Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9812EDC8D97411EF87AE848A762E951A.roa
File: 9812EDC8D97411EF87AE848A762E951A.roa (raw, json)
Hash identifier: HaW9Fdsx/BaHA3oKI4hBarQomSQ+ODX8RKLU7Sj8t8A=
Subject key identifier: BC:3C:7E:A0:95:42:25:23:26:43:89:EC:83:E1:4A:CF:1F:83:D8:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014128
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9812EDC8D97411EF87AE848A762E951A.roa
Signing time: Thu 23 Jan 2025 10:27:06 +0000
ROA not before: Thu 23 Jan 2025 10:27:02 +0000
ROA not after: Fri 28 Feb 2025 10:27:02 +0000
asID: 62240
IP address blocks: 154.195.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82216 (0x14128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:27:02 2025 GMT
Not After : Feb 28 10:27:02 2025 GMT
Subject: CN=6792197a-8801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:89:0b:23:e9:a7:b6:e7:d5:6b:55:84:f4:6d:
dc:54:06:ba:f8:0d:57:5d:1c:33:cf:ae:1a:ec:90:
a8:de:61:3a:4e:50:fc:b1:e4:af:30:f9:eb:da:de:
ed:7e:51:51:3c:42:b6:ed:22:07:79:9f:cb:ce:1b:
ba:a6:4b:e1:c7:5f:23:95:b5:15:a6:12:62:3f:81:
42:2f:3d:5e:51:14:84:6a:e5:2d:76:c5:7c:8d:74:
87:ab:bd:2c:97:52:fd:a0:bd:2c:62:29:39:29:62:
43:41:1e:40:5a:48:e8:50:a9:b9:d0:3c:ea:c7:bd:
cb:9c:a2:d8:87:e6:a6:44:2f:d0:b2:03:5e:6f:ba:
74:fa:cc:03:dd:66:1d:bd:a2:df:a5:29:d6:02:f5:
a0:17:6e:d2:20:4c:a4:53:06:62:3c:10:0b:d5:94:
77:6d:62:d9:81:aa:2b:4f:fb:b4:1b:19:03:06:11:
b9:6a:ac:eb:a4:f5:e2:b1:29:ed:be:74:40:48:c7:
08:42:a0:c8:7e:1d:6c:0a:3c:d8:8f:9c:b1:25:51:
76:a4:43:64:e5:e5:da:f5:fa:b5:02:aa:c3:52:96:
b7:36:32:38:ea:8d:62:1b:0b:ef:7b:d8:e2:c6:4d:
41:11:31:9e:da:da:cd:80:14:9e:80:80:36:44:39:
69:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3C:7E:A0:95:42:25:23:26:43:89:EC:83:E1:4A:CF:1F:83:D8:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9812EDC8D97411EF87AE848A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:60:b0:6b:ab:fe:60:0e:24:04:ed:8c:83:26:b1:cf:30:ea:
9c:15:4b:ed:80:e4:75:4d:70:fd:4f:04:76:e7:c7:a1:9e:f9:
a5:ef:7e:5c:3e:55:2d:87:39:eb:8f:ec:5a:64:25:05:98:33:
93:5f:37:1b:aa:0d:4b:1e:36:ba:cb:8f:76:c0:b7:05:cd:ed:
f8:ea:5e:ee:f6:b9:49:d0:f6:c4:37:80:ad:4f:a7:6d:ce:0b:
9e:f5:c0:34:29:0e:da:3c:0b:81:6d:84:f3:bd:17:9f:06:3d:
38:88:24:77:fc:76:33:e8:52:c8:14:dc:4c:77:63:bb:5a:ec:
8d:28:44:86:22:ce:48:84:17:76:d4:d7:2e:84:5a:af:c3:a3:
2f:d2:03:d6:07:61:33:19:80:3f:9f:bd:52:ea:c9:c3:44:b4:
dc:3e:2d:98:bf:d8:98:fd:ac:a2:c4:19:10:bb:88:52:1a:3f:
58:68:83:c6:b1:29:c0:36:e0:01:e8:cb:16:56:93:db:4b:23:
bc:69:86:16:23:37:b6:ec:34:e1:7e:a9:b0:f9:f7:97:53:29:
5d:5b:b8:58:4e:9f:a6:61:0d:0c:f1:cd:e4:f4:cb:ec:d6:28:
d0:be:02:d6:7e:63:9d:34:9b:13:de:f7:27:53:ec:f1:93:ff:
3a:19:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:02:18 2025 by rpki-client