Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4ACB946DA4211EF81534D79762E951A.roa
File: A4ACB946DA4211EF81534D79762E951A.roa (raw, json)
Hash identifier: P8buouG9aP/NJ+OUkmaO1SdnlWLPSeR0dtNtxyAeDYg=
Subject key identifier: E1:C5:82:62:86:DC:C3:53:E1:23:41:86:11:3A:DC:AC:AC:E9:E5:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4ACB946DA4211EF81534D79762E951A.roa
Signing time: Fri 24 Jan 2025 11:02:04 +0000
ROA not before: Fri 24 Jan 2025 11:02:00 +0000
ROA not after: Fri 28 Feb 2025 11:02:00 +0000
asID: 62240
IP address blocks: 154.196.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83422 (0x145de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 11:02:00 2025 GMT
Not After : Feb 28 11:02:00 2025 GMT
Subject: CN=6793732c-5108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8f:0b:dc:d3:e7:58:56:b5:b3:43:f7:aa:43:
4d:9b:cc:a4:9d:91:33:1a:d7:58:28:d5:4c:64:89:
67:7e:38:a3:73:13:54:e8:0f:01:3a:a8:5c:e8:4b:
28:61:90:65:24:fa:df:82:2d:09:f1:c5:ea:ce:98:
84:a7:27:b5:81:ee:57:d9:8b:15:e3:f9:ab:52:89:
60:7a:c8:ec:3f:24:b4:a3:0c:d1:bf:f3:1f:d0:85:
4e:04:a2:3e:44:b8:a0:aa:27:34:a0:fa:c4:3d:73:
24:a8:e5:f4:f0:bc:1d:8c:69:0f:c8:0b:d4:1b:05:
77:24:20:99:93:62:8f:c0:18:06:c5:dd:b5:3d:c1:
e4:de:47:32:46:46:79:c7:82:bf:cd:0c:99:bf:26:
74:75:cb:1c:07:22:f9:8c:14:5c:e1:21:a3:b8:80:
38:ab:f8:a8:51:94:29:89:73:a9:81:e3:d8:de:37:
8e:61:66:eb:fd:b8:13:1c:58:06:d4:a4:70:36:c5:
b7:5f:ec:63:d9:54:24:9c:aa:29:bf:8a:c6:b8:84:
05:31:89:d1:25:23:0b:16:d6:c5:39:6f:f1:bb:0f:
0b:50:66:9c:4e:23:96:0f:96:3f:f5:53:72:73:5e:
e9:e9:e0:aa:cb:5f:7a:9c:07:fe:e7:e8:5e:af:ad:
c3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:82:62:86:DC:C3:53:E1:23:41:86:11:3A:DC:AC:AC:E9:E5:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4ACB946DA4211EF81534D79762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.72.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ee:d3:8d:4b:b5:c6:88:de:9d:88:b0:67:18:f8:53:50:8e:
e3:4a:8d:af:48:57:cf:be:d6:b4:11:5c:61:4e:e3:d7:70:59:
88:72:93:38:62:f2:dc:bc:28:06:d9:19:6f:6f:8e:84:35:f0:
55:79:86:86:1c:a0:88:30:19:8e:71:fb:99:34:07:98:c7:1d:
b4:0d:fb:84:be:c8:08:e2:f3:7b:af:71:71:0c:84:c6:3a:63:
b2:1b:6d:a4:d4:d1:72:1e:12:43:b2:54:c5:6d:ba:60:65:c7:
23:44:7d:bd:e4:cb:9f:47:45:a8:0f:f7:bb:51:03:fe:32:c7:
4d:81:7b:ef:34:7b:02:73:ff:57:46:a1:3c:72:47:1f:2a:30:
f7:50:19:a6:ab:53:f6:fb:58:61:b8:67:bf:02:bd:88:a8:c5:
e2:2a:07:4b:fa:54:ef:3d:99:81:f6:2f:b1:2b:0c:ff:da:0f:
96:4e:13:0a:0d:e2:86:e0:1c:e5:27:a3:f3:0e:40:73:a2:da:
91:81:d0:fb:b8:4c:52:7b:f3:c7:24:ab:2f:9c:fe:47:c9:5a:
5f:e7:ac:28:75:cd:8a:35:c2:93:ae:29:05:33:46:d8:9d:12:
5b:bf:0c:22:24:5a:68:3d:31:09:3c:89:0e:d1:85:f6:51:89:
28:d3:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:49 2025 by rpki-client