Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5430158D96811EF995781BB762E951A.roa
File: D5430158D96811EF995781BB762E951A.roa (raw, json)
Hash identifier: CrM/y4XQ+4mmBLTIGaBEVmW8oHD43rFtSQZ+NVdEJSI=
Subject key identifier: 74:23:DC:AE:C9:75:AE:89:56:2E:DD:D1:48:1B:99:33:9B:7C:DF:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5430158D96811EF995781BB762E951A.roa
Signing time: Thu 23 Jan 2025 09:02:55 +0000
ROA not before: Thu 23 Jan 2025 09:02:51 +0000
ROA not after: Fri 28 Feb 2025 09:02:51 +0000
asID: 62240
IP address blocks: 154.194.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82115 (0x140c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:02:51 2025 GMT
Not After : Feb 28 09:02:51 2025 GMT
Subject: CN=679205bf-4a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:01:6b:39:61:ed:ac:b9:72:3d:60:89:91:
fe:3c:d8:3f:40:f3:52:2c:57:ae:a7:e7:77:ad:b3:
1e:bc:28:d4:22:41:91:7d:83:b9:b4:ca:85:35:04:
e2:68:50:cf:e0:c8:19:1b:71:7b:89:21:b7:92:69:
41:04:2d:f5:67:df:9c:af:54:e4:0c:69:b5:3d:6c:
09:c9:00:70:b8:82:fb:75:7e:15:ab:c9:cb:86:b3:
c0:e6:cc:06:33:52:14:35:e5:b9:18:00:97:fa:da:
fd:9f:86:4d:81:bf:f6:31:74:bf:0e:9f:da:95:f7:
d2:b4:12:f6:db:dd:ec:fe:64:53:fb:09:26:86:32:
ae:8f:03:8b:97:25:3f:7c:f3:a0:9e:1e:a2:de:83:
2f:95:a5:9e:bf:2d:9a:ff:06:fc:8a:1b:4a:06:c2:
01:cd:33:a8:9c:f0:3d:35:2f:0f:52:a3:6c:f0:bc:
b9:05:fb:fd:79:64:fc:0a:45:14:0a:52:65:31:ca:
a3:27:5f:cc:62:e6:6d:c1:3a:1c:e9:c1:62:38:64:
e9:dd:14:e9:c0:c7:ad:69:e8:70:1c:77:f6:d7:02:
cd:83:4d:0b:33:03:56:c5:71:25:b8:12:45:a0:bb:
fd:15:17:bb:63:19:5f:76:1f:a3:ec:b3:b1:33:93:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:23:DC:AE:C9:75:AE:89:56:2E:DD:D1:48:1B:99:33:9B:7C:DF:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5430158D96811EF995781BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.96.0/24
Signature Algorithm: sha256WithRSAEncryption
94:fc:11:9d:8b:87:0d:1d:22:cf:58:66:5f:d3:4e:e0:f2:1c:
fa:3a:8a:ca:79:12:c9:63:fc:51:26:0d:ba:dd:50:9f:98:ec:
76:c2:f7:9a:33:fd:f5:d9:1e:30:c0:3e:b3:d4:c4:93:3a:1e:
88:10:b8:45:ed:36:99:3e:9f:71:ff:cc:03:89:25:9b:fe:f7:
4f:5c:f8:06:b8:1b:81:5a:c9:9a:e2:78:b3:73:b7:86:1c:90:
9d:61:bb:cb:9a:2e:cf:05:83:cf:18:e7:c4:c5:b1:3f:14:dc:
05:29:42:66:8a:7e:b7:9c:2e:d0:be:1c:59:70:8e:c3:fb:42:
6b:1f:61:5a:dd:a8:55:c5:e6:3a:3f:74:6a:36:5b:bf:ca:3f:
eb:3c:c1:94:f7:dc:1b:61:94:79:39:dc:51:fe:9a:9f:3a:bb:
17:3d:04:0d:66:00:a6:4f:ec:ab:87:b2:3a:c0:bc:6f:3f:8d:
76:aa:25:83:59:e6:87:2a:cb:fc:3b:47:aa:3a:d2:ef:56:34:
d0:44:06:7c:01:b2:34:b0:01:51:63:ce:4a:b9:ed:6f:0c:e2:
cc:9b:6a:e8:85:0f:59:47:d8:29:a6:35:7a:9d:c7:9e:5f:67:
47:08:4f:9a:29:53:f1:0c:84:42:18:a0:30:e3:69:ab:36:e4:
69:9f:46:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:03 2025 by rpki-client