Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F322E92AD96A11EFB17E714B762E951A.roa
File: F322E92AD96A11EFB17E714B762E951A.roa (raw, json)
Hash identifier: WK4PHjehFYsQK1UUaMnzL0j/TJyjnv+RaaU/+i+nhiU=
Subject key identifier: 28:8D:76:6D:29:79:6D:49:BA:09:7B:E2:E0:A9:04:CD:C1:AC:35:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F322E92AD96A11EFB17E714B762E951A.roa
Signing time: Thu 23 Jan 2025 09:18:04 +0000
ROA not before: Thu 23 Jan 2025 09:18:00 +0000
ROA not after: Fri 28 Feb 2025 09:18:00 +0000
asID: 62240
IP address blocks: 154.194.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82142 (0x140de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:18:00 2025 GMT
Not After : Feb 28 09:18:00 2025 GMT
Subject: CN=6792094c-51cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:c7:4c:1d:ed:8c:1d:b0:aa:86:39:dc:42:
43:ab:1b:f9:85:24:06:f4:61:64:9f:4c:39:2b:29:
2a:5e:c4:e6:29:f9:65:10:f9:fe:d0:22:11:b0:ad:
78:cf:d5:f5:e3:85:b6:eb:53:49:84:f9:92:a7:b7:
ab:2e:b8:44:1c:ff:32:49:ed:6c:cc:b3:5e:ce:e3:
ef:74:56:f5:16:8b:19:ed:6b:0c:93:f5:ac:de:27:
e1:10:2b:75:ca:87:ad:12:da:21:72:0f:97:e6:91:
d8:28:1c:6c:1a:6b:a5:a3:2e:29:6f:4d:47:4f:0e:
69:4c:66:7a:13:69:9e:28:6d:bd:2c:c9:b5:dc:a2:
15:7e:bf:ec:b3:88:5d:56:14:64:8f:e2:1b:d5:ea:
ed:03:cf:49:6c:23:63:51:9a:56:c5:46:2c:72:c9:
ef:9f:64:d2:91:a3:bf:7c:ef:bd:4f:91:5b:c6:d9:
90:a4:56:c8:39:54:5a:48:f9:2b:1e:f9:d9:cf:47:
11:be:39:d6:7c:1f:db:8d:21:02:bd:60:f8:d5:08:
8b:4f:94:8c:c1:6e:0d:6a:5f:55:cb:57:75:70:58:
af:5a:2a:3b:b7:93:e6:07:68:f5:90:03:8b:0c:ab:
91:a5:64:c6:04:e1:58:92:38:7a:79:77:c7:df:7f:
c0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8D:76:6D:29:79:6D:49:BA:09:7B:E2:E0:A9:04:CD:C1:AC:35:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F322E92AD96A11EFB17E714B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.105.0/24
Signature Algorithm: sha256WithRSAEncryption
56:9a:2e:a0:d0:ca:e5:d8:8e:88:bf:53:7f:7c:2b:cd:7e:88:
d9:fe:4c:2e:70:2d:50:bd:d5:e0:54:48:db:7f:10:a5:49:06:
62:99:d5:79:37:d0:5f:f8:e2:13:64:4a:9a:d5:64:3d:fd:18:
dc:05:ce:d6:f8:6d:09:a4:97:a6:47:47:ea:81:49:d7:81:78:
dd:16:cd:a9:ef:9e:f4:f2:70:0b:84:77:fb:23:05:b3:17:64:
66:9b:13:9d:22:5c:f9:51:8f:e3:79:ba:83:7e:fd:60:ed:a2:
c6:1d:85:39:3e:3b:1d:2b:25:25:da:87:f4:e1:d7:08:e3:f3:
7f:3f:81:46:b1:02:5b:57:e9:90:8d:f0:4f:30:79:48:95:0e:
24:0e:8b:9a:b0:5f:1d:75:89:5e:b0:52:e1:28:46:b1:06:94:
3c:7b:35:a0:8f:62:5a:04:2d:95:ed:5d:81:9e:c2:54:1d:92:
f6:3e:60:c2:08:9c:54:34:1d:c1:9b:88:2d:0a:f4:1c:26:a5:
e5:b2:bc:66:7d:5b:5a:38:b2:7b:63:0d:ed:fa:40:78:ce:54:
eb:2f:72:ca:ae:d9:62:bc:5a:c4:67:5a:f3:22:00:58:2a:4c:
bd:b7:ae:3b:bf:80:da:f3:ad:78:6c:64:46:c8:0f:8e:a4:22:
00:99:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:45:46 2025 by rpki-client