Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E95AAADA3511EFBE594CA0762E951A.roa
File: 83E95AAADA3511EFBE594CA0762E951A.roa (raw, json)
Hash identifier: nFpeHHyYAa5iN4d0m59FE3RmD4bjpTzx+mHxFLaG4fw=
Subject key identifier: 7F:0E:FF:DF:4A:28:7C:C9:D8:56:D1:72:CB:A6:18:16:60:32:CD:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E95AAADA3511EFBE594CA0762E951A.roa
Signing time: Fri 24 Jan 2025 09:28:05 +0000
ROA not before: Fri 24 Jan 2025 09:28:02 +0000
ROA not after: Fri 28 Feb 2025 09:28:02 +0000
asID: 62240
IP address blocks: 154.195.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83181 (0x144ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:28:02 2025 GMT
Not After : Feb 28 09:28:02 2025 GMT
Subject: CN=67935d25-a667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b9:25:6a:9d:15:a1:dc:af:5f:ee:9b:e7:cb:
00:70:50:61:9c:05:70:34:82:38:93:1e:58:d8:2b:
73:2b:68:47:5d:ac:d2:18:a4:ff:50:f6:c9:33:30:
78:d2:16:ca:aa:bb:38:91:0d:93:93:60:92:93:41:
09:ac:8b:08:a5:95:d9:98:08:1d:6a:b5:9e:cc:cf:
5c:f4:a1:d2:1c:23:34:c5:65:65:c6:3d:38:15:44:
31:5e:17:96:7d:ad:ad:26:35:e6:1a:28:6c:42:06:
c9:45:d0:46:bc:8f:48:40:8b:29:a1:7b:7e:3f:c5:
e9:b2:94:39:34:b6:d6:1b:d3:9b:2e:80:f6:2f:cd:
59:ed:76:ed:11:1e:94:12:09:a1:1c:63:1c:03:34:
6a:ce:2e:42:32:fe:3d:e4:3c:68:b7:c7:c6:b5:5a:
4d:94:4c:36:0a:d3:0c:1f:4c:c5:12:04:5d:01:a7:
bb:85:26:ed:93:6e:8b:b6:a2:ec:5b:f3:46:30:7d:
3a:41:04:30:43:08:b5:c0:47:e6:85:f7:67:e2:f0:
4f:63:ab:4c:ab:67:52:dc:78:0b:32:98:e2:fb:54:
8f:04:35:f9:40:a6:cf:7e:72:e7:d3:14:ae:9b:f6:
a9:9c:8e:d7:38:91:da:ad:d7:3d:e1:4a:10:79:ff:
98:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0E:FF:DF:4A:28:7C:C9:D8:56:D1:72:CB:A6:18:16:60:32:CD:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83E95AAADA3511EFBE594CA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.190.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:ba:56:b2:39:73:dc:7d:d4:c3:f9:dd:a3:59:ae:80:66:e3:
3c:6e:2a:46:a1:7b:9a:a3:33:b6:60:b8:96:83:68:e7:45:9e:
fc:21:73:b9:f7:c2:38:56:eb:f2:81:e4:fb:6a:5a:ea:56:cd:
3a:73:b7:aa:07:94:e7:00:12:a9:3d:7e:48:50:d4:93:31:29:
bc:b1:ac:ab:59:d4:74:3e:65:99:fe:51:f6:49:c9:ea:0a:49:
ed:19:2b:f7:3c:8d:f7:86:fa:a1:93:89:fe:29:82:dc:ad:0e:
2e:ed:0e:a6:c7:86:bf:3f:25:05:c3:a4:49:92:e5:56:2d:8b:
1c:91:5c:be:a9:95:fa:21:d3:9c:16:50:70:f8:02:13:72:b4:
ec:cf:85:cf:86:d4:2d:0a:37:c9:1e:27:d4:a7:13:57:0e:4e:
da:7d:bc:a6:f1:c8:c6:61:8c:f7:6c:76:cb:56:e8:53:e0:ce:
19:fe:c3:03:14:13:a8:9c:d5:aa:a0:49:70:d1:4f:2c:f6:5b:
02:2b:1c:e9:ce:97:07:47:e3:97:3c:3b:5d:be:ba:2c:36:a7:
3b:5e:2a:f3:25:93:82:2b:8e:ed:9b:7d:08:4c:dd:f7:5c:48:
60:09:bd:3c:29:ae:b8:00:76:ad:01:5f:eb:58:32:96:84:12:
af:dd:3f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:12:00 2025 by rpki-client