Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4A66C6D98311EFB8693772762E951A.roa
File: DA4A66C6D98311EFB8693772762E951A.roa (raw, json)
Hash identifier: G29dVyaNuFz4XNPFq3hgSX6TWf8dQBbk0vfDT/IrA18=
Subject key identifier: E4:5C:C0:B8:6F:01:A1:59:A2:FF:CD:FE:E6:22:8A:AB:15:32:9B:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4A66C6D98311EFB8693772762E951A.roa
Signing time: Thu 23 Jan 2025 12:16:20 +0000
ROA not before: Thu 23 Jan 2025 12:16:16 +0000
ROA not after: Fri 28 Feb 2025 12:16:16 +0000
asID: 62240
IP address blocks: 154.195.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82430 (0x141fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:16:16 2025 GMT
Not After : Feb 28 12:16:16 2025 GMT
Subject: CN=67923314-3e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:d0:01:4a:96:69:3f:c9:fe:a7:22:04:b7:
6d:f3:96:07:7e:30:9f:95:31:39:d3:89:ae:40:4a:
95:57:25:40:f7:18:3b:e7:53:de:b9:41:56:9d:cf:
16:0d:25:4c:69:d1:49:8a:b2:c5:88:be:71:d4:32:
0c:62:f0:c5:4e:9f:29:f8:91:a6:0b:e4:85:23:1a:
4e:a3:2b:cc:a3:85:45:ab:da:9f:de:8b:7a:fb:d2:
bf:c7:d5:5c:75:68:7f:75:3f:cf:c5:1f:3e:00:89:
46:91:ab:61:e6:47:17:b7:e7:60:00:b7:99:cd:65:
f5:1f:6c:3f:91:81:67:37:cc:2d:ab:db:b8:dc:5f:
52:0f:97:34:25:5d:31:c1:45:f6:cc:70:6a:64:4c:
87:3f:27:b7:1a:3b:16:f0:7b:fb:20:48:25:d1:39:
ec:69:5b:88:0c:f1:0a:2a:97:01:8e:9e:68:b1:fd:
4d:d2:ee:87:83:58:0e:af:6c:36:48:15:75:81:29:
3a:30:8b:fb:b4:fd:86:69:74:dd:9a:d7:75:ee:7b:
3b:91:ec:cd:82:32:cf:d6:25:7c:5d:a9:7a:07:a3:
50:f5:88:b0:0a:06:ee:8f:80:27:03:28:82:a8:4d:
d2:ac:9c:97:3f:4b:7f:2c:46:c1:66:39:57:48:d7:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:5C:C0:B8:6F:01:A1:59:A2:FF:CD:FE:E6:22:8A:AB:15:32:9B:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA4A66C6D98311EFB8693772762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.187.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:69:db:a4:59:4b:32:77:08:00:e3:52:63:ae:63:6e:e2:fa:
8e:e6:84:a6:e0:d0:92:75:60:4d:99:73:7d:90:5c:95:0d:3e:
cc:31:60:33:ae:66:de:d2:ab:2e:84:45:fb:9c:18:b3:63:a2:
30:40:58:f9:b5:f7:da:75:1d:fe:ac:dc:f2:b1:bd:0f:2f:4d:
0e:81:f7:31:13:0c:14:f8:3d:5f:a7:e6:a0:79:50:19:7c:ab:
9b:b7:f5:32:62:ce:b1:3b:10:ed:a5:d6:f4:65:08:c6:18:34:
8b:c7:9f:ab:68:ad:24:9e:3f:8b:62:ed:19:4d:3d:cd:a5:d6:
62:57:67:a7:e7:be:77:72:17:fa:6f:61:20:6a:aa:91:25:05:
92:1f:c4:2f:a5:fc:5a:9e:a3:d8:73:24:38:c5:57:a7:47:bc:
f7:e5:be:58:79:2d:69:ca:0d:95:41:2d:c7:cc:47:b6:79:02:
0b:a6:9c:15:c7:80:7e:76:11:8f:8c:c2:76:7c:a1:8a:dc:cd:
4a:32:a8:11:06:c7:92:d1:c5:01:8b:65:81:dd:9f:dc:cb:c7:
c7:19:a1:3c:ed:f8:93:a2:a9:7c:fa:b3:cf:57:02:6a:df:e7:
bc:b1:2f:6b:2c:70:19:33:eb:58:7c:81:09:ba:09:10:2c:80:
1a:ef:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:25 2025 by rpki-client