Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD6F0F2D9CB11EFB7680B4A762E951A.roa
File: 6DD6F0F2D9CB11EFB7680B4A762E951A.roa (raw, json)
Hash identifier: +jNzS8/R8ynI8dusMRq+YZ/rqjEMQAE1gvfYUBFH3mg=
Subject key identifier: DE:52:4F:4B:E7:15:EC:08:39:E0:E2:76:CB:75:0D:0F:EA:2C:92:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD6F0F2D9CB11EFB7680B4A762E951A.roa
Signing time: Thu 23 Jan 2025 20:48:42 +0000
ROA not before: Fri 24 Jan 2025 20:48:38 +0000
ROA not after: Fri 28 Feb 2025 20:48:38 +0000
asID: 62240
IP address blocks: 154.196.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82662 (0x142e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:48:38 2025 GMT
Not After : Feb 28 20:48:38 2025 GMT
Subject: CN=6792ab29-8c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:6e:6e:78:c7:72:06:76:07:30:23:64:71:
ae:d3:d3:78:00:d3:f3:64:75:09:ba:6e:88:c3:00:
7a:fe:a5:2b:22:14:d3:7d:70:d9:c1:c2:49:04:cf:
e9:9f:9b:34:e6:81:7f:09:dd:e4:de:c6:46:c7:89:
40:f9:5a:6d:32:01:0a:75:0e:2b:81:ae:09:ec:a5:
1e:f7:c6:3e:48:ad:1b:0b:e8:ef:9d:8e:23:f9:b7:
9c:36:17:e0:c3:e5:87:bf:13:a1:4d:05:75:b7:6e:
b9:da:f2:a1:b3:6c:53:40:89:b1:16:08:a0:6c:c1:
9e:c7:c8:14:9f:b8:3d:33:b6:49:48:f3:59:9c:93:
f9:05:df:50:f9:eb:af:3e:7b:d6:fc:e3:96:be:4c:
12:58:64:de:ad:26:1b:72:07:eb:33:73:d4:fa:d1:
d0:f4:3d:01:dc:dd:8d:fa:6c:d1:6a:93:08:dd:0b:
3d:90:1c:35:d5:3e:c4:6a:59:c7:49:45:5b:28:0f:
c8:9b:15:eb:37:38:c7:c4:04:39:a4:df:cc:8d:f2:
32:6b:c6:9b:1c:e6:7a:fe:52:a6:6e:76:80:43:62:
14:94:30:dd:c3:36:af:0a:41:95:46:e2:be:28:d5:
07:21:97:2f:28:24:9d:10:d5:34:16:db:39:8a:a6:
67:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:4F:4B:E7:15:EC:08:39:E0:E2:76:CB:75:0D:0F:EA:2C:92:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD6F0F2D9CB11EFB7680B4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.63.0/24
Signature Algorithm: sha256WithRSAEncryption
86:4c:44:48:5a:77:6a:4b:d3:dd:07:a1:67:48:35:56:62:70:
d0:63:7e:7c:b2:03:ac:ce:a6:d0:75:74:48:35:56:f7:df:c6:
28:96:b5:eb:d5:b1:9a:df:77:33:ff:b8:6c:62:e9:34:02:1b:
97:35:1d:d2:13:75:b4:fe:58:98:b7:36:0f:d9:34:0d:89:84:
95:0a:c1:28:46:fe:6b:84:6c:56:8b:58:60:cc:39:58:d2:39:
10:c6:47:54:3d:8d:3b:90:66:4c:4d:7c:bd:63:87:97:6f:f2:
c6:ae:2e:14:8d:24:f7:fa:85:cb:86:ea:4c:0f:4c:9f:43:bb:
53:ab:71:22:9a:0d:d2:58:e4:d1:48:31:57:a0:f4:f5:ad:4f:
8e:3b:13:0c:b8:de:a1:3c:20:3e:a9:d7:7a:9a:2e:00:cf:6c:
3e:d5:96:80:af:e0:dc:47:3e:3a:3d:59:bb:36:b5:0d:db:d2:
f1:40:cc:25:83:3e:d5:1c:c4:13:86:fd:93:db:6b:fd:f8:b0:
0e:fe:f8:38:fa:1b:5c:99:25:5f:6a:83:9c:40:03:80:9b:36:
46:56:bf:35:e4:ef:5b:18:db:75:06:f6:03:dc:7d:3f:ce:4c:
60:83:7c:0b:60:a6:29:07:98:8a:d7:99:06:f8:19:e0:f5:0e:
1c:52:e2:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:28 2025 by rpki-client