Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD37D710D9D311EF8E766281762E951A.roa
File: DD37D710D9D311EF8E766281762E951A.roa (raw, json)
Hash identifier: FeYM9cTifl/As5ivU1bJXDO5eEA3dFDo8vCjUqE540c=
Subject key identifier: CB:33:6C:14:95:6B:4A:99:F5:CA:4F:55:FA:16:56:02:77:03:E1:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014325
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD37D710D9D311EF8E766281762E951A.roa
Signing time: Thu 23 Jan 2025 21:49:04 +0000
ROA not before: Fri 24 Jan 2025 21:49:01 +0000
ROA not after: Fri 28 Feb 2025 21:49:01 +0000
asID: 62240
IP address blocks: 154.194.82.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82725 (0x14325)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:49:01 2025 GMT
Not After : Feb 28 21:49:01 2025 GMT
Subject: CN=6792b950-ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9c:35:5b:18:25:5e:26:93:9d:df:e0:93:29:
f1:bb:9e:f6:90:1f:c3:22:7b:c8:9a:d5:bb:4a:b2:
2f:a7:22:13:ab:9b:9c:98:6e:36:b9:90:59:00:9a:
30:b3:f9:01:2b:0b:0d:44:71:a2:7b:29:31:2a:18:
f7:d8:db:e4:fc:ec:9e:bd:97:ba:ef:be:44:36:ea:
33:31:b1:71:9b:79:5d:23:c2:9d:fa:01:2f:f5:bb:
80:0f:fd:e8:13:97:40:c7:2d:9b:18:90:ff:8f:e1:
5c:e6:6d:71:9c:6c:f4:c3:f4:8d:76:6a:52:74:fb:
11:51:c4:6c:5d:ca:a1:69:31:c5:7c:10:f4:99:bc:
50:e0:52:3c:f3:3e:52:4c:0c:5e:b5:b2:9a:c0:a8:
78:ac:58:20:71:13:e9:d7:04:70:1b:b1:eb:d3:75:
1a:23:6e:9f:e1:5d:e5:a5:d7:3c:e2:65:9e:50:ae:
17:67:cd:3a:17:67:19:96:ae:0d:82:61:f6:47:20:
b0:36:41:3c:bd:bf:ef:65:af:51:88:bf:60:a6:7a:
b3:99:f2:0b:89:73:dc:fc:9a:84:6d:db:c5:17:bb:
b6:c6:b9:7e:c9:52:a8:2a:8b:70:64:b0:ba:81:35:
fa:ad:c0:1a:7e:20:64:26:46:ce:34:15:bb:14:12:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:33:6C:14:95:6B:4A:99:F5:CA:4F:55:FA:16:56:02:77:03:E1:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD37D710D9D311EF8E766281762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.82.0/24
Signature Algorithm: sha256WithRSAEncryption
65:24:89:60:d5:76:82:2e:58:3b:68:53:62:ed:c3:36:37:0f:
1f:39:3e:6e:17:60:d9:95:4d:a2:3d:03:1d:94:ad:62:62:7d:
92:fa:f3:96:bd:36:98:cd:76:b6:4e:77:90:ef:99:96:69:3a:
ea:10:5a:f8:04:09:ee:ca:25:5c:25:3f:39:1d:23:c3:95:6e:
b2:4b:69:5a:6f:0d:c7:1b:d6:cd:0b:35:51:c7:f7:e0:9f:77:
67:2f:12:19:fa:e9:a4:7f:05:42:38:d6:47:77:24:0e:cc:9f:
93:c2:01:27:9e:89:17:1d:fd:f4:7a:5f:7c:f8:b6:ae:dc:28:
ad:ae:3e:00:0c:bd:b4:f4:b0:c2:39:bb:2f:51:af:ae:ef:ca:
0b:3f:48:89:51:34:6e:e5:dd:8a:b7:bc:6e:8b:28:98:4b:10:
25:2a:8f:6f:50:0b:06:2c:e8:99:e8:a7:10:c2:00:c8:5e:f6:
0e:be:de:e0:84:c0:20:68:53:62:1b:4c:a4:9e:47:cc:f0:08:
c3:cd:ff:e4:51:5d:9b:97:ed:f7:12:12:5d:3b:aa:20:e3:c6:
45:49:8a:ea:7e:c0:03:14:b0:98:a0:44:c0:35:a0:b1:b1:13:
63:5d:f0:fd:d8:03:e4:ac:27:72:ce:2c:1a:be:43:35:b4:ac:
9f:83:9b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:03 2025 by rpki-client