Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1C3FEC6D9C611EFAA4104A9762E951A.roa
File: C1C3FEC6D9C611EFAA4104A9762E951A.roa (raw, json)
Hash identifier: 8RR14eytGzj5ImkmRqIFGW4wmgwgR6CGgVtiN6FKc8w=
Subject key identifier: BE:16:5F:1B:CE:08:6F:1E:F0:52:13:F1:82:F7:18:E5:EB:2F:2E:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1C3FEC6D9C611EFAA4104A9762E951A.roa
Signing time: Thu 23 Jan 2025 20:15:15 +0000
ROA not before: Fri 24 Jan 2025 20:15:11 +0000
ROA not after: Fri 28 Feb 2025 20:15:11 +0000
asID: 62240
IP address blocks: 154.196.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82628 (0x142c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:15:11 2025 GMT
Not After : Feb 28 20:15:11 2025 GMT
Subject: CN=6792a353-896c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dc:fa:e8:99:19:1e:ed:0b:fa:48:a4:b6:49:
0d:51:8c:a9:05:98:94:90:02:2d:85:c0:b5:15:b0:
61:d3:54:98:d4:f9:fe:a4:5a:02:ae:a7:3c:92:13:
20:15:d9:54:e7:a5:4c:a6:7c:f1:cb:6f:f7:57:ab:
75:65:6e:00:74:e0:36:f1:d3:e2:98:85:51:27:7b:
22:6d:f8:e4:27:33:ea:87:0e:00:cd:79:f3:e0:c0:
df:b7:33:3f:8d:46:5a:bd:21:99:5e:31:57:7f:53:
f6:92:30:ee:5f:be:2f:f0:35:dc:98:d5:db:f2:85:
ba:e8:54:b3:c4:db:9a:c4:c4:e3:24:04:0e:af:a4:
28:0a:52:a2:f9:e2:1a:2e:c2:fe:39:f5:18:51:87:
fe:45:b2:63:09:98:c1:0e:53:60:18:96:1d:27:db:
f5:f4:e4:9b:ea:3e:6d:da:e3:00:14:af:d8:07:af:
af:86:8d:e2:37:e8:dc:38:b9:58:19:09:e9:52:3f:
39:05:70:e0:b6:b5:80:5e:27:1c:1f:1a:5b:7d:06:
09:cc:cf:32:22:b9:70:41:b1:0c:59:61:6d:47:07:
f0:b3:6b:67:5d:1e:0f:bd:88:fe:96:ed:0d:25:c8:
12:07:ac:cd:ad:ba:06:f9:76:bc:ba:51:5d:dd:76:
2e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:16:5F:1B:CE:08:6F:1E:F0:52:13:F1:82:F7:18:E5:EB:2F:2E:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1C3FEC6D9C611EFAA4104A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a3:35:05:5a:74:f7:00:9b:70:68:a7:ca:bd:da:0e:d3:5e:
10:6e:2a:f9:13:dd:c2:75:95:69:f0:ad:b0:a6:b3:00:3d:70:
72:7c:9e:9f:5f:eb:b9:ea:16:7c:84:2e:c6:da:c0:bc:00:e2:
e5:a5:8b:46:52:ed:57:e6:b3:17:55:4c:b9:0e:ff:be:f1:4c:
96:5b:11:31:15:04:0f:96:bb:85:8f:a6:7f:83:13:e6:62:09:
b4:bf:a8:db:54:dc:cb:4a:d0:29:0d:37:1a:eb:e9:5c:7b:0c:
d5:e1:f4:44:d3:74:8e:58:44:b2:86:bc:82:a1:1a:01:c2:d5:
5d:e2:d5:8b:41:58:40:0b:28:9a:9a:fb:78:57:1a:ee:7d:08:
95:57:32:9d:e9:06:15:4a:a7:75:94:95:e8:17:ad:7f:7c:70:
60:c7:3a:ad:eb:19:43:e4:f4:9a:bd:e6:2b:73:8d:5a:19:cd:
24:63:1b:bb:90:c4:d9:ea:82:c5:59:33:20:0b:5e:fd:79:d9:
fa:e4:ee:ae:a1:ff:a3:5a:76:58:33:2e:55:d6:db:c6:d6:f3:
ba:15:89:97:fc:83:55:09:59:c3:60:88:49:c9:eb:78:53:db:
2a:64:e3:f9:5d:fe:21:9a:5c:d1:a5:7d:e4:c7:21:63:3a:8c:
c3:f2:86:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:57 2025 by rpki-client