Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C9340DCD97611EFACF36596762E951A.roa
File: 7C9340DCD97611EFACF36596762E951A.roa (raw, json)
Hash identifier: A4gTO/G490j6sz1r/jWo0s54H3gXOl/Y4lxGXMGZSAI=
Subject key identifier: A3:CC:FB:38:7B:46:68:B4:27:C7:4E:A6:E1:63:22:4D:5F:9A:CC:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01413F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C9340DCD97611EFACF36596762E951A.roa
Signing time: Thu 23 Jan 2025 10:40:39 +0000
ROA not before: Thu 23 Jan 2025 10:40:35 +0000
ROA not after: Fri 28 Feb 2025 10:40:35 +0000
asID: 62240
IP address blocks: 154.195.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82239 (0x1413f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:40:35 2025 GMT
Not After : Feb 28 10:40:35 2025 GMT
Subject: CN=67921ca7-f062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:47:38:2a:b0:bb:50:3c:ec:7e:a8:be:eb:f4:
d3:14:e4:fa:9e:80:b1:7b:d3:3c:33:fe:05:4d:f7:
0e:f6:d7:ed:20:89:4f:85:2e:c5:2c:9c:bd:81:79:
42:fd:4b:d3:e7:36:65:b2:d5:51:66:de:ac:8f:48:
99:e1:f2:ec:fb:0d:76:f1:74:bb:54:d3:6f:59:91:
8e:3f:6c:05:c9:0f:07:51:90:d7:20:64:ff:7b:d4:
be:d7:e5:7c:46:46:c1:57:f7:25:5d:81:ac:dc:7e:
7e:2c:1e:77:e1:fc:ba:a1:d1:74:01:8a:23:e8:67:
d2:dd:3f:87:cb:20:72:4f:ba:26:ef:55:33:1a:2d:
da:36:39:82:c1:2f:5c:f6:d4:4e:d8:90:4d:ae:6c:
f0:d7:e5:0c:e2:e4:98:90:e1:e3:66:f1:25:a0:a7:
96:70:f7:09:7a:5d:60:5d:18:9b:49:44:be:a1:f5:
7f:26:22:b8:18:1e:98:5b:2a:52:e5:4f:13:b6:2b:
5e:0f:b5:9c:1f:ed:80:2a:65:a7:d5:20:79:d9:3e:
10:dd:70:61:78:24:4e:2e:12:29:5c:21:f5:25:d4:
f3:58:f3:0a:05:fa:2a:6c:77:ae:a6:68:c0:e4:00:
1d:60:d2:cc:cb:c5:7e:1d:36:2c:3f:d0:d0:37:2d:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CC:FB:38:7B:46:68:B4:27:C7:4E:A6:E1:63:22:4D:5F:9A:CC:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7C9340DCD97611EFACF36596762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.132.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:3a:13:a5:00:df:c7:92:71:b9:a3:e0:c2:7e:2c:13:68:d1:
b0:a1:cd:e2:c0:ad:f4:54:a7:11:d7:db:9d:4d:7f:64:c7:47:
38:2d:e3:f9:42:f5:6a:94:de:27:4a:45:37:17:8e:a1:a7:65:
f8:4f:2b:a7:4f:49:33:07:ba:87:ca:cc:ea:eb:d4:00:8e:39:
99:34:5a:47:7a:4f:88:4a:9d:83:8a:5a:df:01:c0:c0:ea:b8:
98:27:88:cd:ef:5c:a7:e6:71:2a:5d:7f:7b:19:8b:c9:38:13:
54:37:c6:3a:dc:77:bd:4a:76:a9:f8:df:03:c8:91:9a:88:2b:
44:b0:33:d1:a3:ef:fe:22:87:b0:fc:4e:10:f4:cb:82:4d:eb:
05:d8:09:b9:d3:ba:47:a9:11:79:b3:05:07:b0:22:47:87:1f:
b6:f0:3d:a8:15:cc:1c:cc:35:7f:7d:7d:de:d7:e9:2a:99:48:
80:de:95:ad:5f:a8:63:d6:f0:02:84:9a:62:ba:b2:e1:73:56:
28:e1:73:1f:08:b8:a5:ef:02:10:19:be:4d:c4:7d:e2:27:85:
0d:bb:2a:da:d7:52:df:58:74:c1:88:fd:2e:5f:76:52:5a:d2:
d4:1e:71:b8:87:25:3e:85:58:f7:01:b8:38:21:79:e8:79:f5:
01:ef:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:30:41 2025 by rpki-client