Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685C0D1CDA4611EF80E75592762E951A.roa
File: 685C0D1CDA4611EF80E75592762E951A.roa (raw, json)
Hash identifier: u52itbbdkcvPGhEvQTuZf2GtMCyen0/s2PkCRxVrqRk=
Subject key identifier: 16:16:CC:F5:12:A9:28:FC:06:86:BB:5D:AF:B8:B2:D8:32:AA:03:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01460F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685C0D1CDA4611EF80E75592762E951A.roa
Signing time: Fri 24 Jan 2025 11:29:01 +0000
ROA not before: Fri 24 Jan 2025 11:28:57 +0000
ROA not after: Fri 28 Feb 2025 11:28:57 +0000
asID: 62240
IP address blocks: 154.196.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83471 (0x1460f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:28:57 2025 GMT
Not After : Feb 28 11:28:57 2025 GMT
Subject: CN=6793797c-ffd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:d8:f5:aa:2d:28:f1:15:b5:f3:a8:71:c5:
95:31:c6:31:be:4a:3d:17:59:75:ed:5b:d8:8d:64:
8b:10:78:ea:ef:e7:a3:a0:5c:aa:65:8c:57:ae:c0:
09:e4:38:10:50:21:43:2a:97:22:28:b6:34:73:a1:
8a:31:1c:90:96:10:4f:d9:ff:e0:08:f0:81:b7:89:
8c:f0:a0:79:03:3d:f7:c9:b2:a7:aa:7d:ca:e9:e9:
d8:87:2e:5a:f1:89:e9:89:76:1f:a3:f3:60:a4:96:
db:7d:49:21:62:8c:6a:b5:0b:0a:40:38:64:9d:99:
22:80:5c:96:eb:af:85:5f:20:1c:fe:be:47:8f:5e:
cc:f4:00:4a:ba:eb:7b:4e:26:ec:c1:8c:4a:b9:48:
c7:8c:37:7e:01:01:97:cd:c8:a6:b3:11:d7:7b:44:
4f:77:a4:53:cc:c3:b5:b0:45:7a:22:62:a4:a3:e0:
d6:59:3f:86:ed:ab:a1:b7:54:b8:19:a1:60:74:96:
66:7e:1b:33:a3:61:4d:70:10:b2:a9:7f:45:f4:ae:
66:66:35:46:d1:76:09:54:61:92:01:61:21:14:cd:
43:f0:e4:3b:cc:8a:07:cd:fd:8a:34:ce:f1:7e:5a:
11:86:47:51:20:a8:f5:02:b1:a1:57:57:02:dd:8f:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:CC:F5:12:A9:28:FC:06:86:BB:5D:AF:B8:B2:D8:32:AA:03:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/685C0D1CDA4611EF80E75592762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.83.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3c:33:61:dd:f0:97:c3:7f:82:e3:8a:b0:79:e7:d2:0e:6c:
24:70:6a:dd:42:f1:06:ae:2a:f9:d3:6c:74:1a:46:78:d4:70:
18:7b:16:e3:47:cf:80:df:52:38:1e:4b:ce:a0:91:b6:0c:0c:
6e:00:00:c2:44:8d:ba:7f:30:65:69:06:5f:0d:8a:9c:f4:c9:
75:af:31:2a:d0:af:e7:a1:c5:11:29:ad:74:94:28:c6:37:d1:
f6:a9:3c:66:27:f8:1a:5c:33:7e:91:eb:13:67:89:83:d6:08:
dc:6a:aa:ef:83:af:2b:5b:50:eb:6d:8f:c4:80:61:27:dd:ce:
83:e1:af:dd:3c:ed:a4:81:3e:9a:49:2a:73:ed:27:d6:4c:79:
4c:df:cd:11:3a:ef:01:38:91:cc:66:bc:af:a1:82:99:70:69:
6c:71:12:8c:2b:d3:68:e4:66:84:fa:2b:9c:e3:c9:4c:df:d7:
d3:b5:a1:fe:50:35:85:de:e7:07:12:11:08:8f:cb:46:e7:d6:
9e:cd:a9:e2:8c:89:27:a4:2f:71:d4:a6:8f:71:db:19:ea:75:
13:c6:2b:9d:38:c6:46:47:df:96:f0:1d:b5:60:88:30:be:b3:
40:d7:4e:5f:43:22:6a:a5:4f:bf:0d:d8:f0:55:ca:93:5e:21:
70:28:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:48 2025 by rpki-client