Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8910DFAD98211EF83A85F6B762E951A.roa
File: C8910DFAD98211EF83A85F6B762E951A.roa (raw, json)
Hash identifier: U9am3amcc5+N9pQhlSt76HSjCnRVKj2qP+D53XP7DLg=
Subject key identifier: CA:D8:F3:04:F6:A1:A2:30:68:7A:FC:3D:14:51:6C:96:A1:1C:89:49
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8910DFAD98211EF83A85F6B762E951A.roa
Signing time: Thu 23 Jan 2025 12:08:41 +0000
ROA not before: Thu 23 Jan 2025 12:08:37 +0000
ROA not after: Fri 28 Feb 2025 12:08:37 +0000
asID: 62240
IP address blocks: 154.195.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82418 (0x141f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:08:37 2025 GMT
Not After : Feb 28 12:08:37 2025 GMT
Subject: CN=67923148-da40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c8:5f:28:05:0a:3c:c8:0b:76:a9:93:08:1e:
66:1b:32:b3:13:c0:0e:d8:fb:ca:a6:3f:c6:1e:27:
5d:d3:28:4f:e5:ad:4e:c3:2f:4a:25:5e:08:4b:3c:
b1:d5:af:80:69:fc:99:5d:a3:e2:5c:9c:75:47:b3:
5d:1c:fd:c7:64:9a:77:63:24:22:6c:e0:49:b1:48:
e8:c5:84:77:e2:4b:83:55:b5:de:b4:67:13:33:57:
2f:aa:ad:73:51:0e:eb:e3:84:d7:34:98:4b:68:a1:
cf:c9:23:e2:81:dd:ce:73:22:b3:d0:96:25:f4:b3:
e3:2a:59:c2:3c:c7:6b:4e:9b:1a:8b:63:22:8b:0c:
ae:ba:36:23:56:f6:a0:47:fb:8b:55:41:be:2d:8a:
de:0d:90:ce:87:62:e8:51:e9:b5:ec:85:ee:a1:7b:
ad:0b:28:e1:d6:f8:b8:50:26:a2:52:af:e2:9b:02:
6f:e0:69:89:af:de:61:72:c9:69:88:aa:76:80:ff:
4e:da:9a:67:09:27:5c:06:54:30:42:6a:10:ce:50:
16:c0:bc:0e:c3:3a:b0:f6:1f:1b:f2:e3:4d:c9:df:
9a:37:7d:3f:ad:09:01:5e:e2:0e:9e:95:5f:0e:eb:
07:f1:46:82:1c:56:13:ff:41:53:1a:0b:3e:56:46:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D8:F3:04:F6:A1:A2:30:68:7A:FC:3D:14:51:6C:96:A1:1C:89:49
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8910DFAD98211EF83A85F6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.183.0/24
Signature Algorithm: sha256WithRSAEncryption
85:93:c2:17:2a:5c:f7:76:09:b1:87:ff:45:f6:2d:7a:1d:ef:
70:83:e8:12:49:25:6b:2e:02:17:d4:17:da:27:f1:cb:4c:4b:
e5:a3:79:06:b2:cc:d4:ed:ef:27:c1:12:48:ed:2e:85:55:6b:
97:87:61:f1:44:4f:85:73:fa:ba:4d:b7:28:95:f6:91:ff:a2:
d7:2f:b1:84:ab:38:c3:24:be:e9:f0:a8:b5:3f:f8:c3:e3:5e:
7e:b5:3f:e3:43:f2:9b:27:38:ee:d5:ab:29:02:db:77:21:74:
be:83:ee:94:3d:6f:f1:72:74:22:11:fc:c0:8e:3f:12:1e:89:
78:c9:dc:74:4d:5e:5e:3a:7d:6d:e6:9e:6d:52:b8:bc:10:d6:
66:de:26:57:29:ee:fa:3b:d1:52:86:e2:5b:fe:a7:e5:94:6e:
94:39:7d:cf:76:54:c8:dd:79:65:f3:39:da:fc:c6:40:41:55:
24:d0:e1:ff:27:83:93:48:85:e6:8a:ab:7d:ff:c3:5c:3b:b3:
33:57:36:a6:e2:96:81:13:92:a8:0e:21:d2:d6:dc:8a:60:2e:
28:0a:ac:c2:50:5c:9f:ee:ef:d8:fc:96:8a:0a:e3:61:b4:21:
99:f4:cf:bf:08:8a:d7:bf:04:64:32:c8:de:50:11:92:a5:dc:
59:3e:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:41 2025 by rpki-client