Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0551172DA3211EFA58EB08D762E951A.roa
File: B0551172DA3211EFA58EB08D762E951A.roa (raw, json)
Hash identifier: OuOkcazBsxX4UJ5gwYiYRXupIAvZJfAqwRbRZ/QPBjU=
Subject key identifier: 9B:2E:E4:ED:A5:00:1C:44:FB:73:74:B4:F4:85:A9:11:45:AE:97:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0551172DA3211EFA58EB08D762E951A.roa
Signing time: Fri 24 Jan 2025 09:07:52 +0000
ROA not before: Fri 24 Jan 2025 09:07:47 +0000
ROA not after: Fri 28 Feb 2025 09:07:47 +0000
asID: 62240
IP address blocks: 154.195.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83131 (0x144bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:07:47 2025 GMT
Not After : Feb 28 09:07:47 2025 GMT
Subject: CN=67935868-9a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b8:0b:7f:59:c4:91:4e:ee:22:8f:2c:9a:25:
85:30:48:2c:f9:3c:38:65:00:af:bb:b7:af:14:66:
18:09:e0:ba:6b:90:a7:aa:b0:4d:61:d8:c1:c2:db:
a1:49:1f:77:27:8a:0a:8c:ec:5b:6e:c7:94:f7:ad:
99:7b:23:08:9e:c1:6a:8d:b2:9c:b8:b2:29:8c:f5:
90:14:32:09:95:8a:bc:5e:20:34:6c:75:61:eb:10:
3b:ab:e6:ea:b9:65:21:c2:a6:36:16:ba:9e:49:07:
9b:b8:4c:90:b0:6a:ec:93:d0:f6:31:12:a9:99:62:
cc:65:82:2e:41:e0:05:3f:ce:6c:06:25:44:8f:c5:
e6:d6:da:37:e4:c1:0c:22:5c:45:d6:18:f3:74:47:
f0:20:83:49:82:f5:19:d2:ba:dd:a1:ca:09:2c:de:
06:41:48:33:42:98:3a:a4:94:e8:b2:55:19:b6:b9:
90:cf:86:fa:68:71:d7:b5:81:6d:1a:2d:b7:97:2c:
5d:d2:18:14:0f:11:7a:c4:e0:94:5f:30:08:e8:bc:
4d:0f:71:28:f0:ca:73:59:7d:f8:30:21:5b:cd:58:
3c:c9:c3:93:0d:b9:78:f6:1b:54:ce:56:94:c2:15:
42:6c:a3:e7:de:da:8b:21:8a:06:78:e8:6a:2f:fd:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2E:E4:ED:A5:00:1C:44:FB:73:74:B4:F4:85:A9:11:45:AE:97:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B0551172DA3211EFA58EB08D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.129.0/24
Signature Algorithm: sha256WithRSAEncryption
52:fa:8b:8a:8d:17:b3:95:58:78:cb:cb:d2:3d:9e:4e:38:7d:
1e:e4:26:69:23:b2:87:53:5e:01:50:07:d1:60:02:b2:10:df:
a4:58:9c:c5:a5:a3:38:5e:f2:b4:bb:58:1a:1c:3a:aa:57:38:
3b:1e:61:83:a5:a3:32:96:db:d4:0c:91:67:59:5b:f7:40:64:
ac:b2:43:32:bc:bf:29:97:63:65:4e:14:00:f4:f7:58:6e:c5:
a2:88:51:46:9d:71:11:df:c5:99:11:c7:51:32:ab:25:56:dd:
fd:a9:ca:91:2f:f3:60:b7:be:33:0d:d1:92:5c:54:aa:16:c6:
15:d2:a6:ff:dd:ba:12:25:c6:b0:71:6d:04:bf:60:a7:37:96:
6e:e0:0d:86:25:84:74:1e:2d:39:1a:1b:0c:66:60:4f:1d:41:
5c:c5:94:76:6c:5c:68:b3:92:e0:77:ab:b5:ff:d4:01:60:bf:
9e:d8:5f:3d:68:d6:12:8f:25:d1:eb:38:9a:ff:ce:ac:0d:5e:
df:e6:c1:f4:a3:b3:8b:40:fa:7c:12:80:d7:91:19:bf:30:c7:
b6:12:d9:89:79:c3:dc:82:8b:df:32:e0:0b:38:05:b8:84:48:
c3:5b:6d:65:d7:c7:14:fb:b5:a3:26:5c:ba:80:99:32:77:52:
e0:2b:83:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:33 2025 by rpki-client