Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9749FB3CD9D011EFAA2F4D6B762E951A.roa
File: 9749FB3CD9D011EFAA2F4D6B762E951A.roa (raw, json)
Hash identifier: 1/DILCXhocYH/Q6wwmCLlWdeQHAIvyfJUJoKtD9kV0g=
Subject key identifier: 16:C8:0C:EA:ED:E9:7E:2F:10:CB:3B:44:1D:F5:D6:3C:5A:41:9A:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01430D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9749FB3CD9D011EFAA2F4D6B762E951A.roa
Signing time: Thu 23 Jan 2025 21:25:39 +0000
ROA not before: Fri 24 Jan 2025 21:25:35 +0000
ROA not after: Fri 28 Feb 2025 21:25:35 +0000
asID: 62240
IP address blocks: 154.196.81.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82701 (0x1430d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:25:35 2025 GMT
Not After : Feb 28 21:25:35 2025 GMT
Subject: CN=6792b3d3-a8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:22:a0:08:c9:60:5a:ec:86:33:d0:5a:b1:
17:c3:c2:b6:ef:5d:63:5a:a4:b3:48:f8:05:21:b2:
51:d2:d6:79:dd:23:9c:00:0a:9a:aa:34:5e:e0:5f:
3f:74:e0:e4:d6:b1:e7:e2:fe:5d:71:98:24:ad:69:
2e:02:89:23:ca:c5:e3:80:f6:dc:9c:64:5a:e6:41:
5f:5e:06:4b:18:3d:c3:e4:fd:e2:4a:8f:fe:7a:a9:
b9:6d:21:10:7a:04:2c:28:54:45:87:b0:2a:6f:60:
22:98:1d:38:91:63:7b:ab:18:1e:3d:5c:56:52:4f:
cc:e1:ea:23:53:0e:a5:e6:1f:68:e2:7f:d5:17:59:
b1:59:54:9d:05:5d:60:25:74:af:78:bc:48:c1:a0:
0a:44:bd:25:fd:32:93:90:6c:78:13:7b:e1:e5:30:
8d:0d:d1:2d:f6:f9:07:ce:6d:6d:22:c0:07:9e:8e:
15:dd:ae:18:18:eb:41:90:36:ad:af:c3:ae:ec:c7:
3f:f1:8f:db:18:74:07:33:cc:7b:f1:51:7b:59:69:
49:8a:fc:5f:4d:cf:1c:08:62:fc:51:44:84:c1:a6:
aa:67:34:89:bc:d8:0d:49:72:c7:b1:a5:66:2e:ee:
18:dc:ad:93:c2:11:10:fc:21:7f:96:d5:a5:da:4f:
e5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C8:0C:EA:ED:E9:7E:2F:10:CB:3B:44:1D:F5:D6:3C:5A:41:9A:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9749FB3CD9D011EFAA2F4D6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:df:30:0a:73:fa:f0:25:92:74:c8:a3:51:f8:92:e9:db:c2:
64:9f:79:f1:12:2f:46:bc:65:bd:e1:41:e3:c9:fe:1c:9f:e1:
65:63:b7:f5:9f:0d:90:c9:6c:ae:49:cd:0b:1d:04:68:be:96:
0d:2a:a1:64:ee:2c:d7:e6:9a:6e:85:db:b5:b7:9b:12:27:11:
2f:44:b3:3c:d0:29:48:34:e9:ea:70:0b:74:5e:ec:d4:4d:2e:
22:da:b0:81:46:c7:2f:3c:fb:58:ee:22:62:03:21:2d:be:95:
39:d6:f9:eb:32:63:65:f5:33:d4:f7:45:56:f8:b4:9a:ea:31:
bc:e0:8e:88:10:54:36:1d:2e:67:95:68:34:91:68:4c:e6:17:
77:da:89:35:f3:5a:4a:11:be:0b:90:27:97:f8:c0:f2:5e:37:
a3:57:90:e3:38:c2:5d:b1:24:a3:c2:3c:86:1d:92:68:c8:17:
aa:5b:1b:04:08:33:3d:91:19:f1:71:2e:d7:96:2c:a2:8c:70:
23:cc:cd:b5:2a:66:d4:43:e0:c3:12:cc:3b:56:2f:b0:52:fb:
11:01:24:d5:ad:b8:ca:25:52:4c:aa:49:14:cc:09:f2:09:9d:
e3:76:dc:55:1d:60:53:d0:59:02:f9:3b:cd:59:17:05:5a:c4:
07:24:a7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:59 2025 by rpki-client