Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD845378DA5911EFA6C63695762E951A.roa
File: AD845378DA5911EFA6C63695762E951A.roa (raw, json)
Hash identifier: 0XMZ30qslPJ3YzYIt6hAxp2G8esDHn2PjTUfkF6jUSg=
Subject key identifier: B9:0C:F2:E6:43:AD:1E:09:F3:3B:41:A9:0C:40:37:2D:92:81:42:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147AE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD845378DA5911EFA6C63695762E951A.roa
Signing time: Fri 24 Jan 2025 13:46:57 +0000
ROA not before: Fri 24 Jan 2025 13:46:53 +0000
ROA not after: Fri 28 Feb 2025 13:46:53 +0000
asID: 62240
IP address blocks: 154.195.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83886 (0x147ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:46:53 2025 GMT
Not After : Feb 28 13:46:53 2025 GMT
Subject: CN=679399d1-3119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:96:c0:17:05:1d:1e:a5:59:57:05:00:30:
64:b0:56:16:55:77:dd:7f:53:88:ba:f6:89:75:21:
7d:ef:1b:f5:2a:e5:44:e9:af:20:80:38:2c:d6:7c:
fe:c2:65:89:9b:5c:ad:f1:6d:d3:ce:b2:69:48:7f:
fe:47:99:67:13:e5:c9:b3:f2:b6:02:80:5f:f0:d2:
d7:66:ba:d5:88:49:f8:20:74:10:0d:44:e6:ae:40:
2e:2d:c0:e5:7a:ca:72:2e:bb:a5:87:47:b5:d2:f4:
e9:c0:f6:3a:ab:14:fa:13:3f:66:f8:39:eb:f7:53:
59:24:91:32:30:f0:93:49:09:b1:6c:ec:6a:bc:f9:
e4:9a:ff:75:f2:d5:45:cc:f4:8b:3f:1e:53:f3:f6:
c9:72:fb:56:b0:ca:83:11:1b:b5:55:9e:21:07:e0:
7b:ff:0e:77:75:1c:72:39:d4:a2:61:23:24:fb:9f:
22:21:94:03:0b:d3:5a:3c:48:af:9c:20:63:67:6d:
71:7a:e1:db:86:f0:ef:93:98:3f:d0:fc:06:5e:bb:
e2:01:a7:e9:93:33:01:64:77:48:c0:15:ac:72:d0:
1b:cc:e1:b1:67:3d:7d:9b:2a:86:a1:9f:90:6d:4b:
07:dc:53:23:7f:e3:31:4f:19:0c:dc:72:8d:50:bd:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0C:F2:E6:43:AD:1E:09:F3:3B:41:A9:0C:40:37:2D:92:81:42:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD845378DA5911EFA6C63695762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.16.0/20
Signature Algorithm: sha256WithRSAEncryption
76:40:db:0c:23:e1:80:73:db:98:46:22:cc:cc:b1:e3:4a:93:
fb:52:04:e7:72:6c:a7:db:dc:ae:45:af:ae:7f:40:ec:6b:b3:
2a:3c:37:2f:98:e2:2e:79:23:cc:07:3f:6e:87:63:ee:98:d1:
ac:c5:c0:2b:5c:c2:55:0d:61:11:05:02:89:d1:1c:da:e2:84:
e0:c8:f6:4a:39:9e:13:8b:4a:91:c9:ff:2c:6f:3f:4e:6e:93:
e9:02:e7:db:c2:bc:18:3b:b5:9d:b5:22:ca:19:1c:3b:d0:10:
16:ce:cd:80:07:af:ca:e5:3f:5e:d4:28:e4:02:b0:d4:7a:42:
40:f7:9c:28:df:2c:42:16:2e:82:02:49:32:0d:7f:01:c7:b5:
a9:b6:0f:c7:3c:30:0c:04:d4:7e:1d:aa:bb:d0:1b:af:8d:06:
fd:c0:cb:b0:3d:e8:ba:08:9c:cb:a9:88:b9:c6:ff:30:03:76:
55:47:0f:41:73:e9:64:95:7f:29:fb:4a:02:93:36:d4:99:f2:
a7:fc:56:f9:74:30:3a:d0:dd:a1:02:35:c2:ff:75:7e:dc:61:
71:f0:1a:b1:b0:14:4e:41:21:12:34:b2:00:b1:5c:11:19:30:
fc:ad:3d:8a:14:09:d8:9d:35:1d:ef:e9:0e:29:15:f6:9d:14:
a5:96:33:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:39 2025 by rpki-client