Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D23622DA3211EFA772328E762E951A.roa
File: F9D23622DA3211EFA772328E762E951A.roa (raw, json)
Hash identifier: sS6fBusMxL2VmvSgElCNHT8Ff4cdPg67u+WRSPQ5TO4=
Subject key identifier: 05:F2:48:73:75:BD:95:51:44:DD:01:E1:03:21:76:E8:E6:39:BB:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D23622DA3211EFA772328E762E951A.roa
Signing time: Fri 24 Jan 2025 09:09:55 +0000
ROA not before: Fri 24 Jan 2025 09:09:50 +0000
ROA not after: Fri 28 Feb 2025 09:09:50 +0000
asID: 62240
IP address blocks: 154.195.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83135 (0x144bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:09:50 2025 GMT
Not After : Feb 28 09:09:50 2025 GMT
Subject: CN=679358e3-d168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:59:e7:1d:5f:93:47:b2:e3:34:09:f5:c8:
8b:96:57:dc:24:c6:ca:fa:ca:02:21:8d:f5:43:d4:
6c:e2:93:0f:38:66:30:c4:83:8d:0d:9f:8d:2b:87:
24:c9:8a:8f:34:b1:58:36:3a:42:ce:2a:e5:ed:bd:
d3:4b:c8:a3:42:76:63:f7:7c:e7:7a:9d:54:76:a8:
b0:81:15:4a:1c:6e:aa:a9:73:37:f9:08:8c:80:49:
dd:e9:5d:b8:04:cf:17:44:9d:48:b6:96:53:56:ff:
3b:f9:dd:d7:db:ca:d4:5d:37:c8:ed:32:4a:8d:6d:
c7:89:4f:30:d7:c1:ab:d4:99:65:17:8b:92:2f:70:
27:47:8b:06:34:fd:83:24:61:99:98:49:62:24:f6:
7d:55:da:75:b4:0f:90:f4:03:fd:d8:dd:4e:29:56:
3a:38:28:7a:45:8a:52:26:21:af:f0:bc:bc:cc:96:
93:c9:25:05:d6:23:e0:09:a7:23:38:e3:48:43:61:
10:ca:02:2f:47:d5:b7:c6:5a:47:25:c4:84:98:b0:
d3:9e:52:7f:3c:59:53:8b:55:d5:13:01:91:94:64:
68:95:5b:76:ee:89:e7:49:51:59:7c:75:c9:6d:4b:
4d:cf:d8:ef:ed:fe:07:88:33:72:11:49:3b:eb:df:
9b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F2:48:73:75:BD:95:51:44:DD:01:E1:03:21:76:E8:E6:39:BB:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9D23622DA3211EFA772328E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.146.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:93:a0:f0:2c:13:04:b8:fa:a7:18:cf:4b:f0:92:10:8d:64:
28:16:73:ef:c6:88:52:5c:11:36:7c:f9:f9:e2:77:c3:94:66:
37:ef:12:22:99:f7:08:75:f5:6d:c7:af:f8:67:76:ce:6a:59:
fc:2c:7f:cf:2e:5e:08:4d:86:da:2e:09:57:55:5d:ce:f9:34:
3f:68:e5:d9:8a:b3:75:ea:f4:7c:98:5d:50:7e:3c:aa:21:ac:
76:04:dc:27:c9:2c:d3:42:df:a0:fa:45:a3:ef:d0:37:e0:dc:
42:79:73:89:be:b7:6a:7b:f0:75:98:98:7f:60:ac:8b:28:d4:
97:97:94:89:3d:9f:90:0a:21:76:8b:58:94:90:c3:ae:bd:02:
86:4e:cf:79:67:b1:70:69:8d:56:16:bd:a7:14:d8:b3:c9:19:
db:2c:d9:15:a4:14:d3:d5:bf:de:bd:e6:1b:4c:e6:b8:d0:f6:
a5:51:84:86:5e:88:07:fc:43:ef:1f:cf:d4:dc:65:5c:53:98:
e1:2d:a1:e2:5c:47:06:fa:a1:2f:c2:c7:12:c9:9c:d7:f4:71:
73:1c:75:4e:68:96:d5:70:e4:98:46:7a:7c:8e:81:f3:85:b0:
c0:2b:98:a8:c2:f4:21:76:d2:d3:c5:b2:81:95:4a:ae:3e:0c:
d1:5f:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:19 2025 by rpki-client