Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3AD30E6D96611EF8F1CF4AD762E951A.roa
File: C3AD30E6D96611EF8F1CF4AD762E951A.roa (raw, json)
Hash identifier: pPWNhFiXwmGZ0vfQswlFOekwr7sfojbLcQqGfEcQDaw=
Subject key identifier: 39:4A:74:65:24:EE:DC:56:3F:83:25:13:AC:69:D3:46:74:E3:87:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3AD30E6D96611EF8F1CF4AD762E951A.roa
Signing time: Thu 23 Jan 2025 08:48:07 +0000
ROA not before: Thu 23 Jan 2025 08:48:03 +0000
ROA not after: Fri 28 Feb 2025 08:48:03 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82082 (0x140a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:48:03 2025 GMT
Not After : Feb 28 08:48:03 2025 GMT
Subject: CN=67920246-ad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c9:e8:f3:74:6d:91:90:c9:b9:7a:91:d5:7a:
d1:3f:48:a1:05:97:79:3a:99:91:12:9e:c2:c9:11:
47:42:ce:c9:30:0a:5a:34:a9:7d:ea:7c:4b:24:ea:
62:53:88:33:14:c6:37:5d:93:46:cf:e7:89:01:37:
f6:fb:16:ec:99:2a:e5:7e:c4:20:f2:cd:07:96:d2:
77:6b:74:8c:79:24:73:3c:28:59:85:17:34:92:b5:
b8:9e:56:aa:20:53:76:f0:bc:2b:1a:47:6f:fc:3b:
98:81:c4:45:64:4b:0e:40:9e:66:73:58:bb:00:6c:
52:e7:b7:a4:f0:1a:4b:a4:f5:77:11:c4:7a:84:44:
b1:ac:4c:d5:4a:0d:63:17:57:52:8c:be:4b:08:52:
ff:73:0e:fb:62:ad:78:db:a1:e8:1e:d3:ff:9a:c5:
bf:fd:b6:8a:88:8a:d9:bd:ce:6b:7a:ab:d7:39:ad:
32:dc:82:18:53:14:00:3e:a9:86:f0:58:c8:11:21:
08:df:3b:0a:b6:50:b3:a8:ca:80:32:1e:ab:16:17:
46:21:1c:86:f2:a7:f9:1c:a5:53:db:ea:47:92:db:
5d:c6:fe:92:cd:c7:33:ea:94:12:99:e5:0e:b8:94:
ff:2a:b7:9a:91:06:11:de:60:01:a1:0a:46:2c:11:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:4A:74:65:24:EE:DC:56:3F:83:25:13:AC:69:D3:46:74:E3:87:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3AD30E6D96611EF8F1CF4AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e8:5a:12:d8:1e:5d:6a:91:fe:17:b6:ec:6f:ca:03:03:a1:
d1:b8:b4:9f:02:b1:79:3e:87:d7:de:03:1c:37:cb:a0:01:18:
a5:f7:aa:c3:df:62:60:e2:91:94:72:38:bc:34:11:25:1d:f1:
3c:9b:3b:6a:63:d1:9a:9e:cf:f0:e6:45:85:b5:7c:6e:31:72:
5c:e3:56:73:9a:7a:ca:9f:15:58:67:05:a7:29:32:11:fd:8a:
72:5c:33:4c:32:bb:09:ba:a7:ae:21:46:64:19:f2:48:b7:b0:
7b:84:7e:6d:06:85:05:a2:bb:46:89:1b:42:ea:fb:ae:f8:8a:
05:7c:7c:76:0c:f5:c5:15:47:1d:6c:6f:f0:a9:87:2d:6d:66:
cf:31:34:52:99:33:4f:96:d2:c9:88:14:f6:15:74:7c:c7:83:
ce:0b:aa:ea:f5:0d:88:65:eb:0d:b7:1c:aa:fd:ff:d0:b2:9f:
0f:d3:61:4d:64:49:9f:0a:66:bc:cb:84:64:c5:a6:10:b1:e5:
8d:0c:3e:72:9d:40:0b:50:ea:c2:d2:cc:d9:80:26:d7:11:53:
0e:fd:fe:c1:4c:17:27:7a:a5:05:23:2c:39:01:3b:8d:1f:7d:
b3:ff:06:76:7a:4d:04:aa:e3:52:50:4b:02:95:16:a3:e9:5a:
f0:06:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:47:49 2025 by rpki-client