Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6BD902D96711EF9E6F07B3762E951A.roa
File: CC6BD902D96711EF9E6F07B3762E951A.roa (raw, json)
Hash identifier: yAQ+sxFH+Ydbc+3Br6dj0YlYoRrJy6IDzqD9Fi0qb90=
Subject key identifier: AB:20:3E:BE:A8:DF:D2:E8:1D:BE:D9:F0:01:90:D8:F7:CE:89:AE:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6BD902D96711EF9E6F07B3762E951A.roa
Signing time: Thu 23 Jan 2025 08:55:31 +0000
ROA not before: Thu 23 Jan 2025 08:55:27 +0000
ROA not after: Fri 28 Feb 2025 08:55:27 +0000
asID: 62240
IP address blocks: 154.194.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82096 (0x140b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 08:55:27 2025 GMT
Not After : Feb 28 08:55:27 2025 GMT
Subject: CN=67920402-c4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6f:79:88:2f:c2:f8:ef:15:8a:fa:0f:bc:ec:
19:36:23:ae:25:cd:ed:95:4a:7f:ef:06:e4:bd:e5:
c1:ff:be:00:13:33:b5:b6:03:41:75:15:dd:6b:5c:
63:75:6f:1f:4a:6f:b3:8b:55:36:31:45:8a:13:44:
d1:4f:a1:e5:04:4e:e8:76:cd:08:63:53:45:d3:38:
4a:87:0b:04:37:32:8c:c0:38:c1:66:91:8e:54:5d:
70:72:36:31:14:86:f6:87:6f:5e:7a:92:10:5c:8b:
a9:d0:98:ad:b8:c3:98:8d:a7:96:de:c9:89:c7:bb:
c5:3b:d1:94:68:4e:88:e6:6c:61:8d:9b:d7:48:be:
b0:01:4f:c8:b0:a3:d8:77:cc:9e:a1:f4:cb:44:90:
d7:e7:5d:35:9d:77:ce:6a:f2:c5:3e:be:18:fd:8e:
e9:a8:18:d9:ba:05:87:19:de:7d:15:16:4b:74:2a:
b7:f3:ab:96:a8:f6:ad:42:71:01:a8:d7:a9:c6:98:
59:f3:e7:55:ac:fb:a5:3a:04:35:e8:f3:f2:3e:45:
00:f0:95:e1:40:49:e1:b1:d8:87:f2:de:57:91:e9:
ca:d0:b9:11:07:53:c8:ff:f5:39:cf:56:07:2b:93:
b6:16:1e:29:e1:0d:a9:17:9d:d0:42:9b:2b:e0:f0:
65:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:3E:BE:A8:DF:D2:E8:1D:BE:D9:F0:01:90:D8:F7:CE:89:AE:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC6BD902D96711EF9E6F07B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.76.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ad:a9:04:b4:6d:7c:8f:61:ba:6f:86:e6:57:2f:27:5c:80:
1c:d1:ea:2e:93:c0:e4:85:8c:b1:48:04:fc:2a:a3:62:91:33:
d8:e8:7c:3f:7d:2e:a6:19:b2:62:40:b2:d2:0e:b8:5f:72:23:
68:7c:ac:a3:5a:b1:a5:65:fe:11:61:d7:27:64:55:70:e7:b1:
e1:f5:cf:25:70:eb:7b:47:29:bc:9f:ca:73:90:07:49:4e:dd:
e7:92:ee:4b:09:7c:b2:f0:4b:f1:69:74:74:cc:5f:7e:55:24:
9a:56:34:56:0e:73:44:73:86:e3:0c:54:30:ac:b8:05:3f:b9:
e6:ed:32:e9:b1:a1:9d:d9:b7:39:a3:96:3d:38:e5:15:1d:ee:
d2:3a:0c:33:da:f5:1c:c3:0b:46:bf:78:3f:a0:2a:7e:f1:fe:
32:08:c6:cf:08:e1:e4:b6:62:5c:2e:09:c0:b5:35:28:05:b3:
c8:f5:02:60:9f:76:15:88:0a:97:df:a7:24:2a:8c:83:38:45:
18:4d:45:79:b2:0d:24:ad:3f:04:2d:be:20:d6:35:5e:b6:30:
f0:e3:5e:f9:55:8d:ff:6c:01:e9:14:41:eb:46:ee:e1:78:02:
78:a3:0e:99:51:9d:87:6f:ac:b9:25:a6:05:b7:2b:47:72:60:
bd:4f:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:56:39 2025 by rpki-client