Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9195D9DAD9C711EFB4AC90AD762E951A.roa
File: 9195D9DAD9C711EFB4AC90AD762E951A.roa (raw, json)
Hash identifier: eI1ZoXjNOMwqiQxTdMtF8F23Z5qEYDwIZC6qUsRc0RQ=
Subject key identifier: 80:CC:93:2C:77:F1:70:53:EF:CF:64:C6:B4:D7:5C:04:76:3F:D0:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9195D9DAD9C711EFB4AC90AD762E951A.roa
Signing time: Thu 23 Jan 2025 20:21:04 +0000
ROA not before: Fri 24 Jan 2025 20:21:00 +0000
ROA not after: Fri 28 Feb 2025 20:21:00 +0000
asID: 62240
IP address blocks: 154.196.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82634 (0x142ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:21:00 2025 GMT
Not After : Feb 28 20:21:00 2025 GMT
Subject: CN=6792a4b0-7ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b9:12:f1:0f:f7:06:f5:2d:a3:aa:4f:19:a4:
27:9c:c2:a3:cc:a8:60:72:aa:5d:28:17:43:dd:51:
cf:8d:25:7d:0d:bd:c8:5c:90:3e:68:86:57:90:1a:
a3:6c:69:99:3b:3d:60:dd:a0:1d:4c:d0:6b:69:ac:
bd:8b:76:9f:a9:bf:26:95:af:a4:df:23:d8:fe:b4:
55:b7:2e:1b:d1:ca:e3:ff:5b:ce:f7:c6:75:f7:3d:
d8:9c:a8:6f:73:89:d8:b8:79:06:6d:e1:45:db:59:
57:90:8c:7e:a8:e0:da:a1:b4:88:a3:c9:93:df:6b:
ab:9c:5b:71:dc:bc:67:3d:67:23:6e:be:2c:13:f3:
df:0c:c6:05:d3:e1:2c:b7:2b:87:08:31:f3:e1:0d:
f5:2a:66:e3:df:da:c6:b6:22:67:e7:65:14:8e:0c:
45:f6:76:37:20:01:82:92:ed:09:8b:2a:b2:0a:5a:
e6:88:47:b0:55:e7:00:c1:91:8d:ae:a8:53:18:af:
f8:c0:b0:1f:e9:80:24:bf:63:ea:76:ae:2c:4c:d8:
d9:f1:07:aa:f7:11:a8:74:ce:0e:18:7b:0f:32:c2:
5b:ff:a7:91:d5:be:4b:f0:f1:d1:ac:b7:32:66:bc:
c1:35:8a:a7:a0:18:1e:d1:13:e5:aa:91:a2:7e:a6:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CC:93:2C:77:F1:70:53:EF:CF:64:C6:B4:D7:5C:04:76:3F:D0:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9195D9DAD9C711EFB4AC90AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.49.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:94:38:92:2b:9d:e2:1e:72:1d:bd:1e:bc:8f:70:14:77:42:
5f:e3:5c:96:7c:67:7a:f8:d2:76:80:d2:d8:34:cf:5e:0f:d5:
b9:db:5d:2d:72:11:ed:ad:25:a1:e6:c2:20:e1:47:6a:a9:f5:
7d:92:50:ea:0f:d6:0a:f5:6f:0e:d7:43:c1:74:e9:ee:22:7c:
a9:bd:8d:44:d8:63:a2:37:93:d8:d4:65:92:01:46:e7:69:d1:
4f:57:f7:1d:ee:bc:0d:6c:ae:56:3c:6e:1d:59:c6:96:8a:53:
7c:bc:42:c7:19:53:cc:58:3b:98:0d:a5:b6:e8:c8:28:19:aa:
77:54:b5:e3:e0:75:20:11:a2:ab:85:97:f1:f4:71:df:e2:d8:
29:6c:00:49:26:bd:40:31:ab:ae:39:48:78:3c:0a:5c:33:bf:
7e:08:ee:0a:9e:d4:36:ce:fa:33:84:c1:db:70:f7:e8:dd:a6:
d3:8b:81:f1:f2:20:1e:5e:b6:8c:fb:c5:3f:e4:fe:85:9d:6a:
7f:0e:96:33:6f:26:92:4a:80:9c:f9:bb:ca:ae:ca:f9:6d:50:
bf:45:50:43:ae:56:b6:0c:12:50:ce:04:8b:3a:9e:99:4d:88:
09:c4:93:de:a7:d4:73:a7:9e:f8:ac:7a:bc:c1:e7:a0:ef:b7:
ca:81:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:00 2025 by rpki-client