Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35B2062D97D11EF973C1A4A762E951A.roa
File: E35B2062D97D11EF973C1A4A762E951A.roa (raw, json)
Hash identifier: kUbgBKzzcA4LO8eSjIw54TxQlpegkDafzDyK73hAhdw=
Subject key identifier: 09:1F:97:B6:8F:32:E4:9B:27:18:2A:78:39:FB:8C:F0:84:46:E6:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141A4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35B2062D97D11EF973C1A4A762E951A.roa
Signing time: Thu 23 Jan 2025 11:33:38 +0000
ROA not before: Thu 23 Jan 2025 11:33:34 +0000
ROA not after: Fri 28 Feb 2025 11:33:34 +0000
asID: 62240
IP address blocks: 154.195.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82340 (0x141a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:33:34 2025 GMT
Not After : Feb 28 11:33:34 2025 GMT
Subject: CN=67922912-4c3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:1a:ea:25:63:ee:ef:62:d8:40:ce:1b:57:
9a:58:d0:3f:4d:27:57:d2:2f:08:75:f5:96:42:5c:
85:28:84:40:9c:4a:16:08:a0:4d:42:4c:e6:28:93:
78:22:57:c7:62:b4:19:78:49:35:22:1f:00:12:de:
07:35:a7:30:8f:32:91:de:f2:8e:40:48:1e:38:2b:
6f:26:59:dc:05:99:ce:06:fc:99:33:f2:18:5e:92:
05:d5:57:05:ab:b1:a5:66:7c:66:b7:19:72:e4:58:
2e:2b:d9:b3:87:a2:4a:f9:b3:3b:af:31:b9:74:f3:
12:1b:a9:9b:2d:c0:81:12:33:15:d9:31:4e:d0:55:
b9:34:b4:22:2f:7f:b0:2e:54:90:52:73:1d:66:f9:
c1:f2:98:ba:56:65:9f:34:1c:58:2f:fe:b1:15:8c:
2b:50:a1:8e:e0:e0:8a:50:1b:55:51:be:3f:b0:80:
d4:f2:3c:1d:c0:4b:06:a6:c0:65:cb:27:ac:49:39:
b1:f4:3f:d4:c1:6b:21:9a:6b:ff:02:d0:b9:d3:91:
d5:47:5c:bf:0c:a7:b5:17:a8:f8:18:f3:74:43:b1:
74:96:12:c4:2c:86:ff:8c:5f:f4:18:d9:22:17:8e:
d2:da:90:ba:e8:8c:5a:c5:d9:7b:d4:54:ff:b6:3b:
8d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:97:B6:8F:32:E4:9B:27:18:2A:78:39:FB:8C:F0:84:46:E6:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35B2062D97D11EF973C1A4A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:3a:42:43:e6:54:02:de:36:61:2c:64:63:c7:81:b7:86:e9:
44:e6:00:1c:cf:27:45:0a:0a:b6:1d:59:0d:3e:1e:05:a9:a9:
d7:9d:9f:03:ef:d4:6b:c0:2c:28:9b:da:2c:ca:49:1f:c1:99:
85:d4:5d:9b:39:32:42:5f:a2:47:cb:d0:46:90:d1:a7:48:a3:
9d:00:16:6b:b3:01:ee:52:5e:2a:b6:12:25:d0:ca:3c:33:85:
8c:e2:2c:61:8f:f9:02:ed:74:aa:29:26:5a:6e:36:44:23:75:
0e:fe:6b:c1:62:2b:12:5d:ab:5f:03:f2:74:e8:42:d7:69:ff:
30:e2:90:4a:88:56:17:65:84:48:a6:2b:40:1f:85:de:18:45:
ce:c1:14:02:df:38:b1:dc:01:8a:cc:b1:ff:e1:bc:77:50:c9:
78:7f:29:37:2c:f5:cf:1c:42:53:c3:ed:6c:b0:6a:95:96:33:
5f:06:eb:40:96:e1:83:b6:1c:9b:18:0d:d0:fe:8e:58:50:f7:
32:50:4a:e4:df:8f:b6:c0:23:d3:92:fe:eb:2e:0a:0e:8b:38:
32:a0:8e:a4:be:99:c1:96:24:70:28:34:4b:f3:44:b0:7b:28:
76:0a:3b:ff:0d:db:d2:ae:9f:3c:ef:bc:bb:20:26:02:c7:ea:
17:3b:8b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:54:12 2025 by rpki-client