Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD93B14D97F11EF94987657762E951A.roa
File: DCD93B14D97F11EF94987657762E951A.roa (raw, json)
Hash identifier: /XezbAY77CUZvTW5OmQC3f4xI0HdI9SXZWVAr7bTdP4=
Subject key identifier: 64:B7:F6:F1:FA:7F:B3:1B:1B:A6:75:01:52:83:51:8A:09:96:75:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD93B14D97F11EF94987657762E951A.roa
Signing time: Thu 23 Jan 2025 11:47:46 +0000
ROA not before: Thu 23 Jan 2025 11:47:42 +0000
ROA not after: Fri 28 Feb 2025 11:47:42 +0000
asID: 62240
IP address blocks: 154.195.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82372 (0x141c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:47:42 2025 GMT
Not After : Feb 28 11:47:42 2025 GMT
Subject: CN=67922c62-adb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:c7:38:c6:5a:69:00:1f:04:fd:d0:14:4c:
b3:d8:ea:fd:92:3a:95:22:8f:2c:d6:28:66:6b:ce:
e7:e6:d5:21:3a:78:6a:f2:18:c0:e0:50:8b:91:55:
98:5e:d3:69:34:70:36:e9:47:b7:37:77:fc:31:74:
92:78:c5:d8:02:30:66:27:bf:f1:98:68:76:80:08:
3b:03:a0:95:46:75:29:d4:fb:38:1a:0d:ed:77:46:
b1:c8:9f:db:56:2c:11:de:44:68:9a:7b:40:eb:7e:
ef:4e:2a:5f:21:4a:24:ad:56:5c:9c:ba:e0:54:22:
c1:62:18:cf:64:98:8b:9a:1e:3a:36:ae:08:c8:89:
ee:27:3f:30:41:e7:d0:12:11:6a:07:4e:69:84:11:
90:5d:f7:6e:4b:d7:50:2e:71:6b:40:01:19:8c:b5:
bb:b5:91:da:2b:43:98:cf:bf:e0:ae:e2:a4:68:8f:
15:14:9e:77:0b:0c:90:87:13:2e:0d:56:8e:84:67:
a7:85:96:cc:23:cb:dd:24:7a:65:4d:85:41:ed:7d:
ab:27:92:d1:7a:1b:e1:e1:86:9f:c2:b9:d1:a0:4d:
6d:2d:49:24:b4:f5:a9:e3:72:20:20:1a:a8:a0:e0:
76:c8:b5:37:a5:d7:ef:ab:6d:0c:fd:74:4e:dc:5f:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B7:F6:F1:FA:7F:B3:1B:1B:A6:75:01:52:83:51:8A:09:96:75:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCD93B14D97F11EF94987657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:aa:5e:bf:64:87:69:1e:0f:0a:21:64:04:a6:ae:d0:5d:2e:
b5:72:dd:ff:72:d4:9e:8f:8e:1f:39:08:89:f4:ab:9d:7b:a1:
7c:11:9e:45:13:93:56:99:d0:3c:7e:05:a4:c0:72:7c:26:b2:
c5:d4:20:76:46:bf:e0:df:78:b4:e1:97:ea:df:a4:6b:f9:68:
d9:97:24:d3:b5:e1:2c:e5:8c:bd:48:82:d0:4e:9c:6e:23:72:
b6:89:4a:0d:e3:b0:0f:99:3a:b1:2b:b0:50:ec:d9:ee:39:c9:
ed:c8:ec:a6:d0:34:e4:73:29:ad:b8:7d:69:79:fd:e3:ee:df:
3f:bd:0d:ed:ce:23:cb:9a:a6:26:6a:ec:57:c1:65:f2:ac:54:
a9:2e:b2:9e:4a:fa:08:34:6e:1f:c8:4d:ab:79:4b:94:fd:fd:
f3:d5:22:46:6f:f7:de:91:35:7f:b0:9b:24:12:20:6d:e7:f2:
d2:12:11:fb:87:38:b3:b9:03:ab:6e:ea:51:31:94:6c:77:b0:
34:43:02:56:32:d9:34:ec:ef:22:6f:f7:c1:df:1b:ad:42:40:
47:a6:a7:ee:18:6d:d1:b1:aa:99:93:9b:82:27:1a:33:d2:2a:
67:74:40:c9:87:5d:d1:d8:a3:dc:7a:0a:f7:50:76:fe:0d:f7:
87:64:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:04 2025 by rpki-client