Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D5BF82D97A11EF92E9EBB1762E951A.roa
File: A2D5BF82D97A11EF92E9EBB1762E951A.roa (raw, json)
Hash identifier: YPlTWEXpQPSOs2Ea5g3ZCldS9r4qGDVRctDwBg6feMQ=
Subject key identifier: 23:AE:71:DF:DD:3A:45:0F:7C:E8:E6:0F:EE:BA:10:D1:FD:DC:34:34
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D5BF82D97A11EF92E9EBB1762E951A.roa
Signing time: Thu 23 Jan 2025 11:10:21 +0000
ROA not before: Thu 23 Jan 2025 11:10:18 +0000
ROA not after: Fri 28 Feb 2025 11:10:18 +0000
asID: 62240
IP address blocks: 154.195.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82304 (0x14180)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:10:18 2025 GMT
Not After : Feb 28 11:10:18 2025 GMT
Subject: CN=6792239d-9ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c8:18:eb:5f:18:6c:6f:41:f1:c3:49:47:c3:
02:e2:eb:15:d8:cd:0d:72:67:d3:c7:35:ff:25:82:
b3:5c:16:80:2f:81:17:b7:18:3c:17:a0:e8:16:18:
db:81:2c:78:9a:b3:c9:cc:d2:ad:68:2d:af:8d:eb:
b0:5a:cc:bc:02:1f:74:24:5c:4b:fa:9d:e3:6c:44:
63:d9:e5:09:ed:69:df:94:47:e7:59:4d:30:b8:e9:
cc:47:97:46:9a:82:f8:ba:be:89:3b:72:01:ee:31:
04:7f:d3:20:0a:8f:7b:f7:12:30:16:70:26:ed:c0:
d0:56:59:81:88:da:07:00:c9:0c:61:ea:60:a9:2c:
07:9f:64:aa:31:8c:c8:45:3f:11:4d:3d:16:42:2e:
bc:7e:a5:73:9b:f7:fc:36:2f:0e:94:5f:0a:b3:e8:
21:79:4b:9a:ec:2e:ef:f2:25:38:b9:e0:49:a7:55:
02:c9:b3:6f:c6:fa:cc:8d:e5:97:18:b8:0f:86:e8:
97:70:7a:20:d1:38:0a:2b:d6:42:94:08:50:61:9c:
d9:55:f5:e0:43:ed:86:ac:5f:58:49:60:3a:1b:47:
68:72:26:d6:d2:5d:0b:77:7c:07:c4:25:4d:f8:9f:
d5:fb:61:92:dc:c6:90:1e:68:7d:5e:14:cc:dd:79:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AE:71:DF:DD:3A:45:0F:7C:E8:E6:0F:EE:BA:10:D1:FD:DC:34:34
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2D5BF82D97A11EF92E9EBB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.150.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e1:ea:dc:f8:d1:ae:96:5d:ea:03:6e:12:78:7d:b5:02:de:
23:9a:bd:9d:a3:65:8c:ae:0f:5b:b2:e9:94:d4:c9:fe:39:00:
51:3a:95:ba:a1:37:9a:f0:d1:48:13:ef:62:38:f7:44:72:82:
7b:85:56:c2:19:9e:b9:1b:ae:be:1e:af:67:55:12:8f:db:a3:
95:ad:47:9e:c8:00:17:1a:3f:f9:e8:1a:12:ac:f6:a6:3f:d4:
17:38:88:31:9f:d5:1d:b6:e7:44:03:80:20:d5:79:77:7c:8e:
65:a7:b4:08:4d:f8:3f:4c:57:2b:8d:00:92:db:4c:0f:3f:c7:
7a:09:88:c6:00:f8:95:af:fd:eb:cc:07:e0:f4:04:8c:ed:16:
b6:97:9e:16:d2:10:2a:5d:a3:b7:46:eb:84:99:a1:8f:d9:af:
8c:24:b1:64:d9:11:27:74:87:4b:11:05:c3:d7:ff:05:4a:59:
33:a8:c3:04:ee:35:e0:b0:f0:33:3e:30:ec:38:72:25:84:b3:
88:f9:0d:68:11:5e:59:f5:25:54:9a:a6:11:14:e7:53:ee:f9:
61:42:c0:ba:e6:bf:34:ce:d8:e0:e2:76:ae:7f:30:33:fb:41:
61:4d:79:57:de:c6:f9:6d:17:0b:57:1d:8e:fd:59:fb:a6:c7:
fe:cb:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:21 2025 by rpki-client