Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD909448D97C11EFB471BE40762E951A.roa
File: CD909448D97C11EFB471BE40762E951A.roa (raw, json)
Hash identifier: MMUlNk0LGkW9PJW/ZLajHb+r0S220L9xayQ9BpIzbME=
Subject key identifier: 61:C9:24:3D:A8:77:24:AE:3B:01:6F:F9:E8:DD:7A:1A:77:A1:8A:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014197
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD909448D97C11EFB471BE40762E951A.roa
Signing time: Thu 23 Jan 2025 11:25:52 +0000
ROA not before: Thu 23 Jan 2025 11:25:46 +0000
ROA not after: Fri 28 Feb 2025 11:25:46 +0000
asID: 62240
IP address blocks: 154.195.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82327 (0x14197)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:25:46 2025 GMT
Not After : Feb 28 11:25:46 2025 GMT
Subject: CN=67922740-0e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:f7:bd:bd:5c:f3:88:36:d0:82:a1:ee:57:
aa:8c:d8:dc:38:58:55:69:d4:a7:31:33:9c:be:50:
78:7a:28:e1:19:35:00:69:99:56:62:c3:31:59:a5:
0b:3c:a5:81:83:42:de:ee:73:5a:5e:a9:7a:4f:11:
50:0b:b6:b1:66:02:92:f1:a3:00:ce:be:79:c0:df:
b5:10:84:6d:66:cb:63:fa:13:0e:a6:b9:7e:5f:6f:
38:68:1a:44:c9:58:a4:86:75:ad:54:89:ae:a0:d0:
64:6a:d6:28:5f:7e:e1:18:e8:47:9e:64:b9:f5:66:
5d:ff:00:79:20:d9:f0:40:2c:af:9e:59:b6:35:f0:
9e:aa:4a:c0:73:08:2d:4e:df:b7:fd:63:b4:77:d8:
a8:65:ea:65:ad:2f:24:ce:93:6a:e9:be:f0:ab:d9:
ad:72:73:df:06:68:ab:1a:f5:a7:31:f8:27:59:2f:
f5:f6:5c:c5:8d:54:47:67:99:3a:48:5f:69:a0:29:
20:96:65:62:83:db:8f:3e:01:15:84:00:12:51:ea:
f9:0d:18:7d:b2:44:5a:d0:86:84:d0:f0:6c:b8:d9:
ef:34:34:97:07:8d:7e:d9:59:0b:b5:2c:1a:2d:ed:
05:d4:54:cc:88:5d:34:f4:57:6f:b5:6d:d0:00:11:
56:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:24:3D:A8:77:24:AE:3B:01:6F:F9:E8:DD:7A:1A:77:A1:8A:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD909448D97C11EFB471BE40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.157.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:57:c5:5a:12:1b:b6:42:e7:cb:2b:a8:7f:0e:9b:37:7b:3d:
7f:ad:2d:ab:d1:92:08:c9:2f:c3:9a:d5:83:77:d4:ee:e2:cf:
d3:63:42:27:26:af:54:29:c2:0c:19:fc:29:f9:a8:7c:b6:e3:
5d:fd:f1:09:aa:bd:21:86:e7:aa:44:6c:4d:25:a7:c4:4f:2f:
86:b6:f6:2b:f7:3e:ed:7c:ef:a3:09:5d:e6:8d:49:a8:57:b2:
ec:e7:0e:28:02:2e:ed:b2:7c:f5:0a:27:a6:b1:94:ab:03:aa:
2d:62:ee:bc:c6:3d:04:37:06:10:01:05:51:a3:3e:59:49:3d:
a3:bb:70:e0:8e:68:86:9c:62:1f:f2:75:c3:34:6b:4f:e1:8c:
3d:ce:63:8d:ea:de:fd:3c:2c:8b:66:29:8f:b6:fb:a8:39:36:
49:13:31:f9:7e:00:00:84:03:64:46:cd:2a:c8:cb:0e:b7:17:
f1:94:81:9b:26:1a:a9:3f:e3:17:e0:32:50:9a:f5:bd:d0:8d:
a6:92:38:ca:5e:39:65:34:2a:3e:7b:f3:46:10:1b:63:c7:c9:
3c:7b:e0:a4:4f:3a:0e:b7:d7:b7:6d:ef:14:53:3f:5c:54:1d:
08:28:a8:9c:87:12:6a:e0:a1:d4:16:d9:63:4e:73:ab:1a:6d:
90:b3:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:22 2025 by rpki-client