Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91189242D97F11EFBC8CD053762E951A.roa
File: 91189242D97F11EFBC8CD053762E951A.roa (raw, json)
Hash identifier: kNarITMxSQArzocU8OkMD3LdgBi4fVP9SWJcne85H+0=
Subject key identifier: DA:0C:53:B9:8C:33:5C:E3:6C:C1:F2:69:0E:1B:6B:F1:E5:4F:0A:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91189242D97F11EFBC8CD053762E951A.roa
Signing time: Thu 23 Jan 2025 11:45:39 +0000
ROA not before: Thu 23 Jan 2025 11:45:35 +0000
ROA not after: Fri 28 Feb 2025 11:45:35 +0000
asID: 62240
IP address blocks: 154.195.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82365 (0x141bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:45:35 2025 GMT
Not After : Feb 28 11:45:35 2025 GMT
Subject: CN=67922be3-994f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:22:4d:13:8f:bd:85:c7:7b:b1:29:be:71:63:
a3:78:f7:21:68:0d:2f:58:23:bb:d4:dd:a1:07:9e:
f6:26:ae:38:e7:aa:c1:af:33:db:ba:e5:68:07:27:
4e:6a:34:c3:5b:cb:b9:8a:db:cc:a1:19:01:94:15:
50:b9:29:ab:40:5b:fa:c7:0d:ec:5c:4d:41:20:54:
55:bc:26:cf:b8:14:33:ef:8b:46:90:76:42:36:4c:
34:eb:b0:b4:f3:8d:6a:6f:16:a7:22:a8:65:83:1f:
54:8e:14:34:a6:d0:c0:20:61:c1:be:9e:4b:a2:f1:
ba:e1:ee:89:b6:c9:f9:fb:f5:22:a3:c2:5b:88:8c:
f7:27:b3:17:fc:b2:5d:21:8e:5c:38:89:9d:d0:13:
0d:3f:f3:13:ff:b6:0c:e7:2c:ac:7f:a3:52:33:c6:
3f:55:42:60:4e:82:55:14:98:88:65:12:8d:53:80:
46:fc:95:7d:73:15:04:1e:22:40:0d:38:50:59:d9:
9e:0f:c7:11:fe:4a:0d:2d:7c:74:a7:0a:53:7c:95:
d4:76:42:29:9f:01:3a:bf:45:20:0e:66:a0:11:4f:
af:56:bb:c5:ae:24:e0:16:a7:00:75:94:3e:87:3b:
87:d0:ba:46:2c:23:0f:a9:af:5a:1d:0b:fe:b6:78:
40:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0C:53:B9:8C:33:5C:E3:6C:C1:F2:69:0E:1B:6B:F1:E5:4F:0A:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91189242D97F11EFBC8CD053762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.168.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d8:62:e2:63:eb:f4:f8:16:6f:af:89:e3:7f:a3:8b:4a:d6:
ef:2e:38:dc:a7:73:3a:15:3e:7f:45:d7:b2:a2:10:b9:6a:6a:
c4:a1:1e:26:1d:bb:24:00:55:04:e7:f5:e9:50:1c:d5:2d:69:
3e:a3:bd:73:c1:1a:3a:fc:5b:8d:82:a0:43:7c:45:10:af:9f:
08:b9:94:db:c0:63:73:14:d1:d3:ee:f9:5e:d8:15:70:f9:3c:
f8:25:42:8f:a9:c8:40:e1:de:71:52:18:e8:9e:58:64:15:42:
62:ae:08:49:8c:13:3e:6b:30:e6:17:29:f9:a5:66:ec:7b:f0:
64:df:40:ff:37:58:1c:a4:72:f6:56:00:65:2f:00:63:4c:61:
44:7c:09:00:ba:68:33:1b:57:2c:bc:25:06:fc:a5:c5:12:64:
34:71:4b:55:73:d1:9a:2a:59:54:f3:26:3d:ae:97:7d:eb:fb:
ac:75:c9:64:98:a7:78:16:da:89:92:67:c5:0f:13:4e:8e:16:
c4:f6:43:2e:7f:0b:af:e6:6a:dc:d7:ca:c6:ee:62:10:d8:fa:
88:c4:cf:41:ae:22:b0:09:08:c3:78:8c:fd:b0:56:e0:f7:e1:
a1:9d:d6:a2:3e:96:e6:51:c3:34:4b:ce:be:dc:b5:dc:50:f8:
31:ce:b2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:48:06 2025 by rpki-client