Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE48B53AD98611EFABE9CC86762E951A.roa
File: EE48B53AD98611EFABE9CC86762E951A.roa (raw, json)
Hash identifier: HbRpz/rdJkA5n6rWhHOs5Y1jsvvU04Vf1ZPaxBY+AJk=
Subject key identifier: 6C:DF:28:FD:AD:97:1A:06:AA:CF:E7:C6:2F:F5:FE:CF:07:4A:01:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01422A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE48B53AD98611EFABE9CC86762E951A.roa
Signing time: Thu 23 Jan 2025 12:38:22 +0000
ROA not before: Thu 23 Jan 2025 12:38:17 +0000
ROA not after: Fri 28 Feb 2025 12:38:17 +0000
asID: 62240
IP address blocks: 154.195.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82474 (0x1422a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:38:17 2025 GMT
Not After : Feb 28 12:38:17 2025 GMT
Subject: CN=6792383e-cd1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:56:7d:72:9b:e0:0e:5e:a6:c1:0e:fb:8f:95:
d6:36:f0:0e:1b:b8:4b:71:e5:61:d8:af:58:b2:45:
d1:cf:6b:36:31:8b:fa:1f:47:82:e9:a2:d3:92:4e:
57:b3:54:be:8c:09:0c:cf:11:8b:20:46:bc:eb:00:
f9:39:a7:11:f5:8c:e0:8b:f3:ca:80:10:b4:9d:93:
08:9e:48:ad:28:ce:d0:ba:c1:67:a7:ae:ad:b5:49:
c6:b9:1a:a2:6a:91:e3:90:79:8d:dd:5e:7f:56:c3:
cc:fc:78:81:66:01:72:f7:30:31:e5:8a:1b:2a:41:
64:46:f3:62:ec:aa:6e:ea:30:9a:94:46:6c:af:4e:
f9:49:4a:68:00:72:25:d3:16:f7:ee:fb:53:7e:5f:
aa:9d:8d:98:fb:3c:ff:b8:fe:a7:06:3d:72:6e:d5:
97:ba:c4:79:b1:89:ad:1d:21:3d:d5:e2:ec:20:5b:
96:cd:69:ef:4f:cf:37:fe:ac:3d:5f:d1:5d:d4:19:
b1:9a:e0:f4:bd:88:c6:b9:94:a8:66:86:15:e1:2e:
41:64:e1:45:1c:55:de:48:fb:73:9d:c9:9d:77:dc:
bb:c5:7f:48:9d:b8:db:16:99:92:98:c4:27:3a:a7:
b3:7e:d3:6d:4b:b6:75:37:41:87:2b:c1:cb:f3:c5:
c8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DF:28:FD:AD:97:1A:06:AA:CF:E7:C6:2F:F5:FE:CF:07:4A:01:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE48B53AD98611EFABE9CC86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.24.0/24
Signature Algorithm: sha256WithRSAEncryption
06:29:a1:8a:5c:32:23:d2:0b:0b:5d:66:aa:8a:c4:b1:62:5a:
0f:e6:f4:20:0b:b5:77:af:19:c0:b6:61:83:87:7d:b3:de:2a:
eb:07:f9:ca:07:44:4d:5c:e1:66:6f:91:3b:38:f8:88:c0:56:
bc:64:a4:92:ab:2f:81:ec:0e:2a:e0:29:ac:bf:38:4b:b8:62:
a5:d4:43:89:6e:74:f4:bb:e3:f8:47:da:80:d5:e2:c9:1a:dc:
71:d8:3c:45:39:c3:cb:6f:81:a0:47:81:16:a3:bb:f2:5e:56:
12:c6:34:d6:7a:20:4f:b5:ad:c8:85:46:40:f4:6d:53:0c:e7:
61:66:61:73:e2:72:85:b5:a8:3c:28:26:65:31:75:e7:40:ff:
e8:ec:7e:10:5a:72:60:f1:e2:ae:e3:b6:f1:a1:f9:2e:fe:09:
5d:aa:5d:d0:56:fb:73:53:ea:ff:82:65:06:89:78:12:cc:31:
c7:90:57:da:a1:83:6d:96:6d:40:09:b4:5b:34:87:e0:5e:cb:
80:69:2c:df:13:88:e3:ad:78:4c:e5:98:4d:7f:7f:88:77:54:
55:0f:58:fb:dd:62:db:1b:e7:c2:fe:81:88:08:c5:e8:75:59:
5d:37:19:b3:4f:3a:50:2c:95:63:f5:de:cd:ff:b6:67:db:a3:
e2:b8:51:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:28 2025 by rpki-client