Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81B07E2DA2611EF9CEDCEBB762E951A.roa
File: B81B07E2DA2611EF9CEDCEBB762E951A.roa (raw, json)
Hash identifier: JMgenc1AWEgp3ceh6Un9f8+V77IlmI7zqiNfTfP0raE=
Subject key identifier: B3:C1:0F:89:95:5A:00:EC:AB:33:94:44:EF:6D:41:3B:32:FE:12:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014427
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81B07E2DA2611EF9CEDCEBB762E951A.roa
Signing time: Fri 24 Jan 2025 07:42:10 +0000
ROA not before: Fri 24 Jan 2025 07:42:07 +0000
ROA not after: Wed 05 Mar 2025 07:42:07 +0000
asID: 202656
IP address blocks: 154.222.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82983 (0x14427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:42:07 2025 GMT
Not After : Mar 5 07:42:07 2025 GMT
Subject: CN=67934452-872b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ca:6d:30:8d:2d:38:ce:c6:a0:0c:16:6c:d3:
8e:69:bf:70:1b:e0:4a:7d:0c:f7:4b:a6:f6:b0:93:
a7:db:fc:c0:fc:f7:85:ed:4c:fc:de:77:db:5e:c2:
91:47:2b:74:a7:31:92:93:44:9e:f5:52:5c:81:a2:
1f:d9:de:98:58:13:6a:0a:e2:a9:23:6d:c8:7c:b7:
b6:03:e7:3e:65:70:ec:94:10:01:2c:99:a0:8d:cc:
75:d8:33:b1:92:1a:a8:f5:dd:16:92:0e:b1:1b:18:
71:2d:36:4d:16:05:db:17:c8:92:67:11:ce:8f:87:
74:26:20:8e:84:ce:bc:e1:c3:83:6c:f6:e0:9d:5c:
7b:98:54:24:31:5d:b6:b8:c1:c3:78:49:7e:cc:b4:
cd:8d:78:61:6b:2e:5e:c4:9f:60:3d:d2:c1:75:9c:
95:06:e9:1f:dc:04:0b:2d:53:86:56:a2:19:0b:c6:
3e:f6:0a:8f:15:ae:c1:a0:0d:03:5d:2e:7d:62:47:
96:61:f1:16:78:47:36:df:14:1e:eb:0b:a0:74:4b:
c8:56:8d:a0:8b:55:03:88:9f:40:90:a4:7d:7f:a6:
4e:00:b4:31:53:13:71:82:8e:10:a4:a3:b4:29:f7:
b3:0d:b9:2f:97:fd:66:da:48:ff:34:55:6e:12:67:
46:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C1:0F:89:95:5A:00:EC:AB:33:94:44:EF:6D:41:3B:32:FE:12:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B81B07E2DA2611EF9CEDCEBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.195.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:60:8d:5a:76:f5:2c:c4:ef:9c:25:24:19:8c:59:ca:ff:83:
55:c1:6c:76:d9:40:e2:8f:c2:52:95:c7:ec:53:51:fa:b5:5a:
ad:3c:17:78:72:bf:b5:e7:4e:f4:e0:9e:b8:1a:71:c3:1e:e7:
da:8f:f4:ac:38:14:06:ee:7c:d2:16:08:84:9e:d6:ca:04:b9:
66:1f:09:c9:ec:70:1a:40:26:c7:70:74:43:b9:0e:5a:2e:7f:
a6:5a:6e:ed:95:2d:1e:f1:83:d5:50:e6:8a:c1:0b:be:66:fd:
1f:af:63:b1:ad:99:7e:91:f6:d6:8a:93:59:63:d3:b7:2b:83:
e7:61:f7:15:bb:b9:41:51:29:e6:6b:67:b9:3a:7f:fe:a6:f6:
8f:a3:cb:ae:44:2f:fc:b4:0c:ef:8a:f1:e4:f1:f8:08:d7:db:
d7:9c:e7:50:c2:3f:19:ff:ed:01:1d:a2:a1:40:20:7d:f0:32:
3f:66:7a:fc:8d:21:52:cf:b5:67:ae:d0:d6:6b:97:30:ed:34:
21:26:7a:77:17:94:37:fc:7b:82:a8:b3:bb:c0:fd:c5:1a:78:
9f:96:35:c6:7f:de:23:86:3a:bf:fd:4f:20:5b:87:78:41:3c:
83:6f:24:69:2a:a7:26:2c:b0:e2:ba:de:b2:c9:13:ed:04:8f:
64:95:2a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:02:20 2025 by rpki-client