Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2782AC2DA4A11EFBF5A25AE762E951A.roa
File: A2782AC2DA4A11EFBF5A25AE762E951A.roa (raw, json)
Hash identifier: e6+2HBQyI9QGH05zrsuaEGIF/T372AMjxhChgkgBD/Q=
Subject key identifier: 97:88:82:8E:C6:94:B3:02:14:58:C9:87:3D:39:73:DC:87:B6:FF:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014665
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2782AC2DA4A11EFBF5A25AE762E951A.roa
Signing time: Fri 24 Jan 2025 11:59:16 +0000
ROA not before: Fri 24 Jan 2025 11:59:12 +0000
ROA not after: Fri 28 Feb 2025 11:59:12 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83557 (0x14665)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:59:12 2025 GMT
Not After : Feb 28 11:59:12 2025 GMT
Subject: CN=67938094-93e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:c0:e6:13:f8:ff:d3:99:39:12:55:d9:57:
e5:9b:14:df:f9:51:8c:4d:39:8b:30:f7:e5:1a:db:
b4:40:1f:8e:ad:5f:4c:a2:e9:cb:9c:7c:71:08:df:
2e:ef:1d:b5:87:23:91:a9:0b:12:5e:e9:3e:43:5b:
d4:84:f6:b5:39:84:50:cf:d6:42:ff:51:b9:96:e0:
ba:77:49:37:81:b7:46:c6:32:3b:2e:67:62:af:54:
65:45:55:ac:7b:7f:25:e8:05:85:83:59:af:63:c1:
3b:64:37:14:60:5b:65:74:85:15:ac:27:48:4d:5a:
c4:c4:1a:ed:9b:25:3b:74:34:b9:79:67:38:14:16:
8d:b0:c7:1e:6a:c7:22:2d:8e:cc:f4:17:76:fd:31:
d4:a9:88:6b:9e:a1:2b:46:c0:4c:3b:e3:9e:c4:82:
fe:4f:f9:eb:d0:97:cc:ee:44:8a:ae:3f:9a:57:25:
90:f7:a4:db:67:02:42:63:ad:ef:aa:e3:d2:3c:f4:
d4:1a:d7:a7:1d:55:8a:7d:69:4e:de:a7:35:93:e3:
9a:b3:de:3d:f0:79:0a:13:e5:5a:36:6a:9e:60:c9:
d1:55:4c:88:34:95:d8:a4:1d:2c:8b:83:d6:ca:9a:
cc:ba:68:59:a6:a2:21:c2:32:78:0c:e5:fa:06:7a:
f5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:82:8E:C6:94:B3:02:14:58:C9:87:3D:39:73:DC:87:B6:FF:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2782AC2DA4A11EFBF5A25AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:6a:b7:2d:86:b1:91:2c:c1:c9:63:39:07:0b:c4:93:f0:60:
07:2b:f6:0e:17:3b:85:c4:3b:cf:bd:a6:73:6d:d8:8d:fe:be:
9e:b9:f8:b2:21:f8:7a:d7:ab:0c:70:50:48:b6:27:45:76:89:
f1:05:20:ae:00:cb:c1:db:36:48:45:7e:92:25:eb:2c:29:f9:
38:25:9f:28:c1:85:bd:cd:e0:36:09:2c:08:c9:1d:4a:c4:05:
d4:c1:fa:7b:68:17:80:33:70:8b:ad:6b:a3:66:84:5e:c3:bf:
9d:99:d7:b4:27:f5:53:89:0a:4b:1f:45:34:18:2f:d4:22:13:
2e:3b:80:da:d7:ab:1d:51:a2:e2:df:d9:e1:83:31:84:f8:0e:
af:e5:ad:46:c7:57:4a:80:45:c8:2b:36:c5:03:68:b9:c1:ad:
f9:46:b6:58:75:ee:66:c4:aa:2e:8a:a8:ef:81:6a:82:d7:e1:
8b:44:4a:67:32:90:de:bb:d6:98:9d:c2:2b:5d:41:cd:06:a3:
80:1d:5b:31:3c:99:bb:81:7e:c1:41:4a:b0:6b:44:25:a1:bf:
1d:bd:76:0a:d9:b3:86:29:5d:1b:aa:f2:fe:eb:80:5d:32:84:
7a:4c:a0:9a:b9:74:6a:9c:ab:9a:6e:c9:fb:ac:e1:b4:a8:20:
79:55:93:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:29 2025 by rpki-client