Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B3EE8ED96B11EFA125E04D762E951A.roa
File: 70B3EE8ED96B11EFA125E04D762E951A.roa (raw, json)
Hash identifier: p9sAzHcuJxcdb1DjGNHQ3foi/czptOiM95hs69JZrN0=
Subject key identifier: 97:58:95:CE:85:C6:FA:9F:63:00:27:37:2A:85:1E:8F:EA:A3:D9:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B3EE8ED96B11EFA125E04D762E951A.roa
Signing time: Thu 23 Jan 2025 09:21:35 +0000
ROA not before: Thu 23 Jan 2025 09:21:31 +0000
ROA not after: Fri 28 Feb 2025 09:21:31 +0000
asID: 62240
IP address blocks: 154.194.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82146 (0x140e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:21:31 2025 GMT
Not After : Feb 28 09:21:31 2025 GMT
Subject: CN=67920a1f-cd08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b9:fc:6a:11:15:3a:c1:d6:23:eb:b5:4b:e5:
af:79:4b:58:91:ce:db:c2:23:8d:55:f9:5d:1f:35:
da:7b:8f:4b:8c:51:d0:82:ba:86:c1:05:0e:41:ec:
c3:38:eb:17:81:9d:73:d3:60:4a:05:42:26:5f:09:
d7:b9:5f:5e:2e:80:2b:5f:51:5b:fe:e5:52:c3:f7:
69:f1:63:6a:d0:e7:90:2b:47:50:1f:b1:ca:8b:13:
e4:b7:ec:53:a7:5c:bf:68:ad:92:19:47:1b:2c:1a:
02:e3:56:d1:dd:e8:4b:60:d3:bf:48:f2:6c:2c:82:
38:c5:10:46:c5:ad:01:a3:8d:80:42:30:40:5f:34:
ed:22:9f:b4:40:62:dc:01:a7:a4:c6:24:df:09:81:
bb:1d:66:c0:bf:2c:42:d9:2f:92:ee:d6:25:7f:a0:
05:73:bb:df:20:ab:65:c4:c8:22:07:e3:53:52:59:
b3:bf:42:b8:7d:50:a4:7e:a3:b2:48:93:ca:72:a4:
56:78:e2:9c:53:f0:03:ce:9b:86:26:a9:c3:8f:e3:
4c:3b:fc:5e:86:c5:c0:e5:74:41:5b:aa:8c:20:aa:
6d:42:0e:49:51:b0:35:ba:86:69:ec:19:8c:d6:d0:
dc:1c:a8:d5:17:a4:2d:8d:14:23:b9:81:70:2d:c5:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:58:95:CE:85:C6:FA:9F:63:00:27:37:2A:85:1E:8F:EA:A3:D9:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/70B3EE8ED96B11EFA125E04D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.107.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f8:cb:08:88:08:c4:57:e7:c7:c5:e3:9a:5e:46:82:e2:6d:
31:24:bb:51:01:5b:55:1d:68:34:bb:7a:94:03:e8:ca:13:0e:
07:05:92:fc:e0:b8:8c:fe:cf:07:44:d0:21:91:e5:0e:7b:fc:
68:b0:a9:2f:65:93:ad:89:74:11:3a:c2:fe:86:07:b5:66:e2:
d2:4e:0f:45:44:39:54:b7:01:ef:30:66:f8:65:91:e9:17:68:
c6:36:5c:66:5e:01:3b:e4:60:5e:ad:2d:f1:b2:80:a2:42:56:
30:0d:c8:1e:0c:7e:3a:3b:0e:d5:fa:b5:1f:ae:12:b5:9a:63:
a8:5f:9e:e0:ff:cd:c2:3d:10:cc:b6:6f:51:2d:e7:a5:a3:fd:
3a:ea:43:d6:96:df:74:4e:fb:eb:05:ec:c1:e9:02:38:88:df:
69:5b:10:57:97:4f:f7:3d:c4:39:6b:fa:78:34:dc:00:78:e4:
17:59:f3:3a:60:68:c9:c0:ca:5a:47:8a:a9:6d:6b:1a:3c:c5:
a7:d3:e3:51:6a:ab:4c:a9:a0:fe:01:b0:8b:5f:1c:db:ea:35:
b0:fe:07:51:ae:03:fe:ab:41:a8:74:01:ee:3a:18:22:34:2a:
67:6c:1e:d2:ab:55:f7:96:eb:8b:ea:01:82:3d:a4:37:44:1b:
fd:a2:2e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:11:35 2025 by rpki-client