Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B40F94F0DA3B11EFAEEE8B4B762E951A.roa
File: B40F94F0DA3B11EFAEEE8B4B762E951A.roa (raw, json)
Hash identifier: fCaFAttvt7NAAd6rQQPcZ7o0nN1RBQhw5tb28vaW2wU=
Subject key identifier: 21:CF:9E:2F:DE:DB:EA:A5:8A:E3:45:CB:64:12:E5:8B:6B:20:ED:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01455F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B40F94F0DA3B11EFAEEE8B4B762E951A.roa
Signing time: Fri 24 Jan 2025 10:12:23 +0000
ROA not before: Fri 24 Jan 2025 10:12:19 +0000
ROA not after: Fri 28 Feb 2025 10:12:19 +0000
asID: 62240
IP address blocks: 154.196.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83295 (0x1455f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:12:19 2025 GMT
Not After : Feb 28 10:12:19 2025 GMT
Subject: CN=67936787-f8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:4f:0a:8a:ef:26:02:03:35:09:7d:79:d7:1f:
70:14:36:7b:48:20:ab:e7:ae:68:99:c1:8a:b3:d4:
ac:7d:12:8c:61:21:3b:ea:74:a0:29:01:66:c7:62:
8a:57:3e:97:de:03:7c:42:42:5a:f9:a2:25:8f:f9:
5d:60:f0:6a:90:97:5a:21:3f:85:d4:cd:ca:a6:6a:
7f:c6:db:76:c2:e9:6e:39:c8:f0:86:66:81:3d:30:
eb:a1:0d:cb:27:f6:37:40:c8:d6:e5:69:6b:e4:4c:
e2:5c:1e:66:05:1a:6e:0a:12:fd:13:25:11:02:e2:
22:20:c9:86:1b:e4:d2:ab:18:5d:fb:07:e7:4e:d4:
76:c7:5a:42:b3:8d:a9:5f:78:20:3a:4e:69:bb:81:
2d:5f:d5:b5:bc:3d:c5:dc:b6:7b:d5:93:b5:5a:c0:
2d:76:27:15:2b:00:54:42:94:87:19:f4:d4:3c:fe:
52:2b:8c:c2:34:d2:0c:02:26:63:a5:94:f2:3b:bf:
7e:9f:cc:43:02:a0:69:5f:0f:e0:48:a1:37:29:cd:
73:43:91:10:33:ee:e7:6d:c4:48:05:74:d5:2a:68:
e0:6b:a3:f9:0a:19:4a:69:8e:a9:8e:22:ce:1c:1a:
3a:4b:99:95:14:a7:ba:b2:b9:55:86:34:72:74:84:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CF:9E:2F:DE:DB:EA:A5:8A:E3:45:CB:64:12:E5:8B:6B:20:ED:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B40F94F0DA3B11EFAEEE8B4B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.46.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b1:0e:01:31:68:dc:64:d3:43:76:e6:57:b0:15:84:e8:11:
ae:2b:5e:e8:de:88:ad:94:90:80:d7:4e:76:4f:20:cd:07:b1:
d4:3b:8d:25:b1:45:fe:4a:38:f2:32:5e:4b:30:9a:31:cc:e5:
26:47:b2:a3:c2:70:0f:de:8d:a5:79:d0:33:82:82:4a:18:9d:
f7:6e:7e:b7:e6:ff:6c:a7:19:c7:db:fb:bc:85:95:30:ac:55:
f3:17:7b:b8:30:3f:59:4d:38:d5:0d:ca:eb:c3:62:81:18:83:
79:6e:ac:2d:bc:bd:e3:54:a1:03:96:b5:23:78:88:bc:9a:0a:
c5:40:e5:5a:57:08:9a:40:dc:51:e8:b6:b7:c3:bd:20:95:2c:
90:86:db:c0:6c:a8:35:0b:58:05:c5:11:40:aa:a4:c8:16:3d:
99:3c:d4:f9:2b:ef:64:0e:8b:a8:2a:1e:d0:2b:f2:4b:06:7b:
44:83:f3:b0:09:c0:b5:60:2b:a7:7d:35:8d:5b:c9:7e:98:e0:
a3:1d:db:33:67:9c:ea:4a:22:81:6a:5a:81:f9:22:3c:b0:26:
08:92:96:5c:7a:f5:36:21:22:f1:84:2c:38:78:fe:80:1d:c9:
6f:c3:2f:4c:bc:03:de:d2:7e:62:35:1d:5c:90:18:f1:5f:d8:
e5:11:70:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:20 2025 by rpki-client