Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883CB6F2D96711EF92BF8BB2762E951A.roa
File: 883CB6F2D96711EF92BF8BB2762E951A.roa (raw, json)
Hash identifier: 5gZfzsTE1zS6CiY/Gdhw1sHHSW4e6G+cx3d7rlQDyR8=
Subject key identifier: F6:CF:36:AA:EF:C7:36:E4:59:C1:F9:74:8E:AA:D0:0C:09:27:CF:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883CB6F2D96711EF92BF8BB2762E951A.roa
Signing time: Thu 23 Jan 2025 08:53:36 +0000
ROA not before: Thu 23 Jan 2025 08:53:33 +0000
ROA not after: Fri 28 Feb 2025 08:53:33 +0000
asID: 62240
IP address blocks: 154.194.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82092 (0x140ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:53:33 2025 GMT
Not After : Feb 28 08:53:33 2025 GMT
Subject: CN=67920390-e1eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:ae:7f:c8:aa:d3:c0:6b:12:cd:bc:15:ba:
d8:b2:ae:65:4c:b3:57:8c:1c:25:7a:c8:4f:58:82:
d2:e7:4c:c3:37:5f:51:f0:99:80:bc:94:1e:cb:d2:
a7:26:0b:ae:76:01:8b:f3:7b:39:5a:16:56:34:bc:
f7:1a:71:8c:f3:55:d0:df:c5:e0:d3:2b:91:8e:16:
10:48:7d:db:e7:70:e7:35:71:14:3b:a9:63:b5:c4:
ff:5a:a9:94:3c:37:bd:31:30:15:9b:24:fb:c4:98:
e2:10:c3:d8:8e:ca:b8:40:21:8c:11:3a:a1:b2:5d:
5a:40:52:a3:0d:3d:35:4f:58:4c:8c:0c:44:3b:23:
64:99:b2:ad:43:3e:0d:66:55:1c:db:30:28:3e:04:
7c:58:7a:b4:4a:95:31:00:cd:5d:fa:c3:a4:a1:44:
d6:25:bb:60:bc:08:b1:38:69:10:f5:16:72:82:e7:
17:6d:c8:89:1b:6d:b4:89:b2:71:13:72:51:3c:49:
d1:04:e5:8b:ba:da:65:9d:63:16:6b:e9:8e:3b:87:
71:c0:4d:19:85:be:51:f6:c7:c9:2e:08:ec:8e:d9:
dd:98:ec:15:dd:f5:bb:72:24:fe:e5:e8:59:f3:e6:
d9:cf:5a:5d:8b:68:63:b2:ad:5e:d9:ad:80:0e:1f:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CF:36:AA:EF:C7:36:E4:59:C1:F9:74:8E:AA:D0:0C:09:27:CF:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/883CB6F2D96711EF92BF8BB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:10:a6:c9:5d:a8:b5:87:a2:76:e8:29:c6:b7:1b:fa:fa:67:
a6:c1:83:01:ed:c7:eb:73:c7:f6:d5:67:ae:4d:91:14:8a:23:
ca:15:3a:96:e6:61:bd:e0:52:4c:ec:b6:5e:9b:40:bf:3c:f8:
ac:3a:d2:42:fb:37:b4:66:31:82:4d:81:cd:eb:ed:c9:d1:8d:
ef:f1:40:b4:72:02:a5:a4:2c:5b:94:ec:d5:4d:02:f4:a8:cb:
23:07:f1:33:58:0a:83:9e:44:64:19:90:58:c3:47:62:c4:b9:
82:fe:38:a0:12:58:ed:55:3d:77:1f:2d:60:db:fb:7c:99:d9:
4d:fe:3a:81:89:ee:75:f9:56:89:eb:b7:cc:20:38:b6:1b:73:
fa:2d:35:eb:e9:7f:e2:66:a3:90:3e:59:8f:29:6d:d6:71:43:
5f:7b:81:52:d6:6f:7d:70:e4:0c:71:76:7c:c2:21:9e:27:f9:
49:0f:0b:3a:7a:05:49:8c:89:71:61:a5:1c:4d:84:87:39:49:
16:c1:df:91:08:c8:7b:31:22:c0:35:8d:0d:11:cf:03:6c:aa:
4a:18:1a:53:0e:36:86:de:1a:03:73:7c:be:40:69:0d:de:19:
ce:12:2f:57:73:3b:47:86:49:c3:38:cb:3e:9f:2d:d7:2c:1b:
8a:de:da:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:25 2025 by rpki-client