Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B36AB8DA3711EFAFF24FAE762E951A.roa
File: C6B36AB8DA3711EFAFF24FAE762E951A.roa (raw, json)
Hash identifier: 7YITDnmKrQG0Tjym/j17WGkSKkpmO5U+nz80qZnv4J8=
Subject key identifier: 78:87:4E:04:F8:0E:74:A7:B8:7A:39:A4:F5:FF:4E:9D:F8:F5:3E:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014513
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B36AB8DA3711EFAFF24FAE762E951A.roa
Signing time: Fri 24 Jan 2025 09:44:16 +0000
ROA not before: Fri 24 Jan 2025 09:44:13 +0000
ROA not after: Fri 28 Feb 2025 09:44:13 +0000
asID: 62240
IP address blocks: 154.196.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83219 (0x14513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:44:13 2025 GMT
Not After : Feb 28 09:44:13 2025 GMT
Subject: CN=679360f0-7f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:c7:80:90:2f:42:4a:a7:f2:cd:65:ba:5e:
3e:df:d4:35:0b:09:6b:03:a7:87:f8:66:9c:67:bd:
6d:b1:8e:a7:5f:c3:be:a6:47:ee:86:07:2f:f1:cd:
78:0a:3b:84:da:13:2b:af:d3:56:40:82:3c:75:9e:
22:cc:7b:99:10:28:f9:2f:b3:f7:53:75:54:69:95:
df:87:8b:38:56:54:35:f2:c7:d3:20:10:72:5a:c0:
31:4a:88:b4:2b:2e:5d:d4:bb:db:9b:30:76:bc:a8:
90:7d:97:e4:f2:12:44:72:a1:71:63:35:68:2f:df:
37:03:b1:6c:21:bd:54:da:84:77:77:90:96:17:5b:
b5:34:64:b8:d1:f0:7b:45:95:1d:d2:e9:c5:cb:31:
7e:06:34:07:83:63:08:c5:52:0b:22:6b:eb:42:85:
8e:42:d1:94:88:37:5e:7f:1f:3c:d6:aa:f0:da:38:
06:d3:a8:88:88:f1:bd:a0:db:1f:07:ef:ea:51:a4:
92:64:b7:1f:26:82:89:0a:91:9f:99:f8:79:fa:76:
a3:f4:51:4f:71:f9:7f:c6:4a:08:59:d5:4c:71:6a:
39:45:28:cc:cc:5d:14:d0:ec:a4:32:8c:97:01:05:
e2:77:f6:0a:67:c7:f0:97:ed:47:2e:c8:34:8a:68:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:4E:04:F8:0E:74:A7:B8:7A:39:A4:F5:FF:4E:9D:F8:F5:3E:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6B36AB8DA3711EFAFF24FAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.32.0/24
Signature Algorithm: sha256WithRSAEncryption
83:04:42:1a:1a:4f:c4:71:f3:a3:c6:d2:c5:7e:cd:2c:2d:f6:
35:af:76:9d:b3:e0:ee:a8:4e:c7:d2:83:4c:0d:97:ea:b8:84:
81:e3:9d:61:00:a3:70:a2:67:35:16:a3:79:1a:fb:4c:fa:d6:
73:ea:13:82:04:2b:1f:95:43:e9:78:31:d0:d6:8a:5a:2b:04:
59:2a:e5:a0:95:24:3a:c0:1b:4a:73:55:3c:1a:df:7f:97:1e:
d2:e3:43:77:fb:7d:38:c3:1d:d8:d8:d2:b4:f4:a4:23:a1:1c:
de:d8:3b:0b:fb:69:2e:22:58:c8:1f:96:e4:86:3d:b0:a2:4b:
4a:37:b4:39:ec:cd:85:73:e9:87:47:e3:e8:93:4e:5e:40:78:
93:ad:e9:49:8d:e5:9c:86:da:e6:01:08:4e:e6:3f:f4:7f:5c:
ca:dd:b7:a4:ca:70:ab:64:03:76:ec:b9:b7:35:b2:55:5a:12:
35:e1:ba:3c:64:a5:3b:20:d8:64:b2:1e:88:db:ad:1c:8d:5c:
5a:40:06:fc:da:62:cd:88:f5:48:dd:78:c8:66:a7:2d:ba:5e:
0f:ce:37:95:43:66:d1:e2:40:37:a4:d3:80:3c:0e:59:9b:d6:
b4:b5:aa:18:32:07:d7:16:c6:5a:2d:82:90:3e:c4:5b:85:3c:
2c:5c:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:24 2025 by rpki-client