Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82ACE02AD9D211EF978D5678762E951A.roa
File: 82ACE02AD9D211EF978D5678762E951A.roa (raw, json)
Hash identifier: QbJmFw7404+4WEYvuby3dUilLYCpe/hxM48rndeya1Y=
Subject key identifier: 2B:72:B7:23:91:6B:DF:17:A9:8B:2D:EA:85:6D:62:DE:AC:0E:E0:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01431B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82ACE02AD9D211EF978D5678762E951A.roa
Signing time: Thu 23 Jan 2025 21:39:23 +0000
ROA not before: Fri 24 Jan 2025 21:39:19 +0000
ROA not after: Fri 28 Feb 2025 21:39:19 +0000
asID: 62240
IP address blocks: 154.196.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82715 (0x1431b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:39:19 2025 GMT
Not After : Feb 28 21:39:19 2025 GMT
Subject: CN=6792b70b-b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:88:a6:61:44:83:0d:22:c4:f8:73:8d:65:
5b:01:64:1c:e9:76:17:c8:4a:15:ab:55:9b:3b:3f:
52:27:95:94:21:d1:34:43:e6:b1:a3:bd:00:2a:00:
a5:2a:9a:0b:04:32:f7:a5:da:11:c7:15:e3:11:d9:
28:d1:12:56:9c:37:87:21:e2:f9:9d:da:48:d2:13:
24:80:7f:8d:92:2b:1d:43:02:4c:60:a2:1c:a1:61:
c8:a0:a7:6e:28:51:8b:89:d0:de:ee:74:ce:2c:d1:
55:0d:f8:98:d8:c5:14:c4:fc:a6:37:01:32:66:f0:
2f:f1:cb:4b:4d:f6:b5:69:34:be:30:f1:c1:7f:f6:
4e:a6:9f:6c:fd:fd:e0:ce:0a:c4:a0:fa:d2:36:ad:
df:8d:19:30:40:03:1a:f6:43:b1:a8:fa:4c:5a:89:
61:cc:b5:2f:94:d7:6b:07:27:d3:4b:e7:26:38:30:
b4:4b:32:66:12:46:f4:5a:a8:79:56:54:98:af:b0:
1c:42:74:3e:9f:f2:8f:83:bd:a3:0d:ba:7d:98:ef:
2c:3b:99:65:a5:62:48:93:7f:10:b0:1a:34:ae:62:
c0:8d:5b:ef:00:fe:01:30:76:0e:f9:df:ea:71:1a:
7c:e9:70:76:41:0d:88:7c:21:cc:1c:87:f8:91:13:
38:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:B7:23:91:6B:DF:17:A9:8B:2D:EA:85:6D:62:DE:AC:0E:E0:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82ACE02AD9D211EF978D5678762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.89.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:ef:8f:77:b8:1a:ce:b9:95:92:c2:b5:da:ee:22:53:d9:7c:
67:a0:84:f1:ee:0f:6d:b1:50:19:1b:76:a0:5a:9b:70:0a:2d:
de:17:6d:e6:fe:d0:cd:32:8d:b8:88:00:7e:8b:b4:fd:ad:e1:
9c:c0:9d:f3:27:74:c4:04:f0:59:87:77:4d:72:a4:cf:4b:7e:
7e:a3:b4:f5:c5:39:a4:a5:d0:0d:a8:78:ba:72:72:74:46:d5:
0d:db:e0:74:b4:c5:b5:d9:e2:d9:af:b3:a8:2d:e4:95:c3:fc:
32:9d:7f:88:23:04:57:8e:0b:e4:c1:da:48:17:ed:f7:51:eb:
17:ba:54:28:94:bc:b8:38:91:ad:cb:1f:f4:0e:2b:2e:eb:7f:
87:97:ce:bc:47:4a:e4:95:0c:31:4f:ad:64:4b:23:99:7c:5b:
bc:71:ca:52:f6:da:33:11:ab:b7:41:4f:90:aa:de:3d:cd:77:
ad:bb:ef:09:a0:f0:36:7e:71:08:05:c7:6f:14:2d:d2:0d:a7:
1a:15:96:eb:67:4f:3a:e8:20:be:f7:65:89:42:fd:e5:ed:86:
31:f0:3e:ad:b7:7a:7d:3a:3c:ed:bf:da:81:65:c8:a4:cd:51:
06:b8:90:16:a7:51:42:a3:18:2c:3c:35:4a:6e:f3:eb:48:37:
2d:bd:f4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:49 2025 by rpki-client