Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/712FEF88DA3911EF9BE025B8762E951A.roa
File: 712FEF88DA3911EF9BE025B8762E951A.roa (raw, json)
Hash identifier: MYXIGhCwwMDH8NQ0Hq/BBQM3yVuhy2VtHpoicO8zfzc=
Subject key identifier: 1D:25:6D:44:F6:D4:13:BD:75:A7:11:13:81:BD:8F:FE:AE:9B:40:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014537
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/712FEF88DA3911EF9BE025B8762E951A.roa
Signing time: Fri 24 Jan 2025 09:56:12 +0000
ROA not before: Fri 24 Jan 2025 09:56:08 +0000
ROA not after: Fri 28 Feb 2025 09:56:08 +0000
asID: 62240
IP address blocks: 154.196.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83255 (0x14537)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:56:08 2025 GMT
Not After : Feb 28 09:56:08 2025 GMT
Subject: CN=679363bc-058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:16:eb:4d:27:53:88:91:35:42:87:d5:1b:
77:a5:b6:bb:30:d7:bf:bb:aa:60:b2:48:0a:0b:69:
6e:db:0d:b5:dd:c0:3e:5f:66:f7:d3:6b:ea:58:50:
f0:21:47:4a:5f:1b:45:ff:d8:91:8b:c3:34:f5:a6:
29:87:9e:68:04:76:6f:1e:c9:27:49:97:32:f6:2e:
fe:85:44:d1:45:a5:97:d5:1d:2e:bb:09:64:4b:b7:
fb:03:5d:46:ef:43:02:68:41:45:5b:30:3d:59:31:
4f:91:75:b0:ae:39:95:bc:b9:6b:42:ce:fa:67:7a:
0e:f9:e3:0f:ee:4d:6a:ea:f1:28:71:7b:b5:6e:9a:
67:68:0d:eb:8b:42:89:89:29:b2:7c:2d:3f:04:b4:
23:0a:d7:4a:94:4e:d4:00:65:36:06:03:6a:87:13:
13:98:d1:fd:15:ac:a8:6b:32:3a:f8:1f:95:85:62:
09:54:21:09:8e:81:f6:ae:55:f2:bf:07:f4:ba:8b:
d4:ef:22:cd:70:4b:0c:b1:02:5d:67:56:7a:e4:ca:
61:4a:d7:65:5f:2a:8d:33:86:59:86:14:66:bf:23:
92:4e:48:e7:ed:db:84:f9:37:f4:fa:29:0c:01:40:
30:96:31:92:27:b7:9e:2d:97:3a:c3:39:88:74:64:
92:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:6D:44:F6:D4:13:BD:75:A7:11:13:81:BD:8F:FE:AE:9B:40:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/712FEF88DA3911EF9BE025B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.38.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:6e:f5:9e:07:46:c7:ab:56:c6:4c:b6:da:55:9f:31:ea:7a:
56:33:02:aa:29:b2:32:2f:2d:04:dd:0a:5a:69:14:36:50:0a:
74:4c:5f:5b:1c:0f:78:c5:41:da:7f:ed:05:53:5b:74:c7:ad:
51:c5:0c:97:6f:8f:08:56:e4:df:7c:72:a1:81:fa:c2:bc:d7:
f4:b3:b5:0a:ba:bd:f2:a0:86:45:21:6b:2b:9a:73:4b:01:45:
fc:5f:a5:e2:23:36:92:30:93:09:7e:35:0a:db:3e:ed:cf:8e:
be:75:bb:db:68:3a:70:b5:39:ed:90:0c:37:2c:84:2b:20:1e:
7c:91:10:57:01:b2:ee:d3:b8:11:7c:1b:a0:12:a8:0b:bb:fc:
e9:be:65:07:3e:25:5c:2a:3d:9c:3b:b8:87:10:42:31:c4:27:
3f:3e:19:da:ce:ac:69:52:59:05:eb:f2:e6:99:62:c2:ac:bd:
7b:77:9b:ca:d1:f6:34:93:c1:d4:75:1d:0f:1c:00:42:c2:13:
9a:0d:a2:3d:20:20:b2:c5:ec:88:9b:be:a1:95:be:e2:69:7d:
48:6f:26:28:ce:c0:3f:7b:db:0c:53:87:a2:11:40:36:b0:6e:
a8:83:2c:f9:64:b0:96:8a:61:c4:cd:af:81:e8:8e:4d:36:f5:
65:1b:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:19:12 2025 by rpki-client