Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6CCF28ED97411EF9998F38A762E951A.roa
File: D6CCF28ED97411EF9998F38A762E951A.roa (raw, json)
Hash identifier: 3OaOr6slCOl6WM7Qt/o7BmzB/bL/EiFRgwoKxl13s/M=
Subject key identifier: 50:2B:6D:95:8A:93:53:C3:4C:88:1E:8F:99:83:09:D1:A1:7C:BD:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01412A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6CCF28ED97411EF9998F38A762E951A.roa
Signing time: Thu 23 Jan 2025 10:28:52 +0000
ROA not before: Thu 23 Jan 2025 10:28:48 +0000
ROA not after: Fri 28 Feb 2025 10:28:48 +0000
asID: 62240
IP address blocks: 154.195.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82218 (0x1412a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:28:48 2025 GMT
Not After : Feb 28 10:28:48 2025 GMT
Subject: CN=679219e3-5730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7b:ae:fd:f8:a8:dd:8d:52:87:54:3b:5e:a1:
72:5b:49:c7:e7:e5:53:d2:46:51:93:6b:5f:59:f1:
49:b3:32:6e:03:7f:ba:9e:65:51:52:1a:f4:64:5c:
26:56:c2:2a:d9:01:c5:94:dc:4a:5f:b5:cb:0f:74:
b8:e1:ef:21:eb:23:60:c3:55:fd:a3:8f:8d:2c:bb:
a2:a4:1c:ed:09:69:63:b7:40:10:02:25:f9:73:b7:
35:c1:fe:ae:bf:09:6c:51:64:71:dc:30:4e:27:d3:
d3:55:16:e6:91:e2:ad:96:ab:7a:f3:d4:33:bf:64:
53:09:ae:15:cf:f8:25:e7:3d:53:12:05:f6:61:62:
7a:82:34:fd:01:56:fd:8f:3e:e1:db:f8:e7:c1:fb:
08:eb:a6:48:b0:85:c0:02:1b:9d:ff:c5:47:f4:b6:
fe:5c:2d:1a:19:04:47:ea:96:f5:d2:80:4a:8f:ab:
f6:d3:e2:41:4a:4f:dd:bc:f2:30:5b:7e:27:da:47:
cb:46:85:09:43:6c:38:fd:a4:3c:e9:bc:23:50:ff:
30:21:4f:19:64:d4:23:11:0a:87:f4:66:de:db:1f:
e3:d6:de:48:b7:b6:05:ea:3a:15:28:b7:63:b9:b9:
f5:a7:79:b7:d2:0b:a7:3d:d8:61:58:04:16:db:8e:
24:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:2B:6D:95:8A:93:53:C3:4C:88:1E:8F:99:83:09:D1:A1:7C:BD:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6CCF28ED97411EF9998F38A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.1.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e2:c7:56:22:5e:89:f5:66:33:dd:c2:a5:91:cf:83:c4:22:
ec:24:a9:d8:0e:8b:c4:af:f5:86:4c:50:49:09:96:e5:3d:25:
e6:47:ca:b2:bb:24:1d:ff:f4:2b:81:51:bd:11:1b:3c:31:cd:
a5:95:09:f2:e0:ed:58:e2:7d:10:50:16:8c:b1:56:74:3c:d4:
a8:b8:c5:69:2a:95:22:db:80:a4:3b:9c:53:66:1e:c0:1d:a1:
f7:2b:09:27:5b:a4:47:3b:d2:12:2b:67:b7:c1:0d:58:a4:39:
4e:4b:98:f9:3d:86:09:53:c9:b8:89:01:e9:a3:43:59:54:83:
51:7a:77:1c:4e:62:c4:99:6e:e2:d2:88:fe:9f:85:df:1e:e8:
1b:c5:6b:fe:0d:11:df:51:a2:6a:d2:43:a1:f2:27:b0:d8:fb:
4a:62:dc:da:f0:03:7e:fa:76:b1:2d:6b:b2:2f:e9:05:c1:c5:
58:e8:04:0b:35:d8:15:8d:44:f1:d2:a6:d4:23:ba:94:ce:af:
9f:98:1d:06:c6:8b:d7:d9:b9:18:15:49:ba:75:e6:f5:25:35:
88:eb:a4:5d:dc:b8:18:9e:48:1f:6e:0a:ec:3f:d3:c0:14:a3:
39:0d:22:59:a1:3d:b5:4e:7c:2a:1e:a6:ad:a3:04:35:03:0d:
a9:15:85:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:46:23 2025 by rpki-client