Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E84D4AD9CE11EFA9CAAF60762E951A.roa
File: F4E84D4AD9CE11EFA9CAAF60762E951A.roa (raw, json)
Hash identifier: Fdvt3XkLpST3h/IUDi6HzaDTyQhO4hdJt83+jTiTExg=
Subject key identifier: B3:3D:4E:07:7E:A6:61:73:71:14:2B:38:B5:B1:D9:02:C5:46:8E:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014301
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E84D4AD9CE11EFA9CAAF60762E951A.roa
Signing time: Thu 23 Jan 2025 21:13:57 +0000
ROA not before: Fri 24 Jan 2025 21:13:53 +0000
ROA not after: Fri 28 Feb 2025 21:13:53 +0000
asID: 62240
IP address blocks: 154.196.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82689 (0x14301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 21:13:53 2025 GMT
Not After : Feb 28 21:13:53 2025 GMT
Subject: CN=6792b115-0d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:f5:5b:ee:17:6a:94:49:9b:5b:5a:00:bb:
31:fa:1c:24:f7:6b:5f:ce:91:39:d7:1a:c5:ff:be:
73:2d:3e:7e:b9:f8:6d:90:0e:3d:a8:ee:e6:fd:b9:
ed:dc:67:4e:ea:89:1a:90:c8:7e:33:12:7b:1a:86:
d4:b4:75:89:1a:22:71:5a:7e:ad:7b:9d:5b:5a:39:
67:5d:a4:80:48:62:5a:36:42:a9:24:3c:a5:09:25:
b4:b6:48:8e:43:da:58:81:74:9a:26:88:08:ba:55:
56:81:16:2d:a0:40:c2:8c:70:24:ff:b8:f6:7c:13:
4f:2f:90:d1:c0:77:24:60:4c:85:b9:d4:66:a8:e6:
86:c9:51:83:f5:e3:1f:ff:32:f9:37:2a:38:94:d4:
f3:fc:8f:e4:fd:02:f0:27:7b:c7:07:33:6f:18:65:
b0:90:bb:94:6a:10:f5:82:38:35:df:c5:a3:73:b4:
58:3b:45:dd:59:93:ab:e9:23:d5:87:ef:c5:31:6c:
07:c8:05:da:10:c6:9c:f0:c4:c3:eb:03:93:c7:c0:
af:0d:76:c2:46:7a:42:b5:9f:2b:43:42:05:92:6c:
7e:dc:c6:f7:3f:ba:93:08:e5:82:a8:4b:f6:7b:b4:
e3:37:d2:8e:42:0e:09:1f:ab:f6:26:86:62:de:17:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:3D:4E:07:7E:A6:61:73:71:14:2B:38:B5:B1:D9:02:C5:46:8E:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4E84D4AD9CE11EFA9CAAF60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.76.0/24
Signature Algorithm: sha256WithRSAEncryption
38:25:94:2b:ec:cd:fa:d7:38:10:c4:5b:1c:5e:b1:d3:90:ef:
70:58:bc:59:de:8a:c8:55:e5:c2:cc:40:a4:05:86:0d:94:94:
55:5c:0c:49:d4:68:8c:b9:c9:00:50:57:1c:0e:92:d5:a7:b0:
9e:e1:63:92:a0:fc:3e:5d:a0:72:ea:eb:2a:bf:e5:b1:45:d4:
5d:99:ff:0f:cc:3f:3e:b6:2d:1b:cc:6d:b0:95:86:d8:31:64:
4a:9f:66:40:ba:34:d7:af:3f:2f:e3:72:c2:2a:14:27:10:9a:
72:96:2d:2a:70:33:e9:ce:78:ff:7d:c1:a7:50:51:70:c7:23:
63:97:46:3b:68:2f:4f:b8:bf:cb:c6:61:eb:f4:74:3d:04:9e:
0a:e0:3e:92:3c:6f:af:94:1c:a9:79:f7:b5:c2:be:27:eb:e5:
34:34:d2:a5:f0:bd:43:36:f4:93:b4:80:f9:05:0d:69:af:a6:
92:41:d3:d5:15:59:43:08:33:af:30:85:b3:12:f7:dc:49:b3:
c7:be:a7:9d:ff:6a:aa:5b:15:d3:a2:42:16:6f:05:86:e8:51:
11:3e:ae:45:cc:6e:93:88:4e:b6:b9:05:5d:cb:14:64:7b:ee:
b3:e0:5f:05:70:4a:fa:87:07:b8:b4:ac:c3:c9:07:5a:68:98:
d6:8b:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:15 2025 by rpki-client