:1f:20:0b:40:c3:77:5f:ee:8f:9a:25:1c:78:16:
a2:a2:f6:a7:f3:df:41:9e:8b:2f:7e:f6:02:d7:5a:
f9:53:0e:66:74:17:7f:86:1a:f9:63:0b:c7:85:83:
74:5d:84:1a:cb:c0:ab:4b:81:b2:47:3b:f6:fe:4c:
19:53:3c:02:c5:12:6a:f2:7f:81:ae:da:bb:c5:04:
bc:7c:6b:74:3e:f2:47:4d:e4:c1:84:2c:b5:d4:4e:
b2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:44:77:08:E0:D0:44:B2:32:20:41:7C:07:EB:74:17:1A:3B:29:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66791F24D98011EFB221355A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.171.0/24
Signature Algorithm: sha256WithRSAEncryption
29:dc:fd:43:fd:f8:46:2b:91:27:2d:ef:f1:3e:a3:61:79:7a:
6f:f8:8d:8d:d9:49:66:7e:96:2a:b8:af:7a:e7:3b:4c:97:c5:
81:a5:a1:07:34:b1:d9:d5:d2:79:7a:d8:ec:83:f4:16:09:88:
75:56:b9:04:76:87:34:92:83:55:31:5d:34:b7:05:87:e0:82:
a1:26:02:30:7b:73:39:36:70:15:e7:bc:eb:7a:ce:ec:a1:fa:
93:02:dd:1c:ef:e1:b0:ed:e2:0c:e4:18:a9:27:40:b9:22:b0:
d8:4a:67:7b:7f:e1:d9:cc:51:68:3f:6b:cd:09:d6:9c:75:31:
49:0c:b1:9e:07:2a:95:56:b6:61:7c:c6:b8:d1:fb:10:54:61:
9c:f8:d1:f1:85:ae:0a:91:6e:6a:23:9e:68:67:8b:f0:fc:30:
ae:ba:88:0e:3a:02:36:58:78:72:6a:24:ee:ad:cf:3d:89:e4:
62:a1:7f:33:64:5e:4b:67:04:23:ec:41:58:9d:55:e6:23:46:
d5:f7:38:28:b7:c7:d2:a3:89:f8:d8:74:f4:69:a9:7a:d2:d6:
35:32:4a:9f:29:2b:be:a8:e4:15:1a:db:0d:86:19:b2:0e:fa:
0f:1b:78:82:a1:5f:a0:42:b8:d7:db:36:db:00:93:b4:35:dd:
c1:a1:07:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:20 2025 by rpki-client