Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9A3CE20D9CB11EF8AEB384E762E951A.roa
File: F9A3CE20D9CB11EF8AEB384E762E951A.roa (raw, json)
Hash identifier: 6lBD4x4dnBXaaqnlq3nL0tlnQPj6zuBqe5Awel02lCU=
Subject key identifier: 8F:42:35:3B:96:29:34:E2:74:95:DC:05:6C:1D:2A:EA:3D:8B:5C:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9A3CE20D9CB11EF8AEB384E762E951A.roa
Signing time: Thu 23 Jan 2025 20:52:36 +0000
ROA not before: Fri 24 Jan 2025 20:52:32 +0000
ROA not after: Fri 28 Feb 2025 20:52:32 +0000
asID: 62240
IP address blocks: 154.196.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82666 (0x142ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:52:32 2025 GMT
Not After : Feb 28 20:52:32 2025 GMT
Subject: CN=6792ac14-6c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:cf:bf:3d:1c:8e:d2:72:a6:7c:f8:29:4c:
e7:96:b2:19:7a:0a:c6:fa:bb:52:2f:14:62:5d:42:
32:b8:e4:e0:ab:25:78:8b:d3:78:b7:ba:9c:4f:8d:
ab:58:f1:59:17:2c:ee:c8:e7:90:c7:64:ce:a1:c1:
ea:73:a5:5e:f4:3b:84:0f:aa:65:49:d3:7f:8f:10:
7c:11:a4:e2:0c:6a:ab:ae:45:be:61:ec:92:e9:c8:
27:36:8f:fc:7e:19:74:c0:ab:5d:15:c6:b5:04:e5:
86:64:1c:29:63:b0:18:69:4f:14:5b:59:f5:8e:04:
e7:06:b9:8e:19:6f:0d:1b:a3:10:55:c8:d6:13:10:
b6:f6:1f:2f:4a:60:b7:83:05:55:e5:ed:89:2c:98:
5b:10:e5:67:3f:a3:05:8b:dd:3f:9c:a9:91:cb:4d:
f6:e7:ab:6d:73:cf:2c:c9:d6:af:84:cf:7f:8b:c5:
f4:5b:b0:50:c0:ea:c5:a9:96:bd:3c:22:f9:78:6a:
da:d2:a5:39:3f:d5:35:95:b5:f6:e2:2f:28:43:ca:
0e:67:ed:8c:ab:94:1e:61:d6:19:52:24:f1:3b:d0:
8b:94:25:8c:a6:45:32:fd:ac:c7:e3:d6:e7:62:cb:
f0:3a:06:65:d9:92:aa:4c:5f:60:a5:9c:06:ca:4c:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:42:35:3B:96:29:34:E2:74:95:DC:05:6C:1D:2A:EA:3D:8B:5C:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9A3CE20D9CB11EF8AEB384E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.65.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:2e:59:57:83:37:eb:c9:3f:a0:be:72:57:04:0f:85:e0:3a:
7d:c5:6a:be:1d:20:7f:bb:34:53:c9:d5:eb:e8:27:70:92:3f:
ae:39:39:67:53:64:91:12:03:37:10:ac:05:e6:39:a7:57:a5:
5f:84:16:34:b4:56:56:31:39:4a:28:d5:8a:14:21:22:b0:9c:
64:2e:8d:f8:ab:50:7c:68:33:4e:24:d3:b7:f5:17:9a:83:6e:
43:f0:5a:ba:3b:87:27:8b:9a:49:56:ee:50:58:19:87:3f:29:
fd:6a:8f:05:c8:82:fb:c3:8e:bc:55:df:b6:85:0f:25:8e:cd:
e4:95:3d:70:e1:99:92:6b:20:2c:2b:fd:b2:d6:b3:4a:71:15:
64:29:52:8f:6d:36:d8:f8:8b:71:a2:4d:28:90:c6:e7:e4:68:
1a:01:7c:fa:49:bf:a4:af:6d:75:77:69:d0:8d:31:ba:d9:a6:
ba:33:ba:d7:48:56:05:16:68:da:02:85:89:60:65:0a:9e:53:
ab:6f:fb:85:1b:0f:5d:67:b7:4f:96:1c:21:14:51:13:9c:ed:
6d:b3:09:bc:aa:45:51:56:e2:33:e4:a0:d9:f2:02:c4:20:e0:
e4:7d:f2:7c:1f:1c:a6:df:94:9a:26:e0:38:a3:72:bc:8b:98:
c9:55:d0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:22:31 2025 by rpki-client