Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F828FCDCDA3411EFA860F69B762E951A.roa
File: F828FCDCDA3411EFA860F69B762E951A.roa (raw, json)
Hash identifier: ZU71tPRhZ2hKwqw++LaN1PVLcL0C+Oy5w24bAjVTyW0=
Subject key identifier: 88:94:91:CD:C4:95:BA:52:B4:51:AA:A2:F5:05:81:6F:96:2E:CA:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F828FCDCDA3411EFA860F69B762E951A.roa
Signing time: Fri 24 Jan 2025 09:24:11 +0000
ROA not before: Fri 24 Jan 2025 09:24:07 +0000
ROA not after: Fri 28 Feb 2025 09:24:07 +0000
asID: 62240
IP address blocks: 154.195.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83173 (0x144e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:24:07 2025 GMT
Not After : Feb 28 09:24:07 2025 GMT
Subject: CN=67935c3b-63cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3b:c6:74:46:1c:f7:50:3c:6b:87:3c:a7:6f:
96:f8:e7:6f:15:bf:af:db:a7:9c:b1:df:c6:e1:1b:
ff:90:87:3c:17:5b:d2:80:84:22:a0:33:61:9f:5a:
7a:03:4c:c3:d9:ee:a8:bd:7f:41:04:ee:c7:e1:46:
5b:46:b7:81:c4:a9:62:88:a2:dc:bb:09:bb:cc:fb:
21:c2:ae:04:8f:9c:ad:f4:06:9f:c2:49:8e:24:35:
94:80:05:01:d6:29:e9:27:1c:3e:31:1b:f7:f5:3b:
6d:44:23:d7:ce:9a:cb:98:8a:f4:8b:37:31:ae:aa:
b5:2e:e2:4c:a2:0f:05:5b:c4:3c:93:72:61:aa:95:
ae:52:c1:b4:0e:65:cb:f9:3d:0d:83:df:28:2b:86:
47:b4:50:be:b5:cf:d2:7a:7e:b9:b5:c6:e2:28:cb:
37:51:28:82:33:30:2d:75:56:35:b5:df:78:7a:86:
12:d3:88:83:59:e2:74:f0:18:5a:6c:45:36:65:87:
57:04:b4:4d:8b:98:06:ee:05:d5:b4:42:7c:7d:94:
63:34:71:00:72:fd:79:6f:e9:e3:9f:c0:37:df:94:
89:24:e5:4f:33:e0:f1:df:99:bd:89:9f:ae:04:3a:
b2:2c:a6:1f:85:f3:0d:b5:14:0d:e2:05:b9:fe:6c:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:94:91:CD:C4:95:BA:52:B4:51:AA:A2:F5:05:81:6F:96:2E:CA:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F828FCDCDA3411EFA860F69B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d7:26:24:1c:22:2e:c3:86:21:04:90:c9:2f:8a:78:1a:e4:
15:0b:74:98:12:2e:73:73:a1:90:0b:ec:6a:66:53:79:1f:01:
ac:aa:93:3b:5e:d1:10:90:86:0d:c8:68:a3:37:f6:7c:fa:2f:
c1:d4:0f:c7:3e:7a:66:02:2c:04:02:53:89:ce:17:97:b3:87:
5e:a2:14:b4:ab:17:69:34:a0:f2:c0:39:e3:05:2f:4f:4e:9e:
33:eb:47:35:b4:d9:8f:60:88:99:6a:91:b9:bd:5d:f3:61:d9:
cf:42:ec:9d:a3:46:a5:55:6c:cf:86:28:2f:71:d6:cb:1e:09:
dc:d0:58:4e:7b:30:40:2c:6d:98:25:fa:ea:5a:48:fe:27:86:
cc:18:44:83:99:9a:9a:b5:b8:b9:53:3e:09:5f:f2:9d:dd:bf:
c2:5b:70:28:7e:64:b0:60:38:2b:5e:b8:b0:52:ad:d4:19:92:
49:94:37:1e:b3:4f:fa:c2:c3:7d:c9:54:81:66:8b:3d:7a:bc:
0c:cf:34:16:c0:a3:cc:c3:72:18:34:74:72:d7:5f:52:0c:84:
12:02:60:e3:61:99:d6:a0:5f:df:15:6d:86:7c:4b:c4:ab:22:
f1:fd:98:d7:ef:c6:97:95:c9:a2:ec:53:d1:27:64:b1:11:bc:
6e:fe:71:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:52:51 2025 by rpki-client