Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA562E4CDA4011EFA64E0A6E762E951A.roa
File: FA562E4CDA4011EFA64E0A6E762E951A.roa (raw, json)
Hash identifier: fBlpGqHBtclU100TDmqlfqs+VdoU0sSBoXqvqve2Iu4=
Subject key identifier: 47:70:70:82:BB:3A:03:7F:DC:18:3A:C2:E2:13:19:E9:65:41:0B:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA562E4CDA4011EFA64E0A6E762E951A.roa
Signing time: Fri 24 Jan 2025 10:50:08 +0000
ROA not before: Fri 24 Jan 2025 10:50:05 +0000
ROA not after: Fri 28 Feb 2025 10:50:05 +0000
asID: 62240
IP address blocks: 154.196.66.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83392 (0x145c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:50:05 2025 GMT
Not After : Feb 28 10:50:05 2025 GMT
Subject: CN=67937060-22f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:54:54:bd:03:37:6c:39:3a:9c:95:11:11:33:
08:ec:e9:56:22:21:5a:85:bc:6c:3c:f3:ec:5e:33:
67:f9:06:df:13:fa:8b:0a:b1:8b:0a:4b:33:7d:1c:
b1:27:0d:cd:01:ab:7f:cd:d7:bc:f9:58:ce:60:34:
97:a9:11:ca:f8:ee:b0:37:0d:2f:2d:a8:fe:90:f8:
f0:1c:cd:74:13:30:96:28:e0:28:68:00:a5:e8:72:
a8:df:c3:c6:8b:9b:2a:17:4b:b4:5b:44:b0:e3:df:
bc:bc:ed:1c:01:ee:b3:aa:82:5f:e2:8f:88:c6:df:
56:c4:cc:3c:a8:f7:db:0d:f3:91:67:65:c6:f3:6a:
4c:14:6f:ae:f4:f3:99:ac:e8:ea:16:8c:1c:d4:8d:
c6:04:8b:d7:53:36:aa:1a:b4:be:a0:ab:44:42:f4:
74:a1:66:c0:5d:ad:23:f9:98:1a:f8:28:46:3b:e1:
22:d2:6d:5e:84:1b:4a:43:9b:1d:6a:a7:ea:f7:f9:
06:a8:d7:4e:91:05:b2:7d:eb:84:2a:3a:de:c6:ec:
d5:8e:a6:7a:5a:37:45:ba:f6:50:c8:b9:39:70:65:
7b:45:73:f0:69:22:45:04:76:64:cb:80:7b:2e:89:
9e:71:9e:b3:2f:3e:09:db:94:aa:5c:24:d8:f6:36:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:70:70:82:BB:3A:03:7F:DC:18:3A:C2:E2:13:19:E9:65:41:0B:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA562E4CDA4011EFA64E0A6E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.66.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fe:b8:e5:85:30:a9:3b:e7:48:27:da:ad:a7:f0:e1:36:e3:
1a:e1:14:da:20:27:51:39:8f:a8:b0:c0:bb:bc:a4:9a:67:04:
82:f6:15:15:04:10:84:6a:dc:3a:57:ed:0a:d7:13:59:f4:91:
37:d0:fe:61:9f:b8:8e:18:4a:ef:eb:7c:37:6c:8d:b0:9b:e7:
08:1a:70:5b:04:d0:23:3a:57:ff:76:15:9e:78:f1:e8:11:a9:
b5:dd:67:35:c1:5c:e0:bf:2b:c2:ee:4f:77:4a:d2:c1:b7:31:
cc:63:99:b1:22:f0:00:fc:74:00:50:ba:7c:8f:ce:0c:82:dc:
70:2c:a0:f8:37:cb:74:75:3c:bd:b9:38:75:c6:e8:bc:c1:fc:
b9:e0:ae:13:20:1e:45:dd:cf:25:63:c6:53:b5:56:32:4c:93:
0f:7c:75:bc:c4:c4:96:6a:ee:4a:15:3f:de:c4:62:93:da:2e:
33:d9:6c:60:ae:a7:9b:4b:75:36:2a:3d:ea:c1:41:ed:a1:16:
f7:34:05:a8:e9:4d:c4:fc:0e:40:31:8a:34:cf:ef:96:0e:a6:
f0:7d:75:65:f6:30:71:e9:88:df:f8:b5:b5:74:d8:f3:e1:94:
23:5d:0e:4b:64:87:9c:3c:d8:cb:63:b4:37:12:0a:be:6b:86:
43:c2:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:15:54 2025 by rpki-client