Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C07C5A60DE2411EF929950B4762E951A.roa
File: C07C5A60DE2411EF929950B4762E951A.roa (raw, json)
Hash identifier: vZpxtVqGASq61L5hs6Lzt9vSUuBSvrz+5oPovop8qSw=
Subject key identifier: 7F:8F:F5:BE:D3:E5:D7:15:D7:C0:97:EE:3B:3A:2F:FA:29:10:54:77
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D6C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C07C5A60DE2411EF929950B4762E951A.roa
Signing time: Wed 29 Jan 2025 09:38:10 +0000
ROA not before: Wed 29 Jan 2025 09:38:06 +0000
ROA not after: Fri 28 Feb 2025 09:38:06 +0000
asID: 395793
IP address blocks: 154.193.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85356 (0x14d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:38:06 2025 GMT
Not After : Feb 28 09:38:06 2025 GMT
Subject: CN=6799f702-6769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:29:50:3c:ff:4a:5d:ee:61:85:f9:17:99:
f9:61:1d:22:35:6c:b9:a5:0e:33:5f:6e:fa:ed:62:
8e:7a:08:63:8e:35:a0:0f:6d:e8:8b:28:8f:7b:ed:
aa:f4:f3:2a:32:cd:ac:31:72:5a:d5:d7:d2:7c:5a:
83:6e:b7:2d:90:00:00:9b:39:1d:c3:1b:bc:c1:9e:
55:b0:df:7d:85:fc:68:73:b3:92:62:a0:37:81:36:
1e:9c:1d:6c:04:6a:1c:68:1a:68:62:38:f5:47:ab:
42:8a:e7:d5:60:f9:d6:7e:d6:b1:53:98:15:9a:c2:
0f:6d:ca:55:d0:d1:a6:05:8d:f3:b9:87:95:ab:74:
33:70:44:fc:c5:f0:35:45:db:41:ac:22:40:af:e1:
dc:3e:3b:b1:44:11:c8:75:aa:34:fe:bd:0b:cf:54:
90:58:1a:47:e8:47:9a:d1:fa:25:dd:79:f8:77:ef:
11:72:32:7f:b2:a4:c0:2a:c8:0d:32:fc:a1:c8:ed:
30:39:9b:d6:b9:3e:93:47:c9:8a:de:49:5f:19:af:
28:b7:1d:a7:6c:99:5c:d1:a7:ca:f3:50:ee:f9:4f:
27:a6:35:24:a7:c7:63:59:53:c7:2f:41:0e:c3:04:
94:ca:af:fb:4a:91:5f:14:97:73:d3:7f:a9:1f:3a:
47:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8F:F5:BE:D3:E5:D7:15:D7:C0:97:EE:3B:3A:2F:FA:29:10:54:77
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C07C5A60DE2411EF929950B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.102.0/24
Signature Algorithm: sha256WithRSAEncryption
02:fd:2f:89:72:25:fc:88:93:78:68:e3:f0:31:b1:37:05:2f:
86:0e:42:d5:eb:30:5d:f2:17:71:1a:3f:09:01:2e:f0:fa:28:
d7:c7:8d:64:8e:ea:85:98:82:c6:e6:9e:e4:4d:cf:23:80:3d:
37:92:4f:15:ef:a4:16:6a:41:96:29:e7:26:30:04:9c:1a:08:
be:2a:18:06:de:5f:52:f5:3e:5a:82:1b:d5:bd:dd:ed:d1:ef:
e0:4e:1d:f0:c1:87:4c:66:57:b2:70:1a:8b:1c:1a:92:c7:e8:
e6:49:09:0c:17:d3:ee:97:85:6c:cf:18:16:b4:61:ff:7f:48:
20:b3:78:b5:69:74:19:69:c6:65:42:84:9c:3b:c3:4f:45:fb:
27:cf:e9:2a:dd:0d:35:7a:c4:14:72:ab:1b:82:2e:bd:e4:74:
ae:11:12:9d:fa:08:94:76:e7:0a:10:3f:35:7c:87:31:e1:69:
56:c4:0a:e7:97:c5:29:8a:cf:8f:fc:52:b2:4d:fa:98:9c:b0:
51:c1:4f:6e:d3:e9:69:6f:b0:e7:21:86:fe:fc:2c:45:db:e7:
b1:b9:e7:71:ba:73:eb:3f:6a:5d:87:92:92:ab:f4:95:97:76:
67:74:0f:6c:4e:38:00:23:f3:d0:31:39:f6:72:12:f2:91:0c:
79:65:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:07:10 2025 by rpki-client