Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC67B4CD96C11EF84B1B054762E951A.roa
File: 7BC67B4CD96C11EF84B1B054762E951A.roa (raw, json)
Hash identifier: epkDZOtYwLONAAPUQO414zLcr5nwgpytY6WCcJ9pmzo=
Subject key identifier: 8B:7A:F0:2C:F2:25:BE:AE:9E:05:99:A8:7F:AB:A8:56:6D:21:CB:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC67B4CD96C11EF84B1B054762E951A.roa
Signing time: Thu 23 Jan 2025 09:29:03 +0000
ROA not before: Thu 23 Jan 2025 09:28:59 +0000
ROA not after: Fri 28 Feb 2025 09:28:59 +0000
asID: 62240
IP address blocks: 154.194.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82154 (0x140ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:28:59 2025 GMT
Not After : Feb 28 09:28:59 2025 GMT
Subject: CN=67920bdf-e382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:73:45:cc:4d:e4:67:97:bc:22:62:f6:ac:
c3:6f:1a:c4:9e:54:4f:74:89:18:3f:41:b4:4a:79:
89:0a:f5:88:99:fb:63:5f:00:f6:48:09:42:3b:4a:
9a:8e:2f:58:e8:0f:02:36:f3:fc:83:76:bc:5e:48:
91:4a:d0:90:c5:d9:f1:7d:10:79:8b:d8:a8:98:9c:
bc:38:a2:56:81:23:dc:3d:37:9a:dd:4f:4d:58:fb:
bf:d3:02:6f:c5:be:75:e4:b1:ac:68:b7:b9:62:81:
a5:d0:f5:58:98:c8:3a:6f:41:5e:ca:dc:40:4d:51:
5f:cd:23:f8:6e:ab:b4:2f:3d:90:a8:9d:43:c3:cf:
3f:c2:e7:28:66:e9:d1:fe:b4:91:e2:db:0e:60:20:
89:4d:a8:a4:e5:76:f4:02:0a:3d:ad:ad:86:cb:16:
62:c0:2b:89:7f:7a:fa:ea:a0:d5:0a:72:73:30:bf:
b7:4c:46:1a:04:5c:a7:de:14:4c:a7:5f:9d:c2:66:
7e:1e:1d:09:53:0d:10:95:a7:77:da:a6:cf:e3:9c:
75:d1:9d:a0:f8:e4:39:c1:0f:3d:ac:ab:68:e9:72:
76:70:01:31:57:3c:01:25:87:91:b1:5e:ae:31:8e:
04:d5:bd:28:89:69:fd:46:b7:f8:af:59:63:00:fe:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:F0:2C:F2:25:BE:AE:9E:05:99:A8:7F:AB:A8:56:6D:21:CB:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC67B4CD96C11EF84B1B054762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.111.0/24
Signature Algorithm: sha256WithRSAEncryption
53:bf:f2:89:c7:3c:9c:da:3c:70:8b:63:2d:66:d1:c2:b7:00:
69:9b:67:5d:a6:be:ae:e1:86:6f:94:cf:b8:d4:a8:41:13:a8:
57:13:04:8b:73:3e:6e:53:74:12:b5:94:ea:3e:b5:f5:9e:4e:
26:d6:4e:f1:90:6d:15:8f:b8:23:44:8f:63:03:92:4a:04:42:
ac:f5:28:b3:20:b4:0a:e4:59:ae:4c:c6:ee:c5:8e:79:2c:b5:
c3:47:38:11:0c:7b:cc:8e:00:9e:26:6a:c7:6b:ee:b5:a8:63:
e5:be:2f:65:0c:3d:31:01:ec:02:93:87:57:69:6f:d6:90:f4:
b0:96:05:ce:49:13:84:f8:6f:f5:dc:77:94:6d:2f:61:4f:26:
d0:83:33:36:b7:74:27:bd:dc:87:b7:b7:2b:f7:e8:0d:6b:cd:
1f:3a:52:87:49:92:cc:5d:51:84:bf:00:8e:78:0b:79:9f:a2:
76:8f:cf:28:ef:f2:f8:07:4d:47:85:24:aa:fa:99:57:6b:dd:
b4:28:58:75:78:e7:3f:4c:c3:7e:c5:a1:93:a7:28:b9:54:82:
d8:43:e3:69:9e:ee:f2:99:14:88:62:04:fa:d3:f2:78:99:8c:
8f:82:d2:b7:8d:6c:76:be:8e:59:09:63:0e:de:c8:c0:eb:2d:
2d:aa:40:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:50:47 2025 by rpki-client