Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9041C8B8DA4511EFA03D5F8D762E951A.roa
File: 9041C8B8DA4511EFA03D5F8D762E951A.roa (raw, json)
Hash identifier: TgA6FCQbsU9socLCNyBB14o8VwdMv79r/FclqFZqim4=
Subject key identifier: 07:A8:5A:92:70:85:DB:C0:36:2A:25:DD:7C:CF:DF:2B:AD:54:E3:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014606
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9041C8B8DA4511EFA03D5F8D762E951A.roa
Signing time: Fri 24 Jan 2025 11:22:58 +0000
ROA not before: Fri 24 Jan 2025 11:22:54 +0000
ROA not after: Fri 28 Feb 2025 11:22:54 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83462 (0x14606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:22:54 2025 GMT
Not After : Feb 28 11:22:54 2025 GMT
Subject: CN=67937812-833d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:5b:df:2b:01:20:2d:49:d4:08:9b:70:07:
d1:b1:90:a5:f9:a7:a2:77:41:a3:ed:12:7d:8a:a4:
97:3b:78:32:29:08:63:f8:b1:87:83:6f:ba:ee:63:
11:5c:29:1a:0b:ed:df:43:65:55:21:04:1b:82:34:
f6:38:ad:a0:81:5d:63:7d:38:74:7f:ba:be:42:93:
df:b5:d5:2f:9d:12:89:b5:b9:3b:0f:09:22:48:92:
4d:ab:1f:20:b7:49:69:3d:6e:6d:4e:6c:8d:2e:76:
15:0d:cc:e1:6a:99:71:03:d2:18:0d:96:a9:3b:7c:
de:16:ea:0f:87:c8:7b:e5:17:eb:86:e1:29:a5:5f:
4a:93:4b:4a:1d:ee:d1:4f:d4:6e:d8:0a:88:28:57:
35:0f:ba:3f:91:52:6f:f0:3b:94:52:ee:f5:dc:65:
59:db:1d:c0:44:ad:a0:4f:b7:93:41:c4:a1:6d:82:
21:49:54:c2:a2:82:a7:b4:54:97:7c:64:c0:e2:1e:
4a:06:16:10:fb:45:2d:fc:3f:4d:89:30:07:20:aa:
a2:92:b3:1c:f1:22:71:00:dc:d0:c9:46:a6:84:35:
76:8a:32:69:20:f3:ae:a6:60:91:59:2e:b5:cd:2a:
a7:f1:f5:4f:cc:67:1e:c5:3e:98:f9:08:45:af:53:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A8:5A:92:70:85:DB:C0:36:2A:25:DD:7C:CF:DF:2B:AD:54:E3:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9041C8B8DA4511EFA03D5F8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6b:6f:09:95:ef:58:8e:d5:d7:0a:24:19:94:d0:9d:a3:9b:
da:5c:3b:e9:93:a7:93:d8:8d:66:6f:c6:33:bf:bc:ba:c4:b5:
19:57:5d:06:22:2e:ea:34:b1:a1:35:3d:95:63:d3:82:26:b6:
29:78:e9:d5:13:e4:4d:4a:f4:d3:9d:fd:aa:b2:8c:07:7f:09:
89:52:59:22:4c:e6:3c:7f:ec:9b:03:73:e3:35:6d:5b:74:01:
9c:06:6b:85:90:49:6e:6c:b2:3c:ce:a2:47:2c:f2:ac:e7:f2:
22:33:1f:6e:e8:c7:8e:75:84:23:fe:7d:f0:3d:48:20:dd:d7:
bd:68:e5:6b:bc:58:15:10:74:d0:c7:52:10:cd:65:7f:15:78:
c0:a0:27:de:92:4b:89:30:f8:e4:0f:05:8c:ad:39:9d:51:cb:
5c:f5:22:89:f4:79:82:08:ad:11:aa:e3:df:a7:27:12:4a:42:
58:7b:1a:c4:9c:d7:ed:59:d1:a3:da:0c:3d:b3:2c:13:22:68:
b5:08:b8:b4:9b:d8:48:19:4e:5c:dc:f7:7b:69:ca:ae:14:8e:
da:7b:7d:2f:0e:7a:27:f2:d5:ba:fe:b8:a7:f2:7f:7e:00:87:
4a:c2:4e:26:45:73:1d:26:e6:a5:ab:b5:71:38:88:0e:e4:84:
80:c9:34:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:52:00 2025 by rpki-client