Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B652C75CDA3E11EFB60AA75E762E951A.roa
File: B652C75CDA3E11EFB60AA75E762E951A.roa (raw, json)
Hash identifier: Dr8LMM71EbU1uBtMOK9S0emCv30+ZfteYA/qRLvDaIk=
Subject key identifier: 1B:7B:30:DE:11:7B:C8:A8:AF:82:A2:53:A4:8D:A6:C7:03:EB:B4:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01459A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B652C75CDA3E11EFB60AA75E762E951A.roa
Signing time: Fri 24 Jan 2025 10:33:55 +0000
ROA not before: Fri 24 Jan 2025 10:33:52 +0000
ROA not after: Fri 28 Feb 2025 10:33:52 +0000
asID: 62240
IP address blocks: 154.196.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83354 (0x1459a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:33:52 2025 GMT
Not After : Feb 28 10:33:52 2025 GMT
Subject: CN=67936c93-a3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:24:9a:84:9e:af:2b:cf:3a:96:36:35:c4:
7a:bc:5d:af:7f:0e:83:45:8a:02:ed:d7:8e:16:c0:
2e:c7:9f:5d:47:0a:85:e6:59:42:0b:ff:01:ef:0e:
4a:50:0a:1d:39:6e:35:ae:65:9a:44:32:bf:7c:5c:
a0:69:98:f7:1b:a0:d0:bb:38:cc:26:0b:46:11:f5:
87:af:85:2a:32:cd:cd:ba:b3:82:86:45:aa:a1:19:
ef:ac:7a:1b:75:ad:ab:4c:45:ad:20:d5:ef:a4:c2:
c0:8a:25:3c:3f:be:c5:93:90:3d:0e:66:a2:6a:bb:
26:5a:95:d4:6a:23:45:6a:64:5f:15:19:15:5b:d7:
ed:0f:b8:8a:c1:d8:69:78:d1:bc:6a:2a:66:86:c6:
95:49:0b:bd:b3:a6:3d:38:91:82:35:23:65:36:ab:
ce:5f:35:3d:0f:6c:37:ed:76:24:ac:9e:e7:93:1e:
42:2f:4f:43:b7:52:05:cf:64:5b:fe:34:25:e5:82:
b3:88:b3:3a:1d:5e:98:dc:e8:1d:f4:4d:44:b5:45:
16:ec:0b:78:b8:4b:b1:f1:0d:c6:75:7f:e1:93:ba:
92:f9:57:3c:9a:44:59:cd:ba:f0:d6:cf:72:fe:8b:
58:9a:f7:71:87:95:a5:7e:b1:59:7f:fe:5d:24:0d:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7B:30:DE:11:7B:C8:A8:AF:82:A2:53:A4:8D:A6:C7:03:EB:B4:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B652C75CDA3E11EFB60AA75E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.58.0/24
Signature Algorithm: sha256WithRSAEncryption
43:db:b2:cb:bf:57:9e:c9:91:0a:cb:bf:55:0b:e3:b5:f3:cb:
9c:30:0b:e4:1a:e8:b6:be:77:cf:85:d9:9d:65:f2:e6:1a:1c:
56:6e:43:d5:44:76:be:a0:64:28:7f:c7:3c:6e:ff:5d:50:58:
15:2f:a0:d5:a9:99:96:ae:01:99:23:1e:aa:d5:84:0f:4d:5d:
db:fa:c9:7a:77:75:36:2b:db:2d:2b:6a:2f:96:88:38:df:c0:
4d:ba:23:cd:85:72:b5:87:e7:e1:09:4c:52:33:0e:7b:cb:a3:
34:72:8d:66:a4:7c:2a:03:64:27:b3:51:a7:a7:7d:86:3a:72:
ba:e4:ca:52:74:94:3e:af:7e:ad:8e:06:d1:e3:15:39:15:6d:
ec:ac:4f:f3:90:47:75:df:d3:d6:06:4d:6a:d2:2b:df:8d:6e:
35:dc:36:e1:ed:7e:d1:3f:fa:15:7d:c0:bd:49:6c:fc:33:ee:
58:b3:3f:04:e8:fa:a7:f9:af:e4:65:a1:4d:28:da:1d:ad:65:
07:e4:86:95:3f:af:31:f1:69:9a:0a:3e:2a:b7:c3:c9:de:c4:
b4:91:18:43:c6:0e:1e:4d:2a:2b:ad:f5:11:af:80:b1:01:b8:
74:97:73:5d:ea:65:d0:32:01:8a:78:1e:42:58:18:73:8f:66:
4f:e6:61:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:37:23 2025 by rpki-client