Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1FABECCD97811EFAADAD6A7762E951A.roa
File: D1FABECCD97811EFAADAD6A7762E951A.roa (raw, json)
Hash identifier: GlVSunv3Z6zkvXEIYiE6AwrHbkd40zw6aSVn0OyOX+A=
Subject key identifier: 1F:94:F0:D6:B3:04:A1:4F:6D:9F:B2:89:B8:15:12:D4:C1:81:CE:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014161
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1FABECCD97811EFAADAD6A7762E951A.roa
Signing time: Thu 23 Jan 2025 10:57:21 +0000
ROA not before: Thu 23 Jan 2025 10:57:18 +0000
ROA not after: Fri 28 Feb 2025 10:57:18 +0000
asID: 62240
IP address blocks: 154.195.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82273 (0x14161)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:57:18 2025 GMT
Not After : Feb 28 10:57:18 2025 GMT
Subject: CN=67922091-a2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:81:bb:99:0f:fa:cb:e6:d5:29:d3:b1:c4:41:
e7:13:99:74:a4:60:57:fc:cf:7b:7a:73:28:b5:be:
17:13:10:22:fa:08:26:51:55:f1:df:4a:c6:63:d6:
85:81:80:26:4c:16:b2:66:1d:9b:23:34:af:7d:3a:
2f:59:65:91:ab:3a:4d:31:a7:b1:a4:4e:f0:4d:ad:
33:fd:f6:f3:ba:8f:eb:e9:6a:c8:b2:a6:0b:bd:54:
27:9e:23:f9:a1:44:7c:79:97:bd:83:52:06:b5:66:
30:33:81:44:d3:ae:15:a3:50:cb:88:c1:8b:b5:35:
bb:b1:fe:67:54:11:bb:73:99:5c:6a:14:00:d9:47:
c8:56:ca:6a:e8:a2:73:5d:98:36:56:71:e2:b0:2e:
2d:49:1c:68:5f:2f:8c:97:92:a3:a4:0d:28:74:d0:
e5:00:72:db:0b:d9:ce:0e:eb:22:b4:cb:44:53:7d:
fa:db:68:6d:11:93:f1:ae:5f:46:5f:0a:1a:91:9c:
32:57:8e:bf:00:fe:57:96:ce:b1:c9:d8:ec:99:4a:
7d:c3:9a:70:6c:9a:14:ca:05:b2:05:0b:7b:ab:86:
04:16:4d:d7:06:8b:43:26:77:dd:6a:f3:4c:0d:c9:
73:54:3a:77:1a:8e:04:df:c4:eb:14:eb:37:be:46:
2e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:F0:D6:B3:04:A1:4F:6D:9F:B2:89:B8:15:12:D4:C1:81:CE:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1FABECCD97811EFAADAD6A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.142.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:78:ba:21:2d:47:36:dd:d0:bf:b3:db:2a:96:ff:3d:b2:da:
b2:b7:c4:8f:ab:f1:58:e1:76:29:47:68:cd:ec:8e:9e:3c:86:
b1:b1:fb:6f:65:80:5c:91:ff:61:a4:96:b8:bc:c4:a3:82:72:
3f:6f:cd:3b:58:d4:88:05:cb:9b:05:f3:4e:c2:da:4b:a7:32:
cc:47:76:b3:d8:23:1d:cf:fe:61:d9:32:60:d0:4e:ad:47:e0:
f3:47:d4:c5:14:1b:2e:02:22:9e:eb:cf:94:a6:95:73:a5:35:
b5:b4:96:20:86:5f:f6:a4:6e:46:26:55:24:30:dd:a4:d4:c9:
26:44:db:e2:17:90:7c:2b:20:27:bf:99:a5:80:47:1b:b5:31:
7c:23:ca:de:b5:46:4a:98:f0:0f:3b:19:26:de:22:ec:63:3f:
63:f7:2b:cb:1b:cf:76:4f:0e:d6:a4:5f:a9:d5:89:22:e6:d4:
8e:09:75:10:d9:8c:4d:7b:30:2e:ab:a6:0e:6c:4a:23:57:62:
5f:fd:15:a2:2d:be:91:9f:04:3d:7f:d8:53:3d:75:87:6f:82:
23:39:cb:12:81:60:64:73:b4:41:32:ef:11:65:73:cc:17:fe:
f6:e9:ac:10:34:d8:be:9a:fd:18:9b:7b:8d:b3:7c:ae:3c:ca:
30:3b:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:03 2025 by rpki-client