Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A10010D97211EF8D1F017F762E951A.roa
File: C0A10010D97211EF8D1F017F762E951A.roa (raw, json)
Hash identifier: m2H2Lzwqr0+ZskgmImfTG0FUsOrZef2R+ShZXNoYsjI=
Subject key identifier: 66:1E:51:31:D1:09:80:3F:4D:08:82:B4:E4:92:C8:4E:C0:EA:1C:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01411A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A10010D97211EF8D1F017F762E951A.roa
Signing time: Thu 23 Jan 2025 10:13:55 +0000
ROA not before: Thu 23 Jan 2025 10:13:52 +0000
ROA not after: Fri 28 Feb 2025 10:13:52 +0000
asID: 62240
IP address blocks: 154.194.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82202 (0x1411a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:13:52 2025 GMT
Not After : Feb 28 10:13:52 2025 GMT
Subject: CN=67921663-c9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4b:7d:05:6b:1c:cf:1b:e0:24:ff:81:f6:b2:
31:18:96:24:00:ff:07:e5:70:ae:53:5a:9a:ee:1e:
6f:74:fc:2e:f3:76:96:23:ff:d2:a6:82:f4:0c:08:
b7:b5:ad:b7:f3:5b:52:74:54:4b:d7:4f:5a:b7:0e:
47:50:6c:d7:83:93:11:a8:00:be:48:4b:9b:c9:af:
c4:2a:64:31:b3:af:d5:9b:e6:b3:16:85:7f:f0:ea:
b1:38:5c:a5:04:b4:00:e5:27:cb:7a:23:60:af:1f:
f1:e2:82:cb:e8:19:55:2d:ca:49:6e:ee:0e:ee:c7:
12:f3:9f:d4:2f:0f:94:ce:b6:2f:0c:fe:69:2a:b2:
33:a3:29:7f:02:fc:9f:44:68:62:32:9e:2e:3a:12:
e1:85:6f:76:3a:48:b7:97:08:b6:f0:30:16:9c:19:
03:f6:f5:89:92:d2:39:75:a4:2c:c4:62:c1:17:69:
db:47:0a:73:77:3b:e0:68:cd:3b:90:d3:98:e3:c8:
56:44:7b:01:3f:7a:c5:89:0b:46:c1:c3:fc:95:e9:
f0:d8:cb:2f:2a:80:62:93:5b:82:5d:c2:ec:ba:3d:
6f:c1:f7:f3:3d:e6:3e:6f:9b:44:fc:86:25:e7:bd:
fd:f5:1f:c4:52:de:af:33:8c:68:27:0d:91:9c:36:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1E:51:31:D1:09:80:3F:4D:08:82:B4:E4:92:C8:4E:C0:EA:1C:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A10010D97211EF8D1F017F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.89.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:53:51:1b:ae:08:b5:55:32:29:d8:f7:ba:4a:9b:39:fc:67:
d8:25:d1:9c:ae:f7:ca:a0:b2:7d:70:19:04:e7:94:56:f3:f5:
62:55:df:df:66:67:61:a7:89:4a:ba:0a:c1:d1:5c:44:36:7b:
5f:c5:c1:c7:32:83:16:1d:fd:73:2e:20:a2:74:50:91:f8:fb:
13:f6:aa:e7:b8:83:43:e3:74:b8:8d:6e:45:00:ab:bd:2f:4a:
68:bc:8c:8d:88:eb:fd:97:8c:88:cf:15:f2:c6:e9:41:b5:74:
d4:89:7f:bf:31:db:7c:14:88:cc:dc:ab:17:98:a9:c2:a7:6b:
08:af:93:d9:c6:23:75:7d:39:09:ff:92:97:e0:ab:28:c7:03:
cd:53:43:d2:bd:8b:dd:02:6a:b3:10:1c:79:9b:aa:6e:93:32:
ae:ad:e2:40:ad:30:2b:2a:25:56:28:12:13:ff:ca:eb:53:23:
fc:23:83:02:13:5b:99:9b:82:4c:48:3e:15:6c:80:f8:09:0d:
57:d7:7d:ef:34:ad:3b:0c:95:c5:ff:6f:70:ed:0d:5d:bb:89:
dc:22:58:8e:71:35:c3:12:ae:86:eb:c1:2c:1e:d3:69:66:06:
d9:9a:d1:df:ba:2f:6a:2e:3e:e9:fb:c5:55:4c:04:5f:4b:50:
88:65:7f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:11:50 2025 by rpki-client