Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C245C6D9C411EF8D36DB9A762E951A.roa
File: 88C245C6D9C411EF8D36DB9A762E951A.roa (raw, json)
Hash identifier: 86S4L6SaxyfCAaaZ5fAp9OtVd0V3dGMju3s5b/p+BU4=
Subject key identifier: 78:E1:01:9A:C8:0B:84:89:A7:0B:35:DE:C2:AC:E9:37:1D:94:86:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C245C6D9C411EF8D36DB9A762E951A.roa
Signing time: Thu 23 Jan 2025 19:59:20 +0000
ROA not before: Fri 24 Jan 2025 19:59:17 +0000
ROA not after: Fri 28 Feb 2025 19:59:17 +0000
asID: 62240
IP address blocks: 154.196.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82612 (0x142b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:59:17 2025 GMT
Not After : Feb 28 19:59:17 2025 GMT
Subject: CN=67929f98-5578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:15:32:5e:79:91:81:83:2a:9e:4a:62:c2:21:
f3:a9:c0:1e:bd:57:a6:b6:a5:af:13:e9:2d:a1:92:
4c:1e:ed:5f:d6:63:6b:1d:26:7d:47:f1:fa:d7:e4:
2e:52:99:31:78:ca:47:87:89:a4:6e:f8:f3:c3:f3:
2a:74:83:51:5f:b6:39:68:2b:78:43:7e:3d:5d:53:
6a:f0:14:8d:2a:21:ff:1b:4c:5e:91:49:cd:78:2e:
4b:2f:19:68:7c:40:fd:a6:dc:93:78:f1:30:fb:f7:
01:1f:19:31:36:1e:77:a5:fe:2e:2c:49:9d:7d:d5:
87:16:a5:a2:f9:87:40:01:be:18:64:04:1a:ad:78:
19:79:a3:fa:78:e5:d0:e5:c5:73:2f:de:ce:34:d4:
99:f1:fc:5f:7f:0b:23:ef:c6:41:9e:0a:a5:b2:40:
f7:80:00:e3:49:3c:2d:5f:2d:a4:92:a3:fb:22:e3:
a9:7a:45:4a:1a:70:75:3d:82:de:77:4d:af:96:61:
9f:bb:c3:95:d6:c5:9f:dc:6c:64:c0:d0:d3:ae:d9:
8d:56:43:59:a3:73:f9:61:6a:a9:a8:5e:ad:0a:6d:
95:75:30:64:d3:8d:8a:6b:b9:80:37:d7:ed:e3:97:
42:88:05:e5:f1:6f:db:e7:d7:7d:28:a1:f0:92:cf:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E1:01:9A:C8:0B:84:89:A7:0B:35:DE:C2:AC:E9:37:1D:94:86:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/88C245C6D9C411EF8D36DB9A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.38.0/24
Signature Algorithm: sha256WithRSAEncryption
02:34:16:72:43:3e:d7:5a:0e:a6:3c:49:de:d6:0c:72:25:32:
eb:26:e8:8a:26:67:c0:54:29:84:1d:b4:52:67:ac:b8:f0:4e:
04:8a:17:bf:4f:b0:b5:34:c2:26:64:46:07:73:34:13:ff:5b:
5a:5e:3a:1b:34:ea:b3:c5:32:66:41:fd:33:86:02:6f:f0:d9:
c8:69:cd:2e:4f:81:ac:c1:d2:7c:fb:7e:3b:93:3a:17:fe:e9:
60:d7:dd:6a:f4:75:e5:fb:11:85:d2:db:e5:83:72:6c:ef:2c:
17:aa:f2:fb:94:57:0b:74:14:cc:d4:a0:bc:13:48:4b:a7:54:
93:f3:36:cb:7c:08:9c:7f:0b:95:99:5d:84:7b:eb:33:f0:67:
11:0b:65:e0:62:6c:ce:83:2c:2b:f8:cd:da:a8:73:8a:2f:25:
02:b5:47:d3:f8:29:a8:c7:a5:bf:7c:77:08:45:35:c3:9d:a5:
b2:73:31:6b:5b:3b:73:b4:86:4d:7c:a9:2e:8a:7d:e4:f6:cb:
19:85:92:d0:43:a8:ca:56:33:5c:e5:a3:48:31:14:45:55:e0:
60:f2:ac:b9:50:cb:14:a4:ea:d0:bb:77:72:7c:de:68:e5:46:
ae:d2:39:9f:3e:73:9b:e4:e7:43:0d:c1:50:a9:f7:83:8e:43:
05:8f:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:47 2025 by rpki-client