Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92911B14D97811EF81E723A4762E951A.roa
File: 92911B14D97811EF81E723A4762E951A.roa (raw, json)
Hash identifier: LRerZc5lk+AiBIuPMA5xR37R3hhzx/z2mRKFqVkfMSs=
Subject key identifier: 79:87:79:24:AE:D6:E9:26:67:DD:94:5C:70:7D:87:8B:1D:E6:64:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01415E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92911B14D97811EF81E723A4762E951A.roa
Signing time: Thu 23 Jan 2025 10:55:35 +0000
ROA not before: Thu 23 Jan 2025 10:55:31 +0000
ROA not after: Fri 28 Feb 2025 10:55:31 +0000
asID: 62240
IP address blocks: 154.195.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82270 (0x1415e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:55:31 2025 GMT
Not After : Feb 28 10:55:31 2025 GMT
Subject: CN=67922027-a9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:d7:36:34:01:4e:89:7a:a2:60:35:d0:6e:
8f:89:12:18:79:7d:bf:ef:09:58:d7:5e:e2:43:05:
dd:16:16:48:46:d4:2b:a7:11:99:1d:a5:59:2c:40:
21:f6:32:b7:2a:17:75:52:64:d8:30:60:e6:c8:73:
8b:4b:36:d5:7a:f8:ea:a8:c3:1e:d7:e9:f0:51:bc:
f8:c3:48:a4:d7:28:58:d8:af:25:c2:f5:d1:f4:46:
f2:82:e1:94:89:da:c0:93:9e:8d:19:ac:07:af:11:
0d:c6:87:ea:57:b1:81:58:e9:cd:4f:7a:6e:ff:47:
50:c5:0e:ec:ad:f2:fa:77:ae:31:89:04:c6:08:78:
cd:c7:31:3f:5a:0e:b6:73:eb:6a:ca:89:f5:93:49:
95:61:7d:27:49:d7:9e:bd:5f:5d:03:a7:f9:f0:42:
72:c6:4f:35:28:36:1d:b6:a7:a6:75:6b:f3:08:56:
42:92:5b:4d:01:2c:4f:ea:6c:4e:12:e9:31:b7:c8:
d3:25:d5:1f:90:66:de:3b:63:77:b3:8b:da:b8:7e:
6c:85:88:c7:8b:47:1b:29:e9:e8:db:90:bc:b4:8b:
51:c4:10:52:51:69:c5:bc:44:53:87:e9:b5:10:43:
57:20:99:09:99:f2:c9:67:f9:ca:63:44:29:f2:d2:
1e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:87:79:24:AE:D6:E9:26:67:DD:94:5C:70:7D:87:8B:1D:E6:64:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92911B14D97811EF81E723A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.141.0/24
Signature Algorithm: sha256WithRSAEncryption
01:72:3e:09:f6:8a:dd:e5:ba:f8:01:5e:15:b9:ab:ef:c0:40:
ee:93:53:5c:72:c0:2c:22:35:c7:e2:3b:37:1e:03:84:b1:b0:
79:6d:8e:2a:02:38:cb:d8:d7:82:83:ff:0b:90:05:f9:ac:07:
72:8f:86:63:dd:02:ed:e0:ba:b9:9d:ed:0d:ac:df:70:bf:c0:
13:6a:3e:04:a2:b7:62:72:09:9d:45:98:16:93:95:3c:89:57:
a1:50:7b:8d:20:a8:48:4d:0d:80:5e:8c:60:fe:e0:53:8a:a0:
15:9f:4b:e2:06:a7:7b:0a:91:b2:9d:50:50:02:dd:2b:c6:2a:
c0:f1:cc:8d:b1:d8:02:4b:f9:82:0b:d6:80:d8:4d:d1:c1:cc:
7e:d9:e2:de:c9:21:c1:47:25:7d:a4:8c:f4:3d:cf:47:48:23:
d5:3f:59:3f:0e:cc:c0:58:e0:b4:b5:6f:d9:6a:c6:05:2e:3c:
f2:06:e7:a2:25:ce:aa:f4:d5:28:ac:ea:05:e9:21:31:63:d7:
00:61:ca:11:cf:4d:59:bb:ca:67:78:11:f4:e4:db:90:7d:9d:
8b:4a:8d:1d:f9:be:73:f5:41:50:1a:0e:be:e3:db:25:c6:5b:
37:bb:60:64:0a:f2:c4:f0:70:63:4c:ac:2c:c4:3c:6b:75:44:
65:ad:80:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:24 2025 by rpki-client