Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84D4EBB2D97E11EF83FBAA4E762E951A.roa
File: 84D4EBB2D97E11EF83FBAA4E762E951A.roa (raw, json)
Hash identifier: zqnuCc7O+8QmwElhl3zCa3pxet/VThYAqrEUSwGrjPs=
Subject key identifier: FA:5D:F3:15:43:7E:F7:F0:0B:D3:F7:FC:56:CB:64:9D:D0:FA:A1:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84D4EBB2D97E11EF83FBAA4E762E951A.roa
Signing time: Thu 23 Jan 2025 11:38:09 +0000
ROA not before: Thu 23 Jan 2025 11:37:52 +0000
ROA not after: Fri 28 Feb 2025 11:37:52 +0000
asID: 62240
IP address blocks: 154.195.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82349 (0x141ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:37:52 2025 GMT
Not After : Feb 28 11:37:52 2025 GMT
Subject: CN=67922a21-b998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:db:1f:30:1c:fc:62:4d:6e:1e:fb:fc:39:
ba:25:02:f2:4a:97:83:d9:cb:95:b8:5f:ef:b7:f6:
bf:3e:1c:c6:3a:bb:8f:9e:27:1d:d9:b5:c9:57:49:
75:55:82:1a:90:d6:6f:6e:12:37:c0:cd:c1:16:46:
b9:38:af:de:5d:e8:c0:89:03:3a:6c:9c:56:35:6a:
7d:d7:b9:6e:e1:12:2f:fa:14:0b:9c:63:f7:e7:c0:
72:c9:ae:57:6e:62:ff:da:5f:94:5b:5f:a6:fb:dc:
34:fd:e2:b0:f7:54:41:9e:ca:8f:18:07:b5:8f:0a:
42:1d:2b:a2:c0:ed:e2:26:a8:87:9e:94:12:e8:2a:
f6:ce:f0:f3:e3:f7:5d:ec:da:b3:d1:ae:4c:58:2e:
12:c8:5f:1f:2b:1d:f7:d4:f3:ec:77:0b:4a:83:1c:
1a:54:45:57:94:39:10:72:de:83:84:19:c6:d8:2f:
a4:94:54:c8:57:69:ad:36:0a:e5:ff:3e:8a:ee:63:
02:01:53:84:36:84:6d:51:ab:67:6b:f9:35:b2:cf:
08:b5:0b:5a:51:a2:46:c4:dc:f7:dd:2b:58:12:25:
36:1f:10:e2:42:8a:ac:c5:9c:ff:53:c5:e7:ff:91:
29:6d:33:56:2a:56:2d:38:44:a1:76:9b:32:f2:d8:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:F3:15:43:7E:F7:F0:0B:D3:F7:FC:56:CB:64:9D:D0:FA:A1:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84D4EBB2D97E11EF83FBAA4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.120.0/24
Signature Algorithm: sha256WithRSAEncryption
73:11:3a:f4:62:c2:39:f1:26:38:35:a4:f0:b8:f8:5e:51:86:
b9:fb:31:70:c1:c5:13:0c:48:b4:c6:37:98:90:29:1f:2c:7f:
3c:79:d7:c6:02:7a:52:d5:07:79:0f:f7:9b:29:4a:eb:ab:fb:
d7:a6:cf:7d:7c:29:99:c7:5d:db:b5:5a:66:78:47:ab:81:45:
b2:fa:ac:61:ef:c3:12:18:10:5a:f4:fb:3c:5b:75:77:d2:1e:
5a:bf:ee:29:40:2f:8d:97:b7:fc:1b:19:f8:fd:3b:f4:67:31:
e2:fb:f0:3b:79:8b:1e:5b:2a:07:11:ad:7a:48:47:62:24:f1:
f8:8f:5d:4c:9a:44:34:a2:96:9b:c6:ff:1f:af:16:59:72:29:
2b:80:05:cf:8b:e8:7d:03:68:44:27:96:70:86:69:99:2f:00:
fe:56:45:71:1c:d7:9b:b8:af:6c:9f:8f:06:2a:d9:65:85:52:
db:c2:e1:f5:05:33:ce:e0:90:7e:fe:bc:c7:21:4c:bc:ae:f1:
17:4e:2c:0f:33:e0:be:18:5f:4d:01:0e:cc:3e:d8:cd:82:db:
76:4b:32:1a:7d:d0:a6:c7:45:e8:ce:77:4b:75:f7:e1:35:24:
84:20:2d:ce:b6:36:dd:3c:7e:f6:9a:26:0e:5d:57:76:9b:5e:
11:96:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:34:10 2025 by rpki-client