Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703575B0DA3B11EFAE31B947762E951A.roa
File: 703575B0DA3B11EFAE31B947762E951A.roa (raw, json)
Hash identifier: YIJzcDKY+9PXMtJ2kaexJc7NdhYpKRySbAMo5B3Tgns=
Subject key identifier: ED:AF:BD:B7:9D:39:2D:D7:65:AB:3F:B2:41:38:37:A8:9A:78:3D:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014558
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703575B0DA3B11EFAE31B947762E951A.roa
Signing time: Fri 24 Jan 2025 10:10:29 +0000
ROA not before: Fri 24 Jan 2025 10:10:26 +0000
ROA not after: Fri 28 Feb 2025 10:10:26 +0000
asID: 62240
IP address blocks: 154.196.45.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83288 (0x14558)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:10:26 2025 GMT
Not After : Feb 28 10:10:26 2025 GMT
Subject: CN=67936715-2e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b9:1d:91:83:c3:06:28:65:c8:44:88:67:d6:
60:10:83:1c:35:b9:6d:03:f3:9d:65:a9:c6:aa:9e:
d1:10:be:ab:44:e6:f0:6d:b0:86:2f:dd:8a:c4:e5:
44:4d:ac:a0:08:a2:22:38:dc:fd:54:39:bf:65:7b:
de:dc:cd:57:6a:59:bf:ca:30:d0:d7:a4:1e:b3:86:
d9:ac:35:bb:76:34:42:ba:f0:f0:d7:55:62:7f:b5:
a1:29:00:1b:ad:08:a0:ee:35:31:7d:6f:2a:ba:dc:
ea:18:bd:9b:64:0b:88:54:d2:7e:ae:a9:c6:1e:2b:
f8:47:42:48:b0:29:03:3d:1c:9b:38:9d:99:f9:9b:
a3:a3:28:1d:27:74:3e:cf:e5:97:51:26:8d:95:e5:
64:ed:2f:08:aa:e2:55:ca:10:8e:35:6e:3d:87:b2:
6b:62:41:95:be:e3:f7:55:fc:b6:db:b0:88:4f:3e:
40:55:91:f6:0b:62:34:32:49:9e:72:56:c7:f2:0c:
fd:88:cb:63:81:c5:6e:a9:71:89:49:66:b8:be:18:
15:12:46:89:c3:2e:2b:a3:bf:6b:e5:04:fa:f3:40:
17:ce:f0:fd:4f:e7:ab:60:b6:21:0c:2a:b8:da:6c:
a4:a5:bb:84:73:a5:64:f4:40:b6:53:da:cc:17:c3:
f9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AF:BD:B7:9D:39:2D:D7:65:AB:3F:B2:41:38:37:A8:9A:78:3D:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703575B0DA3B11EFAE31B947762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.45.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:bb:27:ee:f8:f9:07:32:22:42:99:51:0e:79:ee:15:4d:81:
b6:e2:be:4c:a6:6b:e2:d2:30:95:c1:99:46:41:f3:91:20:3b:
bc:22:69:98:a0:5b:80:9a:49:6a:1b:55:03:37:90:16:76:ae:
68:4c:50:24:c2:12:dd:78:c8:10:4e:9b:7e:ae:c3:c6:4b:94:
79:87:4f:5d:90:3d:9f:a8:33:7d:71:ec:91:32:16:ae:30:e8:
9d:5d:e6:5e:a2:96:e8:2b:f5:34:6d:99:b1:cb:ed:86:09:60:
3c:b1:9e:a5:8f:71:ec:31:03:af:bb:37:95:91:52:8a:d8:c4:
6f:ad:ea:d9:5e:38:d1:26:16:30:42:ac:d5:72:7c:b8:d6:17:
24:c0:4c:e8:0b:09:2c:9c:fc:db:f8:4b:c9:8c:b8:6e:c6:59:
58:4d:3a:a8:67:fe:38:84:c1:87:18:62:3a:2e:06:08:d2:c1:
02:91:b8:95:3c:f5:f5:15:10:9a:43:b4:b2:a1:eb:d2:74:5a:
99:5b:07:30:ca:d5:bd:d2:e0:82:9f:5a:ad:9c:a0:07:cc:29:
de:5a:a3:8f:b0:76:19:71:ef:1d:28:98:32:3e:20:fa:52:4f:
e1:89:ae:b7:54:54:0e:e9:43:5d:6a:78:fc:bf:ec:fe:06:30:
2c:0f:b4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:16 2025 by rpki-client