Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B09ECCAD97B11EFA6FC3BB8762E951A.roa
File: 7B09ECCAD97B11EFA6FC3BB8762E951A.roa (raw, json)
Hash identifier: Fj1mNzPwqF5NWpjNPBq7biKRyXkS1+DSAttq4/Vu5xg=
Subject key identifier: BD:AA:3D:7F:45:AB:57:E0:07:AF:2D:17:9E:61:AC:D3:6E:9F:35:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014186
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B09ECCAD97B11EFA6FC3BB8762E951A.roa
Signing time: Thu 23 Jan 2025 11:16:24 +0000
ROA not before: Thu 23 Jan 2025 11:16:19 +0000
ROA not after: Fri 28 Feb 2025 11:16:19 +0000
asID: 62240
IP address blocks: 154.195.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82310 (0x14186)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:16:19 2025 GMT
Not After : Feb 28 11:16:19 2025 GMT
Subject: CN=67922508-ecfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:b7:38:d2:6e:ec:54:7f:40:e2:bf:8b:7d:
f1:85:c4:b3:1e:f7:ca:7c:75:86:08:02:2e:6f:5d:
20:95:d7:d5:61:e7:69:4c:e9:02:ac:63:a1:ca:5a:
5c:73:05:26:6e:6c:ee:91:c7:e6:ac:a9:c5:78:3a:
0f:ca:ae:0c:5b:80:12:1a:de:95:f9:8a:b1:f6:15:
e4:a4:2a:16:f2:c9:8d:a2:4f:0b:6c:06:72:b2:4a:
46:7a:98:93:b7:31:d7:2a:aa:1e:49:8e:07:f2:d5:
57:5e:be:a2:54:33:cb:62:41:77:77:03:34:eb:60:
33:e1:ca:9b:f1:65:63:97:0e:5b:83:91:d9:c9:fc:
f2:8a:71:96:72:22:29:8d:89:49:11:29:d5:46:c0:
57:3d:0e:7c:03:38:b7:b9:d6:c0:2b:30:b0:ab:2c:
2f:8c:e6:bf:5e:6e:5b:cc:38:96:b7:b4:b0:aa:c4:
45:bf:5b:b3:7f:60:7d:e2:76:d3:5d:51:9a:38:24:
1b:8e:70:68:f2:24:79:21:ba:2b:ba:e1:86:18:9c:
25:5c:8d:cd:9c:6e:2f:66:89:e9:d5:a8:bd:c8:50:
6f:aa:ab:dc:3c:3e:a5:f5:2c:17:74:82:41:3a:81:
75:ba:b5:bd:b8:cc:80:1d:98:04:f4:86:08:a1:dd:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AA:3D:7F:45:AB:57:E0:07:AF:2D:17:9E:61:AC:D3:6E:9F:35:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B09ECCAD97B11EFA6FC3BB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.153.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:43:84:ff:d2:b4:ed:7e:39:44:0f:a9:32:67:62:50:d8:a9:
c9:77:c9:44:e5:21:5e:80:6e:db:37:7d:ab:2f:a6:23:28:48:
58:14:14:4b:85:98:95:d3:d7:82:bd:9e:c8:79:c6:12:7b:7a:
45:c4:07:77:8e:dd:d9:6c:22:32:db:a1:61:99:13:dd:a7:51:
11:ee:ad:f9:ae:55:91:f7:dd:1d:09:ee:c6:66:4f:f3:fe:f3:
6e:de:30:cf:6a:c6:6d:57:57:61:fe:49:09:f4:48:14:4b:d1:
1c:38:ad:04:33:b1:fc:22:02:6b:bd:48:d4:11:80:db:fb:ff:
87:60:44:64:fb:aa:41:bc:ad:d2:f6:09:a8:59:af:34:ca:71:
68:6b:11:3e:2c:df:8e:a2:34:12:87:e9:1c:a2:38:84:03:39:
79:42:0f:28:83:0b:06:28:bf:d5:13:94:54:8d:cf:95:62:2b:
7b:43:ce:87:93:af:60:f8:17:1b:a7:e0:9e:a7:93:c4:55:5a:
82:67:05:9d:cc:11:0c:3b:51:47:04:48:28:42:f1:a6:82:29:
1a:38:86:07:76:ca:4a:4c:3d:2b:1a:6f:ec:f8:a2:5c:b7:9c:
f1:e8:72:1a:f6:af:7d:ac:1a:3b:69:02:8b:86:9e:8b:48:94:
58:6f:3e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:45 2025 by rpki-client