Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D78645EDA3811EFA2BB7BB3762E951A.roa
File: 9D78645EDA3811EFA2BB7BB3762E951A.roa (raw, json)
Hash identifier: Mw9b/Q3kyOszvTAPi+xI+NiyTN8a9zX4fevCJb5KKfY=
Subject key identifier: BF:10:F1:EA:00:DC:8C:48:05:C3:3F:42:02:E5:3C:36:EF:7F:B0:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014523
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D78645EDA3811EFA2BB7BB3762E951A.roa
Signing time: Fri 24 Jan 2025 09:50:17 +0000
ROA not before: Fri 24 Jan 2025 09:50:13 +0000
ROA not after: Fri 28 Feb 2025 09:50:13 +0000
asID: 62240
IP address blocks: 154.196.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83235 (0x14523)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:50:13 2025 GMT
Not After : Feb 28 09:50:13 2025 GMT
Subject: CN=67936259-e555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:0e:dd:99:90:c8:80:59:9d:94:43:5f:65:
10:12:9d:54:28:34:6c:47:be:4d:00:e2:ce:89:72:
24:fa:3e:22:36:a0:7c:d9:08:87:7a:fe:d3:ff:7d:
90:f4:5f:62:38:d6:8c:ad:29:b5:1d:03:cc:96:c9:
8f:2a:1a:fb:09:ac:11:1e:61:63:8d:81:2f:5f:47:
ff:fb:34:d8:82:38:cc:a3:f6:d6:ac:b3:97:14:f1:
73:e3:91:2d:14:9f:e4:de:68:99:34:35:8e:5b:47:
bd:66:50:3a:7e:4e:c1:ab:eb:a0:79:5f:50:68:ee:
c8:3d:aa:fb:15:29:fb:81:2f:d5:6f:26:28:94:1f:
bb:32:6c:aa:26:1b:be:ee:e7:c8:0b:f7:20:db:19:
01:7c:24:4a:ed:b1:d1:ae:8c:f4:c3:99:75:a7:f4:
df:80:c1:09:ab:d0:d4:82:33:21:11:38:78:05:de:
a6:be:b1:41:11:a2:47:c0:b4:61:20:75:cc:0d:e4:
6f:78:f5:1a:e4:5d:5f:e9:1c:ab:d6:fa:a3:da:46:
da:63:eb:06:30:d6:9f:7a:cb:0c:cd:a4:b1:c7:6f:
ce:31:ad:40:33:7b:31:c3:da:ce:1e:f9:36:8e:2d:
40:93:15:93:71:c0:ab:4f:96:cc:78:9d:fe:2b:3c:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:F1:EA:00:DC:8C:48:05:C3:3F:42:02:E5:3C:36:EF:7F:B0:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D78645EDA3811EFA2BB7BB3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.35.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b5:71:cc:24:a1:c0:d7:33:31:41:33:7e:63:95:2d:3a:ea:
46:9c:e1:2b:9c:af:c1:de:86:df:9c:5e:2b:f6:49:82:3c:90:
6b:2c:9e:f6:8d:47:fe:d0:67:14:bc:6f:89:86:d8:c8:d2:44:
43:12:3c:8d:1f:08:14:b8:44:1f:48:40:a6:65:16:86:79:04:
43:ec:ff:13:7f:8f:27:7f:2a:29:fa:f9:6d:0a:ad:2f:49:76:
1b:36:ac:7b:62:eb:0d:63:f0:eb:67:77:fe:a4:da:4b:c2:db:
64:e0:3b:11:f0:56:60:c0:65:32:d4:d0:b6:73:86:0d:2b:7d:
2b:bf:86:3b:62:9e:60:82:4e:23:38:bc:43:df:1d:c2:72:14:
2d:27:59:03:4a:45:d9:eb:4e:ed:34:dc:f8:1b:e4:35:8a:9f:
9e:62:94:c1:60:13:ea:12:67:d1:a1:19:62:d6:b2:62:c8:df:
b6:79:d6:d0:5f:52:f7:7e:56:06:5a:bf:ff:c8:cf:e1:96:75:
61:27:6e:86:4d:f0:be:55:79:4c:76:73:bd:01:52:f4:d8:d2:
8a:3d:c2:a2:7c:a9:a3:80:27:19:75:24:62:e8:24:1e:34:bd:
26:43:ac:ab:27:3c:e4:bc:21:8c:3f:9a:ba:fe:72:1d:a2:f9:
34:d4:6a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:35 2025 by rpki-client