Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CDD52BED9C211EF9EDDBF8D762E951A.roa
File: 9CDD52BED9C211EF9EDDBF8D762E951A.roa (raw, json)
Hash identifier: 6lRrMKKEwBtqJ3tt/UnR7Nr1gnua5w8QC+wrsKbVFDk=
Subject key identifier: 0C:DC:55:3E:99:98:0A:C5:E7:C7:7D:F5:3B:E6:BA:43:9C:D5:64:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CDD52BED9C211EF9EDDBF8D762E951A.roa
Signing time: Thu 23 Jan 2025 19:45:35 +0000
ROA not before: Fri 24 Jan 2025 19:45:31 +0000
ROA not after: Fri 28 Feb 2025 19:45:31 +0000
asID: 62240
IP address blocks: 154.196.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82598 (0x142a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 19:45:31 2025 GMT
Not After : Feb 28 19:45:31 2025 GMT
Subject: CN=67929c5f-1ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1d:28:fc:32:e9:22:ea:71:1c:6c:f5:d5:9b:
ac:98:a7:bd:d2:96:b7:62:cb:98:39:0c:d9:c1:9e:
3e:15:e0:b6:8d:12:57:c9:ed:78:d4:1f:64:99:f9:
a6:d8:dd:68:9c:9b:8a:87:0a:52:e4:7b:51:98:e9:
e5:fa:92:bd:c0:04:b2:a9:1b:c0:f6:2f:95:f4:fe:
cf:d8:b2:de:b4:32:a6:14:dc:6f:a5:82:08:51:1a:
a6:d6:45:d4:e0:3a:fd:18:34:1f:7d:4b:5e:6c:a1:
57:a4:6c:5c:b1:e5:a0:a2:20:10:ee:92:76:a7:d7:
4c:9c:35:c8:a5:53:00:d9:4e:d1:f4:01:18:a0:85:
1d:41:2a:4c:d4:9c:a5:60:a6:6b:3c:67:97:d9:a7:
e4:4c:90:ef:ea:47:b1:a5:8d:df:5c:b8:8e:58:28:
0c:ee:57:d4:60:76:47:65:01:d5:1b:09:8f:12:c3:
80:52:7a:9a:e7:23:43:e1:e7:a3:f3:96:63:af:25:
51:44:9e:77:81:48:b7:de:99:d3:17:b6:fa:3e:3d:
ac:73:99:bb:ec:be:88:6c:5a:c5:c1:06:c3:7e:da:
79:49:35:f5:31:ab:d5:c9:80:f5:3d:78:b6:0f:e4:
19:6a:15:bf:fd:b2:7b:f6:3a:b2:02:2e:74:12:e8:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DC:55:3E:99:98:0A:C5:E7:C7:7D:F5:3B:E6:BA:43:9C:D5:64:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9CDD52BED9C211EF9EDDBF8D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.31.0/24
Signature Algorithm: sha256WithRSAEncryption
54:06:50:2f:21:93:ae:4d:d5:ee:c2:6c:79:3b:de:a1:3d:79:
fb:b8:c1:f2:90:c1:5e:ef:b9:08:11:b4:e0:ef:13:c4:9b:0d:
54:61:8b:ef:36:44:a3:52:49:91:2f:03:21:2e:2c:83:52:6f:
a0:01:0b:9c:9f:1e:27:37:ae:36:a5:af:ed:06:c7:e6:cd:e5:
77:a8:5a:f2:1c:35:20:35:8a:53:e1:f7:54:ee:04:6b:fd:b8:
ca:81:8a:bb:94:1b:8b:e2:56:c2:04:c9:6a:63:d8:77:73:c7:
4c:95:8e:12:c3:db:4f:73:43:fb:e8:c8:05:46:14:9a:a3:4b:
b9:f2:ba:2d:ec:bd:6f:59:3e:ad:b5:e9:d3:9a:f0:9e:da:5f:
54:fc:8f:e6:eb:3d:b5:b0:c7:9b:c5:a8:02:5c:40:c7:b6:63:
6e:02:21:74:ab:2d:7b:03:f6:09:3b:8c:d2:3a:93:a7:b9:09:
df:c5:7d:ef:f4:30:e0:7d:7b:83:61:5b:32:f3:3c:f4:e1:a5:
2b:69:56:37:f7:6d:1e:9c:b8:4c:6c:3e:61:32:55:f0:c9:ae:
b6:b8:67:0a:5f:d4:e8:f6:d2:cf:5f:96:74:f0:ac:e6:9f:26:
29:d3:da:6a:e8:c0:85:35:a0:21:3e:54:f1:44:eb:4d:45:64:
d8:c5:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:37 2025 by rpki-client