Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC9B1102DA1911EFB88CEF65762E951A.roa
File: BC9B1102DA1911EFB88CEF65762E951A.roa (raw, json)
Hash identifier: kbwKiVAwP7V6YTuu4gHCgaW6AC0Vus4NTScLiArpWZQ=
Subject key identifier: 27:AC:3E:54:BC:A1:4F:F2:08:1C:AA:DE:BF:DC:77:1E:44:CE:71:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0143EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC9B1102DA1911EFB88CEF65762E951A.roa
Signing time: Fri 24 Jan 2025 06:09:15 +0000
ROA not before: Fri 24 Jan 2025 06:09:10 +0000
ROA not after: Fri 28 Feb 2025 06:09:10 +0000
asID: 62240
IP address blocks: 154.196.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82926 (0x143ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 06:09:10 2025 GMT
Not After : Feb 28 06:09:10 2025 GMT
Subject: CN=67932e8b-28f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:85:36:33:79:d1:c1:4f:8b:0c:35:3e:65:14:
61:be:ec:3d:7b:e0:68:c3:e3:20:9c:74:26:5f:42:
b7:59:68:12:17:42:87:b0:89:3b:7c:c5:6e:4a:7e:
a4:d1:b5:9e:87:65:67:31:9b:1b:a4:73:42:3a:7c:
19:06:d4:6e:78:ad:f4:d5:3a:49:ec:15:82:12:4f:
59:c5:73:25:a3:cd:8c:13:1d:30:d3:fe:c2:aa:3e:
b9:d0:b5:eb:a5:6c:19:42:ee:1d:88:25:2f:6a:53:
d9:89:fe:42:1c:60:37:d4:8f:84:f3:09:83:68:21:
01:d2:c8:2c:d9:a4:d9:5a:b2:62:0a:1a:06:36:4e:
20:24:65:b2:c5:52:97:6e:bc:4b:3f:ed:52:e2:26:
b8:92:18:a6:1a:aa:b2:44:d7:bb:fc:07:af:ac:25:
b5:df:c1:d2:48:4d:e5:22:6e:5b:8b:77:05:9d:9c:
5d:a7:b1:1a:8e:42:a6:c7:a1:8d:69:9e:f3:88:64:
51:71:84:72:a3:56:c4:c3:fe:bf:7d:5e:a2:62:fc:
9d:d8:25:9b:c7:b2:f2:f6:a2:18:32:e1:51:64:67:
ab:d9:36:56:83:88:e5:04:2e:e2:86:f8:46:85:e8:
cd:12:69:a7:64:16:71:ff:49:68:24:10:7b:8b:a2:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AC:3E:54:BC:A1:4F:F2:08:1C:AA:DE:BF:DC:77:1E:44:CE:71:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC9B1102DA1911EFB88CEF65762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d8:15:5a:9f:cd:19:1b:e4:83:7d:b7:ff:30:f5:2f:30:4b:
c1:31:69:92:0d:9e:e3:7f:19:6a:31:73:22:7f:6f:c8:6a:b8:
66:7d:d7:8c:a5:71:94:60:65:b2:dd:12:4f:d1:64:26:2d:f5:
05:e5:4e:87:64:a5:b2:f6:01:c6:d8:b3:a8:a9:49:6c:4d:fb:
31:20:7e:e4:43:40:4c:ad:fa:3d:05:66:23:44:ff:4f:fa:03:
91:89:64:dc:cb:a4:cd:9d:d9:d1:27:3e:48:a3:90:13:eb:35:
dc:78:d2:45:84:8b:20:e9:4b:b9:6d:f1:31:97:2c:03:90:6e:
f3:1f:95:a4:89:c2:9c:8b:22:29:14:16:ea:84:72:d4:97:90:
c9:be:76:ac:b9:2d:8a:0b:53:05:c2:93:04:f3:2a:0e:a5:95:
53:6e:a9:43:c5:e0:9e:b5:e4:9d:d9:14:41:e9:b8:c5:51:93:
5a:cd:94:00:6d:68:5a:13:6d:5f:ed:af:08:2e:d7:51:74:c8:
8b:50:88:9d:2b:f8:8d:13:5c:b5:67:f8:48:42:01:41:1b:7d:
28:11:a7:16:64:50:dc:3b:67:8b:50:8b:97:ff:88:cb:aa:63:
ea:66:fc:6d:f3:20:1f:53:9d:8c:a4:2b:86:2c:8e:1a:b0:97:
0b:b3:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:53 2025 by rpki-client