Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87BA6C42D98511EF9DF4937D762E951A.roa
File: 87BA6C42D98511EF9DF4937D762E951A.roa (raw, json)
Hash identifier: a4NFcM9APxh7tKjWdTMqtT5PR00vQAG3WEuvf24hBYw=
Subject key identifier: C2:C2:0D:F5:31:2B:A2:AC:46:83:CD:7D:B2:96:2F:8A:DB:C4:E8:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87BA6C42D98511EF9DF4937D762E951A.roa
Signing time: Thu 23 Jan 2025 12:28:20 +0000
ROA not before: Thu 23 Jan 2025 12:28:17 +0000
ROA not after: Fri 28 Feb 2025 12:28:17 +0000
asID: 62240
IP address blocks: 154.196.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82455 (0x14217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:28:17 2025 GMT
Not After : Feb 28 12:28:17 2025 GMT
Subject: CN=679235e4-9b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:1a:fa:0f:ff:95:1f:03:01:c4:f4:c3:81:
3a:fb:34:6e:ab:0c:75:af:4b:a3:e4:a0:d8:7b:79:
c1:01:3d:f6:d7:e4:ff:77:f5:1c:59:46:1f:e5:4c:
3e:cb:47:99:89:3f:4d:db:9f:3d:61:1e:63:06:0f:
f7:be:bd:15:8d:6d:a6:a4:04:32:6e:42:23:d2:09:
60:c9:48:4c:4a:d0:ab:b2:1e:fc:ef:78:9f:61:08:
ef:ba:9c:60:cf:a6:a1:b4:77:94:d6:8f:51:44:59:
13:a7:3d:11:59:d3:1c:24:30:77:e7:5c:e9:78:81:
dd:ea:e0:1c:a0:5b:44:c0:52:21:9f:de:50:7d:be:
69:f1:50:60:72:34:cd:e9:63:ab:98:2c:76:b7:22:
d5:06:03:c4:68:90:80:30:0d:ae:d6:80:83:cd:fa:
31:3d:5c:0a:26:e3:87:0e:34:dd:6e:57:32:a0:af:
c6:9e:0e:d7:59:4e:f2:51:9e:ad:15:53:c5:07:0b:
34:f7:57:f2:0c:a6:36:10:5d:04:25:a0:f1:10:09:
16:f7:38:f0:7a:01:c0:16:69:f6:f4:16:95:82:9f:
66:66:9e:b2:9c:c1:7c:f1:4f:b2:f9:6b:00:88:8f:
d6:35:66:fc:90:92:49:ae:17:25:d9:d1:3d:55:1e:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C2:0D:F5:31:2B:A2:AC:46:83:CD:7D:B2:96:2F:8A:DB:C4:E8:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87BA6C42D98511EF9DF4937D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.16.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:97:27:8c:66:fa:15:58:06:32:f1:f3:4b:06:d3:2c:21:42:
99:a4:d9:db:7a:5d:c8:90:0f:e5:58:d1:37:86:ba:f4:5a:e6:
4e:76:ee:a6:78:a1:f1:17:a0:69:ca:4c:d3:06:c0:fc:65:6a:
a2:f4:33:f9:a7:0a:13:29:92:5d:ce:00:53:1f:ca:6f:e6:15:
54:d3:03:1b:a4:83:0e:7f:21:e0:88:41:17:dc:4f:75:1f:e0:
e3:12:da:c8:4a:c1:4d:60:76:1a:db:5b:55:ef:68:d4:b8:57:
fd:c6:a1:af:f3:04:14:b3:32:3b:a6:f8:1e:9c:ca:74:23:a7:
db:7f:8e:bb:d6:fe:0c:aa:a4:b4:9b:28:2f:f9:7f:80:7b:af:
fd:16:46:f0:8a:b4:c6:30:86:1e:0e:72:ce:03:0f:88:ac:af:
bd:ce:7c:6a:f4:a5:47:81:9f:b4:9c:78:57:99:8f:5c:1d:3d:
e3:30:df:de:31:e6:c5:38:0e:df:8f:a9:8b:c7:94:b9:46:02:
6e:25:6a:3b:5f:5b:46:bf:53:a3:7f:36:44:5c:6c:66:80:5c:
af:28:e1:f2:03:bf:47:8d:53:7d:57:40:0b:8d:b0:6a:89:8a:
35:db:b1:5b:8e:1d:89:39:6d:e3:1c:cb:23:3d:20:6f:25:9e:
28:dc:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:57 2025 by rpki-client