Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA395404DA3E11EF90ED375F762E951A.roa
File: FA395404DA3E11EF90ED375F762E951A.roa (raw, json)
Hash identifier: ZappMVCxisJOwcdCOPEqo6vmxMqFeZgae1q4BqDVCOM=
Subject key identifier: 11:37:D5:D7:B2:2E:9E:5E:99:B8:C5:25:CC:8C:FA:27:19:94:63:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01459E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA395404DA3E11EF90ED375F762E951A.roa
Signing time: Fri 24 Jan 2025 10:35:49 +0000
ROA not before: Fri 24 Jan 2025 10:35:46 +0000
ROA not after: Fri 28 Feb 2025 10:35:46 +0000
asID: 62240
IP address blocks: 154.196.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83358 (0x1459e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:35:46 2025 GMT
Not After : Feb 28 10:35:46 2025 GMT
Subject: CN=67936d05-e9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:7a:99:83:7d:d2:2c:fd:03:a0:fd:54:43:
3d:ce:b4:a8:1e:93:7c:1e:c9:87:b7:e8:e5:46:8e:
93:22:e7:c7:39:88:4b:50:15:1a:14:fd:aa:c4:3d:
0d:29:9e:80:4b:1f:7d:c5:ad:03:62:ed:64:4d:23:
68:58:5c:34:b5:23:f9:40:6e:31:4c:2e:1a:a7:90:
4a:64:9a:23:6e:17:7f:45:1d:50:2b:cc:21:36:9f:
71:44:4b:96:e2:e7:b1:30:57:fd:17:5c:7a:bf:a6:
fa:7e:68:d5:57:0a:74:d5:cc:ab:e3:29:ef:ae:cd:
af:f1:71:c9:cc:bc:a1:39:80:28:00:78:f7:70:8d:
52:0a:16:8d:78:c4:36:86:fc:a1:a9:a2:9d:c3:6b:
e6:3e:1d:3c:fc:63:59:64:92:52:7c:56:90:51:34:
7c:3e:dd:4b:c1:48:ea:b3:e0:7a:6e:b3:70:8b:b6:
d7:00:bd:94:5a:66:ac:63:c1:1b:78:26:0e:29:a7:
63:a1:cf:7b:4a:86:04:47:8b:72:00:b7:fc:56:c6:
99:08:d4:5b:1c:50:56:17:81:f7:c9:6b:8f:71:da:
b4:d4:60:0a:2c:38:c5:2b:db:9a:a5:f4:bb:fb:76:
6f:94:1c:a0:43:28:f9:8a:97:bc:bb:80:7f:07:99:
e9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:37:D5:D7:B2:2E:9E:5E:99:B8:C5:25:CC:8C:FA:27:19:94:63:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA395404DA3E11EF90ED375F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:91:60:e8:f6:35:9c:75:7b:9b:d2:e9:d7:04:20:5a:97:b0:
24:a5:50:f9:d1:0a:36:9b:db:f5:27:5d:79:89:24:6e:68:60:
7d:08:0e:47:d5:4c:5a:a5:48:06:ce:6b:1b:75:df:25:59:7f:
e3:fd:54:cd:d5:43:89:60:55:68:25:00:d2:62:bc:22:ea:27:
ef:c3:56:6b:93:b8:72:5a:f4:12:8f:9f:b2:25:af:8d:06:ce:
a6:8b:3e:5a:b1:7e:c4:99:3c:fb:98:c1:2c:b3:d0:c7:74:97:
56:0f:2f:a3:7b:82:87:c5:ae:b1:a9:d4:bc:86:8c:bf:7b:73:
25:70:c3:d1:2d:7a:37:03:5c:e0:01:7e:a7:fb:f5:f0:ef:5b:
29:9d:a2:01:10:15:4c:34:db:eb:43:9d:75:35:66:75:d9:a8:
6c:10:d7:de:3a:5a:c0:8f:29:45:6a:4d:4e:4b:f4:d6:77:a1:
08:b1:f8:9f:71:43:20:17:a0:ea:90:7c:e3:eb:ff:ff:39:9d:
e8:5c:d2:0d:17:2a:3d:26:67:cc:f9:17:7b:2a:16:02:76:32:
a0:51:08:f3:bb:d2:dc:74:45:5c:53:cc:3b:37:da:21:20:44:
67:b5:93:62:65:4c:a0:9b:05:19:08:e3:72:dc:f5:a9:a8:67:
a7:07:e2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:23:42 2025 by rpki-client