Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E225F352D96911EF8DCA6D42762E951A.roa
File: E225F352D96911EF8DCA6D42762E951A.roa (raw, json)
Hash identifier: 4JT61ftKVxOW/nNR6S03o5/ZPIgaMgFXR1Zdw1nEf5w=
Subject key identifier: 34:3D:EE:45:2B:63:5A:6F:F0:C1:A9:4A:09:FC:60:BC:40:C1:F4:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E225F352D96911EF8DCA6D42762E951A.roa
Signing time: Thu 23 Jan 2025 09:10:26 +0000
ROA not before: Thu 23 Jan 2025 09:10:22 +0000
ROA not after: Fri 28 Feb 2025 09:10:22 +0000
asID: 62240
IP address blocks: 154.194.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82130 (0x140d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:10:22 2025 GMT
Not After : Feb 28 09:10:22 2025 GMT
Subject: CN=67920782-eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:61:f8:dd:f9:01:07:27:22:1e:c0:a2:32:
ff:04:16:40:44:69:18:19:56:7e:c7:04:4e:bf:3a:
ff:9f:11:ab:56:b3:6e:29:d1:7c:a0:eb:7d:87:22:
e6:46:ec:f8:25:9b:00:dd:de:03:4b:90:7a:11:a7:
1d:27:e4:4f:94:56:4a:9b:56:a9:da:c0:32:2f:43:
9d:5e:10:f6:a3:9b:1c:e5:12:ab:84:ed:4c:e7:e5:
b1:11:fa:1d:09:30:e0:4b:af:39:37:10:08:b9:6d:
0a:2e:23:cc:5b:77:32:45:4d:6e:52:a1:35:a9:41:
22:ef:23:9a:f2:32:bf:2c:8c:52:f5:fc:4a:2c:ab:
e3:9e:b9:1b:63:f0:39:35:bd:03:e5:e4:58:4f:22:
13:33:25:81:e1:75:73:3e:46:ad:9d:79:cd:d0:8d:
56:88:45:aa:36:f3:69:36:23:f8:da:4b:5b:9c:8d:
42:5c:75:78:04:69:72:d0:4b:90:04:0b:15:f5:58:
d1:ae:01:a6:90:59:e3:fb:c0:91:73:69:17:a9:73:
b0:10:bf:a1:47:bb:53:dc:1e:3f:f2:7a:d5:04:51:
04:ca:6d:fc:be:c4:1c:c8:23:89:0f:15:10:5d:05:
29:13:b7:ea:5e:c5:1c:02:da:fe:e2:24:e7:f9:b5:
41:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:3D:EE:45:2B:63:5A:6F:F0:C1:A9:4A:09:FC:60:BC:40:C1:F4:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E225F352D96911EF8DCA6D42762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e0:df:c4:2c:2e:64:68:51:f9:dd:fe:04:ec:ca:2a:af:fb:
09:1b:b2:e6:68:00:78:10:69:14:1f:2f:6b:d1:95:38:84:42:
a1:14:9f:28:9c:ea:7e:ca:3e:9b:aa:39:c9:7c:10:3a:d6:44:
fa:8f:6a:a8:d1:71:5a:1c:c6:59:e2:81:fa:8f:d6:70:7f:1b:
ea:6d:69:85:ac:56:bc:19:17:03:49:15:a0:5c:69:4f:23:ef:
3b:36:ee:84:39:10:86:88:bf:80:3a:f3:35:97:58:31:b5:04:
e6:ef:41:d4:c5:74:c3:bb:2f:60:4f:c2:03:2f:9f:0c:37:fc:
fa:03:3b:4c:ed:95:7d:fe:e0:68:0c:05:fe:55:d4:f3:ce:55:
9d:95:06:40:2a:7e:c4:10:6c:1d:3f:25:3a:69:fa:31:4f:00:
4b:6e:7d:ca:35:5e:8a:39:9b:e7:8b:1c:00:92:90:d7:e2:ca:
7e:d5:98:9c:93:8c:fe:a6:05:62:d9:11:16:2f:14:bf:0e:91:
ad:dc:6f:2a:51:db:a5:4d:04:3a:77:8b:d1:49:35:8c:89:2e:
d4:23:5e:9d:fa:3b:bc:4d:25:64:4e:bd:20:4a:4f:b7:4e:1c:
8d:18:ef:d8:ac:e0:51:37:85:4f:4a:bc:ca:8e:74:e2:4a:de:
56:16:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:09 2025 by rpki-client