Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E63E42EAD97911EF950822AD762E951A.roa
File: E63E42EAD97911EF950822AD762E951A.roa (raw, json)
Hash identifier: 7/5/nx0xk8A5e6zTkNhB+l3gZ/zhIGKmmpva7sHv/zw=
Subject key identifier: 4B:5B:48:C6:FA:3B:28:4C:F6:F9:60:51:71:AD:B4:0B:F9:A3:5E:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014173
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E63E42EAD97911EF950822AD762E951A.roa
Signing time: Thu 23 Jan 2025 11:05:05 +0000
ROA not before: Thu 23 Jan 2025 11:05:01 +0000
ROA not after: Fri 28 Feb 2025 11:05:01 +0000
asID: 62240
IP address blocks: 154.195.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82291 (0x14173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:05:01 2025 GMT
Not After : Feb 28 11:05:01 2025 GMT
Subject: CN=67922261-ff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:53:d5:c9:bc:f9:d1:0b:d5:cf:d4:85:00:ef:
2b:94:31:eb:cb:9e:1d:c0:61:d0:9e:10:bf:16:1b:
39:20:d3:23:a1:3e:db:86:10:be:6e:8d:53:bd:17:
bc:02:11:9f:da:5a:f9:77:02:a5:86:0b:4f:c2:33:
47:0b:32:c5:6b:06:8d:de:48:3c:a4:88:d2:b2:62:
01:7e:db:85:12:08:1c:7e:07:11:f8:2f:6b:a8:ae:
26:89:d3:db:46:19:c5:6a:d3:4b:77:f2:87:45:12:
ae:3a:aa:21:4b:4a:c8:48:cf:e8:32:a6:21:9a:fd:
fb:e5:f9:19:0d:05:16:d6:00:f4:f9:37:70:71:05:
c2:1b:7f:76:74:54:e0:67:da:64:c7:b5:03:8f:cb:
a1:fa:14:35:d1:1d:ba:8e:58:2f:59:d0:9b:2e:cf:
db:7e:86:08:3b:b0:53:a2:56:1b:e4:9c:18:3b:1a:
b0:42:37:2c:39:60:b5:fa:48:bb:f7:00:2a:4d:3e:
42:8e:ac:f5:6f:27:2d:ef:af:88:58:10:6e:52:46:
ff:df:6d:e1:d1:25:75:31:b2:43:b0:62:8a:2d:73:
66:5c:eb:eb:01:ee:fa:75:a0:5f:9b:a2:1d:56:28:
b0:07:42:0a:f0:bc:94:60:a1:38:10:21:8a:4e:6d:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5B:48:C6:FA:3B:28:4C:F6:F9:60:51:71:AD:B4:0B:F9:A3:5E:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E63E42EAD97911EF950822AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
61:9f:11:ad:8c:0f:6b:18:49:f6:aa:2d:d3:d0:ff:37:9e:88:
7b:11:93:8e:43:5e:22:7f:99:21:5c:13:f0:fd:0e:b1:ed:e2:
07:ac:c1:dd:22:7c:e1:70:32:06:e5:30:a9:ad:59:02:b9:7b:
8b:b1:2d:da:c1:29:ae:a4:ae:96:e9:90:2e:79:51:cc:95:b2:
58:e6:bb:27:ba:8c:2a:ef:ae:13:2b:46:d3:fc:00:ef:87:68:
30:4e:48:47:0b:af:7a:f0:3f:4e:40:cc:ee:12:1e:d4:30:99:
7b:72:05:0c:1d:95:34:e0:8c:dc:e2:f0:3d:98:84:9a:80:3b:
eb:37:0a:6e:1e:3d:8b:88:97:7f:1d:00:63:25:72:9f:6b:7f:
42:6c:23:30:79:81:05:e5:1e:44:66:2d:ae:ec:e4:56:01:1d:
31:13:93:d3:fc:9f:b1:81:45:8b:48:7f:f0:72:95:ae:77:39:
0d:06:bd:a0:70:9a:23:e0:d7:13:8e:97:b2:ec:32:91:2d:15:
89:7a:71:02:d5:6e:fa:06:af:26:14:35:06:96:71:8d:fc:26:
68:e5:d7:bd:e2:0d:24:0c:35:da:0d:73:9a:d2:81:bd:47:0f:
76:20:f8:82:a8:c4:49:17:8e:21:e5:ff:8a:e2:0e:00:65:94:
22:7c:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:23:52 2025 by rpki-client