Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8443A36D9C811EFB7300CB6762E951A.roa
File: A8443A36D9C811EFB7300CB6762E951A.roa (raw, json)
Hash identifier: Cl9z7eqkoG5ehQfpU1hk2DS7ZPmVLNKVkid3MRQvrmY=
Subject key identifier: 08:1B:58:84:C5:3B:75:FF:28:6F:49:35:A8:E3:69:C8:03:B8:3D:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8443A36D9C811EFB7300CB6762E951A.roa
Signing time: Thu 23 Jan 2025 20:28:51 +0000
ROA not before: Fri 24 Jan 2025 20:28:47 +0000
ROA not after: Fri 28 Feb 2025 20:28:47 +0000
asID: 62240
IP address blocks: 154.196.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82642 (0x142d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:28:47 2025 GMT
Not After : Feb 28 20:28:47 2025 GMT
Subject: CN=6792a683-4517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:ac:c7:e3:34:71:de:e9:32:10:9c:ff:42:
01:f1:f0:65:a9:5c:5b:17:64:75:d7:c0:27:d4:ca:
9f:3f:32:f6:f5:25:42:24:a0:84:ec:e6:0f:70:19:
80:26:2f:14:c0:30:8b:99:ca:cb:33:0b:48:05:0f:
9a:e3:ae:90:89:22:e8:db:82:e4:c6:7b:17:ab:f8:
68:1f:3f:d8:ee:67:02:0c:f5:bf:7b:a9:82:12:cf:
31:2a:cd:9f:ce:ff:ab:47:c1:e6:52:12:6b:57:ab:
10:6d:27:39:b9:59:04:8f:78:93:9c:fa:a5:17:34:
5d:6d:59:26:9b:86:82:ea:c3:52:6e:65:1e:51:eb:
21:af:34:e3:57:3c:ba:ba:b7:37:60:d9:9e:28:08:
64:66:c8:5c:13:dd:7c:32:49:3f:6b:87:01:f2:49:
58:23:38:8f:e1:a8:e0:1f:12:40:39:fb:e6:ba:f7:
99:ac:aa:f1:54:c9:56:10:41:15:18:f5:bf:4a:9a:
f0:aa:8d:94:1d:b0:2a:b5:80:e3:2a:9d:77:ce:b6:
77:53:43:e5:42:9d:91:ff:38:fb:80:40:36:97:da:
95:e1:c9:90:c3:a3:74:10:7b:93:ec:c6:9a:e8:0a:
0e:c9:33:d1:f1:5c:82:b1:0c:27:b3:0e:8f:5a:c1:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1B:58:84:C5:3B:75:FF:28:6F:49:35:A8:E3:69:C8:03:B8:3D:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8443A36D9C811EFB7300CB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.53.0/24
Signature Algorithm: sha256WithRSAEncryption
38:36:44:b0:4c:29:87:5b:d1:0d:c4:a6:20:74:7e:96:ef:90:
42:e7:60:d2:2d:74:93:ea:5a:53:60:b0:b6:25:bd:e8:20:ef:
8a:3f:56:f2:2b:f2:ce:53:a3:05:15:d7:e1:61:c6:0a:f0:2a:
f3:f9:e3:0f:2d:5a:8e:19:e0:5f:fc:94:3e:37:0a:7d:7c:3a:
e2:3d:c0:9a:1f:ed:07:5a:09:fc:4a:4e:07:79:2f:d3:51:50:
1b:08:bb:a5:ac:ac:c7:77:ac:3f:c2:70:ca:65:81:04:f2:99:
3c:4b:94:ee:35:fd:78:d6:3c:df:b8:b5:33:14:93:8a:aa:e8:
94:20:b1:46:c4:c0:53:25:de:d5:1d:dd:70:44:46:9e:3c:c3:
d4:ac:3a:1f:06:6e:e3:84:5b:91:f2:62:d4:06:03:1e:93:36:
2f:96:91:8a:1a:a1:f7:71:22:65:80:29:8d:66:00:ea:6f:22:
03:a0:3e:25:9f:00:86:b7:db:30:d8:14:7b:9f:c4:93:48:81:
e5:91:3d:9c:ff:64:c4:1e:79:d4:51:e8:34:67:34:dd:28:0c:
4a:3b:00:3c:50:a9:cd:23:f5:8d:1d:56:c8:e6:dd:90:0e:a1:
77:e5:a4:9e:b4:5b:4b:e5:02:35:1c:6e:02:36:3d:2e:e4:34:
04:1e:33:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:46 2025 by rpki-client