Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D3A3BCD98811EFA9779090762E951A.roa
File: B4D3A3BCD98811EFA9779090762E951A.roa (raw, json)
Hash identifier: /h/BtftkNgo9DvtLZPdqRSjBQfsc/leKiiR1q22D51A=
Subject key identifier: 11:80:28:06:DC:88:A9:01:C0:83:B1:1B:7D:43:7F:08:14:05:57:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014241
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D3A3BCD98811EFA9779090762E951A.roa
Signing time: Thu 23 Jan 2025 12:51:04 +0000
ROA not before: Thu 23 Jan 2025 12:51:01 +0000
ROA not after: Fri 28 Feb 2025 12:51:01 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82497 (0x14241)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:51:01 2025 GMT
Not After : Feb 28 12:51:01 2025 GMT
Subject: CN=67923b38-813a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:11:4e:8f:d5:ae:c0:88:8a:15:48:92:a1:37:
1a:95:80:c2:1f:d1:8a:f2:e6:d7:f7:6b:6e:76:82:
53:1a:40:fb:5b:41:5b:e4:77:9a:2f:6a:11:30:76:
b4:65:fb:b6:ef:96:10:7e:38:7f:32:df:74:4a:a3:
9e:52:d8:21:95:0c:e6:60:74:c8:fe:6a:5d:55:19:
25:e4:7f:07:a1:b4:34:08:d5:66:a3:af:4d:ce:d1:
dd:f6:48:44:ae:cb:af:6e:95:bc:fc:4b:61:af:1c:
6e:a8:a8:52:07:6f:94:07:e0:cb:9e:46:12:43:38:
f6:bb:f3:d0:e0:6f:c7:1d:70:0c:4b:b1:0f:dd:6b:
80:52:42:dd:32:09:5c:7e:a1:9d:50:75:b5:ad:00:
3f:8e:d9:2c:81:67:8b:b0:a6:6b:33:25:ca:48:a9:
1a:87:c6:b6:90:84:4c:2f:aa:94:a9:1e:1d:c8:8a:
6d:c4:92:a2:6a:60:5b:86:6e:3e:65:34:e6:b3:39:
15:b5:f7:af:f4:72:f9:c6:59:30:c7:10:47:d8:6e:
7a:9f:e9:b4:0f:d0:5b:f2:7b:55:9a:9e:36:a7:ec:
f1:62:81:3f:3f:39:d4:09:bb:06:e2:a4:f1:76:b0:
56:8d:7d:ef:59:08:63:c5:10:ed:8a:12:3c:a4:24:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:80:28:06:DC:88:A9:01:C0:83:B1:1B:7D:43:7F:08:14:05:57:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4D3A3BCD98811EFA9779090762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a7:d6:84:e8:09:2b:c9:e4:36:6f:7d:6a:a1:72:22:3a:56:
a7:b3:c2:5d:94:da:21:dd:81:31:42:22:84:0e:b8:3d:9e:51:
5a:91:ff:91:02:e3:f4:25:19:65:9b:af:57:5e:cc:59:5f:35:
54:c5:02:c4:f5:ff:65:f2:92:69:c0:36:4b:a1:ac:d0:f3:d8:
fe:7d:bc:52:cf:76:f3:6a:c0:bd:aa:e1:a0:20:b6:3f:23:44:
5d:19:84:78:77:63:53:29:1c:d0:f9:7f:f7:04:9d:eb:80:53:
63:f4:09:be:8b:aa:8e:cc:b4:e9:64:a3:e0:f0:3f:97:97:8e:
e5:06:f4:d3:3f:bb:21:58:e4:18:b5:39:f0:01:57:2e:61:64:
ea:f5:d8:bd:11:2e:f7:f4:80:b7:91:66:51:b1:3e:ed:b0:c8:
4d:28:a1:5b:5d:ca:1e:82:80:d7:3c:af:53:68:31:75:44:ec:
e5:20:9d:18:a4:59:1a:9a:5f:18:2b:b1:82:4d:8c:35:59:11:
31:35:b8:d6:e9:82:5a:43:53:18:f1:7f:e3:20:3d:6e:61:17:
3a:0a:ea:64:64:48:1f:7d:d4:a7:4e:9f:ed:87:39:ca:8d:2a:
17:bf:86:77:3e:e9:63:7b:57:53:32:f3:76:c1:65:3a:10:bb:
86:84:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:45 2025 by rpki-client