Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D4B4D8D9CC11EFBCFCEC50762E951A.roa
File: 83D4B4D8D9CC11EFBCFCEC50762E951A.roa (raw, json)
Hash identifier: r9jn4Brxpss/B8qtSFK4OHvg39mVP1MBTSvPVBJbLdU=
Subject key identifier: 27:18:F7:89:AE:E7:A9:50:E8:50:0B:59:81:8D:FF:78:9D:76:48:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D4B4D8D9CC11EFBCFCEC50762E951A.roa
Signing time: Thu 23 Jan 2025 20:56:28 +0000
ROA not before: Fri 24 Jan 2025 20:56:24 +0000
ROA not after: Fri 28 Feb 2025 20:56:24 +0000
asID: 62240
IP address blocks: 154.196.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82670 (0x142ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:56:24 2025 GMT
Not After : Feb 28 20:56:24 2025 GMT
Subject: CN=6792acfc-49ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:87:66:3d:c1:45:13:65:83:b2:be:2e:32:99:
e5:1f:91:68:89:de:30:81:14:25:c6:1e:31:c9:df:
6c:b7:3e:63:06:41:32:3f:bd:a9:02:c4:22:e3:85:
46:4f:f3:33:b4:f6:72:1b:10:da:5e:cf:be:02:c2:
b2:5b:19:09:88:d7:40:a8:f5:e5:9c:e0:a1:35:78:
4b:7b:1c:68:6f:0a:8b:be:a7:34:44:59:6d:a7:64:
5c:b2:2f:a5:a5:ca:0a:cc:f4:aa:f3:33:1d:e1:be:
d1:fd:7d:e8:02:dd:a7:33:1f:dd:ec:45:af:29:33:
2d:db:4b:7a:07:c6:a0:53:89:e4:88:35:af:32:7a:
f4:56:24:ed:d7:a3:30:cd:95:ee:78:35:f1:e3:fc:
7b:7a:b2:d2:7f:db:40:30:77:3b:3a:2b:fc:08:51:
d4:c7:f8:1e:e9:03:7b:c6:d1:85:43:64:67:e3:29:
a7:13:d8:6d:3f:f6:9e:fc:ce:46:53:84:2d:bc:de:
0e:80:08:20:ef:18:f7:38:18:5b:e4:82:c9:30:bc:
d8:04:37:26:60:e4:ed:f9:fc:09:d6:85:ba:10:6e:
58:9f:a7:4e:ba:c1:cf:63:cc:fb:9e:14:f1:d5:3a:
b9:8d:36:85:20:ed:f4:b8:b8:86:0b:a0:90:fa:aa:
fa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:18:F7:89:AE:E7:A9:50:E8:50:0B:59:81:8D:FF:78:9D:76:48:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D4B4D8D9CC11EFBCFCEC50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.67.0/24
Signature Algorithm: sha256WithRSAEncryption
81:23:76:33:6f:f6:45:a3:6e:1b:09:4d:98:c4:95:e7:0e:72:
d1:69:d2:fa:30:f1:91:64:1e:c2:f1:70:7e:06:7d:a1:f1:1b:
f5:63:c0:09:55:71:12:af:75:d0:4f:66:6c:ca:d5:dc:fe:06:
57:7e:df:d0:ef:19:46:5a:dc:72:db:04:cf:7f:c1:23:69:a6:
1f:41:97:c3:a5:57:51:7c:d1:ae:42:bc:d2:1c:77:d7:01:a7:
a4:9e:e5:6c:1b:7b:18:90:c0:00:3b:f7:16:f4:55:b2:96:90:
a4:ed:ff:6c:d3:de:9d:b9:f2:02:c8:b7:c4:fe:a9:65:40:c1:
9c:bf:e9:1d:da:d5:36:38:6a:04:c5:04:8c:21:53:17:c3:17:
85:41:76:a1:5b:b5:78:be:6b:db:36:9e:50:3f:f6:d9:bd:60:
32:24:1f:a1:b4:2d:49:68:4e:e3:84:6d:64:b3:ef:d4:97:30:
e9:9c:73:6e:36:8b:78:97:b4:f2:44:18:32:ad:12:5a:a0:23:
ec:e1:ba:f8:6b:5a:c6:c6:b3:2a:af:e1:97:c5:18:0f:be:15:
ac:3d:c0:37:17:77:b3:79:01:15:e7:f4:d4:23:62:d1:ab:d4:
fb:c5:69:0e:23:27:22:3d:96:f1:3e:7f:ea:9e:33:6d:30:e5:
27:9d:5d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:11 2025 by rpki-client