Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79934620DA5711EFABFA6985762E951A.roa
File: 79934620DA5711EFABFA6985762E951A.roa (raw, json)
Hash identifier: F1jPzY/zlRZDf53YNh6BmZpdICbdP4NO4p8ti5k7rm8=
Subject key identifier: C2:38:1D:56:15:ED:8F:61:72:12:D6:48:69:ED:85:AD:83:61:3D:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01477F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79934620DA5711EFABFA6985762E951A.roa
Signing time: Fri 24 Jan 2025 13:31:11 +0000
ROA not before: Fri 24 Jan 2025 13:31:07 +0000
ROA not after: Fri 28 Feb 2025 13:31:07 +0000
asID: 62240
IP address blocks: 154.194.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83839 (0x1477f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:31:07 2025 GMT
Not After : Feb 28 13:31:07 2025 GMT
Subject: CN=6793961f-8c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:e9:3f:c4:de:a1:72:08:33:b9:44:49:87:
37:f0:12:59:81:d4:a0:7f:99:86:da:09:b0:b0:df:
05:30:54:1c:45:e6:34:d2:69:04:53:43:80:2a:c8:
83:81:93:fb:d0:e8:27:19:c5:e1:77:03:51:62:48:
3c:ac:de:8d:35:8b:61:35:b7:18:9b:4a:45:a5:40:
ba:ca:4d:49:48:4d:04:3a:ac:b7:15:8e:13:9e:a2:
92:aa:19:e1:4e:f0:39:28:7c:6b:a6:a5:01:88:fb:
4f:f3:d4:96:9b:42:10:58:70:b0:14:af:19:76:da:
fa:22:50:b9:4b:34:11:c8:9a:ab:f6:a3:ef:53:5e:
f9:d2:6e:27:6b:4d:64:9e:a3:68:b6:af:c5:fc:6e:
15:89:b7:78:00:58:4a:38:19:5b:dc:5a:b6:02:3a:
b6:6b:2e:73:50:46:9d:57:25:78:83:0f:04:f6:ef:
61:97:b0:6b:65:f1:65:66:88:29:9c:62:83:62:a6:
34:41:d0:ed:7f:5b:90:6f:de:fc:84:d7:70:ef:23:
53:62:1a:81:52:58:d4:a3:5d:91:9e:9c:f3:1a:78:
d9:dd:e7:a0:61:35:78:4c:0f:af:84:d4:c6:9f:f9:
13:76:0d:90:9d:d5:63:a4:0a:e1:a1:38:0c:1a:01:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:1D:56:15:ED:8F:61:72:12:D6:48:69:ED:85:AD:83:61:3D:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79934620DA5711EFABFA6985762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b7:ec:88:42:f0:37:12:13:15:57:c5:f2:30:15:0e:2c:82:
8c:a9:f8:33:6d:d8:3c:e6:04:35:17:a9:b0:00:14:d9:5c:02:
59:f8:76:ae:d4:fa:54:cc:e1:31:c4:b1:eb:56:7f:32:e7:44:
7a:93:ac:bb:a9:6d:b5:75:7d:e9:52:c6:f9:1b:19:30:8d:c8:
5d:31:95:55:ea:cc:ad:8f:c9:9e:c0:e4:15:fe:0d:d9:1d:a9:
d2:c9:74:4c:8c:aa:b9:64:d0:e0:77:54:ab:49:4c:69:f2:3a:
8d:38:4d:3a:48:c6:e3:98:17:27:d2:b2:1c:72:01:2b:7a:79:
28:77:d6:b6:73:6f:cf:ba:cc:5a:4b:dd:4e:e5:42:8e:ab:c0:
63:32:db:69:bf:66:a3:17:00:a7:0b:11:b5:60:85:f0:8e:4d:
3b:e0:d6:ea:96:37:b6:53:53:75:16:c9:fe:56:b8:2b:a9:bc:
c5:aa:cd:ad:98:d0:38:f9:8a:49:4f:a4:2e:01:e9:cf:e8:80:
c1:ad:d4:d7:ac:e3:8e:44:32:32:c2:89:62:95:a9:f6:9e:42:
ee:5b:72:ac:8c:30:cf:b3:63:52:bd:01:1e:e1:4e:7a:81:27:
37:00:93:22:64:5f:7f:96:1a:69:20:45:76:1d:f5:53:4c:b7:
bf:9d:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:23:12 2025 by rpki-client