Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/925C4C94D98311EF8EB80370762E951A.roa
File: 925C4C94D98311EF8EB80370762E951A.roa (raw, json)
Hash identifier: O8GZyy30zu8htXxShc90hDCsyOf0Qc93wwsNcHCpsoo=
Subject key identifier: 35:A5:5B:F3:79:C3:98:32:58:70:39:85:D8:67:3F:68:C1:65:49:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/925C4C94D98311EF8EB80370762E951A.roa
Signing time: Thu 23 Jan 2025 12:14:19 +0000
ROA not before: Thu 23 Jan 2025 12:14:15 +0000
ROA not after: Fri 28 Feb 2025 12:14:15 +0000
asID: 62240
IP address blocks: 154.195.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82428 (0x141fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:14:15 2025 GMT
Not After : Feb 28 12:14:15 2025 GMT
Subject: CN=6792329b-c379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:1f:f9:b0:d4:17:99:8a:8f:13:04:da:e6:
8c:a2:c9:a7:3b:4b:9f:4e:3e:3c:b0:e3:e7:3e:09:
1f:e9:11:2f:74:81:6e:40:90:ab:0d:62:f2:e9:9a:
09:a3:6a:b9:57:23:b4:b2:2b:00:9a:40:fa:b3:27:
60:f9:79:29:34:35:d8:44:e2:a2:21:6d:be:88:af:
ca:fd:0b:48:bb:36:01:39:c5:cb:cc:c6:5a:6d:56:
37:6a:21:06:b4:e2:a5:71:e1:f9:70:61:e1:9b:dc:
bf:a6:f3:9d:7a:a3:cc:63:3d:72:be:9e:15:f6:41:
87:99:fd:b0:42:e9:30:f6:00:a2:7e:bf:02:a2:76:
90:c8:2a:34:1a:d6:ab:a0:ec:34:a0:c6:97:93:35:
79:d7:13:00:8b:c6:d0:58:40:c3:65:f0:2d:cd:e0:
fa:90:72:22:87:46:02:ea:83:da:2d:32:ab:e1:64:
59:db:d1:01:58:95:db:a7:5a:be:3f:ff:e9:0c:ea:
6e:e2:53:14:19:7e:3f:3a:cd:65:95:f1:e1:ad:a7:
6c:fa:c3:bf:37:c3:81:0b:df:88:53:35:9b:15:85:
c7:50:7f:b3:a6:25:3c:b4:3a:88:2d:3b:b7:e7:e0:
6f:93:bd:37:6d:7b:15:de:b9:d7:48:b4:92:fb:f9:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A5:5B:F3:79:C3:98:32:58:70:39:85:D8:67:3F:68:C1:65:49:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/925C4C94D98311EF8EB80370762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2a:af:0a:b8:89:3b:94:1c:a0:54:92:49:94:90:42:8d:f5:
4f:2e:20:a0:29:12:0c:44:a2:cf:d7:97:17:8d:0a:ee:21:af:
de:ef:aa:a8:07:20:a3:ba:4c:8d:ce:35:6a:02:55:25:87:af:
2e:ad:0f:77:32:da:b1:1a:27:39:86:cf:5b:62:8d:02:9c:63:
a1:cb:c5:e3:25:c1:1c:ee:f5:2d:20:21:9c:ab:a3:6f:52:94:
c0:cc:01:04:d2:48:6f:0d:d9:b6:14:1e:74:68:f2:37:2e:8c:
34:44:2e:ee:bd:47:08:0f:a1:30:8f:52:44:5f:e6:a0:91:5e:
4d:59:bd:71:6c:0c:68:2a:b1:27:91:6f:11:ca:87:40:93:65:
7b:da:82:42:88:59:ab:9e:70:d9:b7:62:66:de:f1:f1:d9:0a:
f5:59:bb:35:71:0a:07:1a:47:9e:9e:a5:c4:51:60:cd:07:e2:
20:15:49:c9:75:33:26:4c:5c:2a:62:7f:3b:53:b5:77:cf:4f:
61:93:58:29:ab:37:0b:1a:23:26:e7:a6:18:77:7a:f1:32:df:
f5:37:53:1b:39:ee:3c:51:fa:99:c5:e7:32:03:37:ac:c3:fe:
cb:25:4c:38:d8:f7:a3:d0:8f:79:da:8a:63:a7:d1:da:47:8a:
72:f6:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:17 2025 by rpki-client