Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2A628CED9D111EFBE413C74762E951A.roa
File: F2A628CED9D111EFBE413C74762E951A.roa (raw, json)
Hash identifier: vRegBaCllTOXJSEjtGW+NZxiP5sfxuQOW2BuF+wG5uM=
Subject key identifier: ED:26:CF:4F:D7:47:C7:6C:30:D8:88:79:66:98:9E:3D:AA:8B:48:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014317
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2A628CED9D111EFBE413C74762E951A.roa
Signing time: Thu 23 Jan 2025 21:35:21 +0000
ROA not before: Fri 24 Jan 2025 21:35:17 +0000
ROA not after: Fri 28 Feb 2025 21:35:17 +0000
asID: 62240
IP address blocks: 154.196.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82711 (0x14317)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:35:17 2025 GMT
Not After : Feb 28 21:35:17 2025 GMT
Subject: CN=6792b619-5ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c2:85:37:f0:32:a1:68:4b:c0:89:3a:2f:de:
47:8d:55:f7:79:e2:a1:11:b0:8b:a9:ae:2f:94:9a:
6b:45:b3:f7:c0:67:10:d9:f6:da:a7:39:82:2b:bc:
f6:4b:ed:ae:51:26:7d:fc:cb:54:25:16:8e:11:b0:
c6:b6:27:03:cf:55:d1:c3:c6:25:64:f9:38:eb:b0:
d2:02:35:2b:83:81:21:5b:d1:18:8f:6c:e0:b0:67:
db:6a:35:2e:e3:71:c8:82:36:1b:4f:66:da:d4:b3:
ef:cd:08:5c:af:3b:6d:28:2d:a9:e4:02:0d:16:b8:
77:44:c7:12:79:7c:e1:23:20:72:83:4d:9b:c9:d4:
e9:74:24:ba:60:c3:a6:e8:28:16:96:74:3c:2e:a2:
dc:91:f9:05:9a:4d:d5:ce:54:26:29:fc:32:cf:0c:
12:41:a1:0d:4c:6b:f3:c2:09:3a:2d:45:0e:54:ff:
8d:9c:5a:19:9b:e1:3c:a9:af:a5:90:cc:9a:b2:90:
9b:6b:da:2a:9c:2a:4f:c9:3a:39:57:c4:2e:c4:53:
c1:8c:db:eb:4f:9e:99:64:47:a3:3d:73:cb:89:d9:
4a:6a:04:5c:5b:07:6d:c8:e0:a4:a3:41:e6:2a:e0:
a5:8c:ea:70:fa:89:e9:4a:70:5c:7c:be:6c:36:8e:
52:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:CF:4F:D7:47:C7:6C:30:D8:88:79:66:98:9E:3D:AA:8B:48:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F2A628CED9D111EFBE413C74762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.85.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:da:d4:7d:7f:1c:75:fd:1b:cf:0d:0e:03:d3:9d:3d:6c:54:
58:75:1e:b7:95:c0:81:ed:7c:e3:d7:7f:0c:23:4f:79:18:17:
24:20:8f:b0:78:ea:af:f4:9a:2e:d8:05:0d:d4:6b:ea:22:e1:
6a:56:7a:d6:89:1e:af:66:a5:67:89:c5:7c:d4:80:8c:f6:4a:
e2:38:42:d9:81:bb:c8:b3:e7:4f:ab:2b:08:c0:a6:19:f8:a6:
07:9b:01:ba:8d:71:f8:54:54:d4:dc:f8:bf:b4:6f:03:7b:2c:
9f:fa:03:07:4d:f2:35:0c:e4:9e:27:9c:61:87:b9:ec:88:67:
8d:c9:f0:97:f4:a0:ed:76:22:cf:50:0c:c2:d0:0e:fd:18:9b:
cd:4c:b8:08:73:f0:f2:46:4f:fa:46:8b:00:10:d2:74:f0:56:
2c:6a:cc:fc:07:4c:e9:7d:60:fc:e3:a5:ab:79:d8:c8:2c:09:
09:84:59:06:3a:04:56:11:5f:f1:5f:9e:35:03:8f:39:b4:e6:
8e:5d:93:aa:95:1c:39:96:33:13:64:13:28:06:bf:ef:7c:81:
aa:f2:2c:cc:88:51:68:6c:68:67:44:23:f3:8c:65:7e:ae:83:
22:69:b6:c3:53:64:b5:6a:22:78:a8:50:92:aa:4f:18:15:aa:
d2:a9:41:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:00:53 2025 by rpki-client