Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D82D74A2D98111EF87C97A63762E951A.roa
File: D82D74A2D98111EF87C97A63762E951A.roa (raw, json)
Hash identifier: 00XAOv7llMe4FtNm31an1vkwufHU7rXeGA0KGypT5+I=
Subject key identifier: 44:38:15:0A:28:97:7E:4B:53:CB:4F:8F:6E:F6:FB:B7:A0:B9:1F:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D82D74A2D98111EF87C97A63762E951A.roa
Signing time: Thu 23 Jan 2025 12:01:57 +0000
ROA not before: Thu 23 Jan 2025 12:01:54 +0000
ROA not after: Fri 28 Feb 2025 12:01:54 +0000
asID: 62240
IP address blocks: 154.195.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82403 (0x141e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:01:54 2025 GMT
Not After : Feb 28 12:01:54 2025 GMT
Subject: CN=67922fb5-4e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:89:05:d6:51:a0:36:31:b2:78:87:24:d5:
14:74:8d:63:35:ca:4e:83:1e:be:a8:10:3e:e6:29:
fb:35:f9:c3:ee:47:07:87:b5:3d:4c:d8:c6:c6:b3:
a8:01:4f:59:a5:86:f6:6b:5b:25:76:eb:2a:39:f6:
4b:fd:6f:d3:0a:86:07:9e:5e:40:79:5b:10:db:77:
6d:18:56:c9:07:f5:4c:73:f4:ee:4b:27:85:fb:5f:
47:d3:70:3e:ba:3c:47:dd:a1:22:d7:26:7a:37:2d:
8c:a0:da:c7:9f:07:dc:ca:19:0f:14:29:51:0b:79:
a0:0b:04:7d:b1:42:21:5c:af:61:dc:bf:c9:23:fa:
52:5e:85:26:17:4c:04:c2:cc:4b:f6:ac:4a:84:bf:
3d:28:05:31:4e:eb:c0:d6:e4:25:10:c0:45:10:93:
11:b3:33:fa:b4:99:68:a0:c7:7e:e5:ef:fc:1b:ea:
10:8a:e7:9c:04:ab:77:dc:53:ae:84:cc:95:db:e8:
e8:39:61:63:17:e6:50:2c:09:81:b0:05:8c:9c:e6:
6b:4d:1f:80:32:58:15:64:4e:a8:d7:10:5d:71:6b:
91:62:30:7e:d3:10:77:f7:dd:a9:09:b4:78:ca:4e:
63:fb:30:c7:c3:e3:63:84:70:7c:fd:d1:8d:cd:ee:
07:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:38:15:0A:28:97:7E:4B:53:CB:4F:8F:6E:F6:FB:B7:A0:B9:1F:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D82D74A2D98111EF87C97A63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.178.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4c:65:56:f0:88:cb:dd:83:25:a0:34:53:1a:ed:32:50:32:
1a:9a:83:ff:0a:92:ff:3a:c1:cd:64:b5:5f:ed:c1:ec:e6:f9:
e9:70:59:ef:5c:f0:64:d5:18:fd:5d:d1:43:f8:8e:73:b1:ed:
34:bc:bb:47:50:e6:44:b0:5d:b5:aa:25:73:d3:59:c2:5b:b9:
83:be:f4:87:9e:54:0b:22:88:49:34:c3:4f:fe:df:84:1d:32:
14:1d:27:5e:e3:0d:5a:73:b9:fc:fb:fc:30:a4:eb:0e:35:04:
2a:f5:e1:c0:a8:5c:c9:fd:55:f4:69:99:dc:30:e2:29:df:53:
c4:c1:19:24:f0:02:25:57:0c:8a:c4:24:f1:9a:87:0f:6d:23:
43:00:ba:a8:57:e0:29:1a:dd:4d:eb:dc:55:ba:ac:f8:26:19:
65:53:1d:18:44:5a:86:32:fb:d4:69:41:a0:7a:3c:24:bf:6f:
fa:49:5b:2d:eb:7c:78:de:71:a9:b8:68:47:d7:77:c5:5f:62:
69:f1:ae:f5:b4:4b:7d:85:70:c7:38:73:5b:61:8a:83:21:1c:
b8:5c:3e:88:bf:21:51:54:a6:96:0d:e0:78:1d:1d:78:24:38:
73:19:bb:b2:73:c0:3d:83:da:66:d8:34:e5:d1:98:c1:65:65:
2c:fe:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:16:31 2025 by rpki-client