Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD84E196D98011EFBCC1055D762E951A.roa
File: FD84E196D98011EFBCC1055D762E951A.roa (raw, json)
Hash identifier: nk/ipGuEiBgoswiE4nsbdozveb5zujrGrrhnXSJSgSM=
Subject key identifier: 8C:98:F0:72:A6:57:87:49:1A:92:1C:56:15:54:11:78:C7:B5:7E:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD84E196D98011EFBCC1055D762E951A.roa
Signing time: Thu 23 Jan 2025 11:55:50 +0000
ROA not before: Thu 23 Jan 2025 11:55:47 +0000
ROA not after: Fri 28 Feb 2025 11:55:47 +0000
asID: 62240
IP address blocks: 154.195.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82391 (0x141d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:55:47 2025 GMT
Not After : Feb 28 11:55:47 2025 GMT
Subject: CN=67922e46-4b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:a8:9d:6c:ee:01:6e:af:a4:a5:c5:83:fb:
d3:9f:e0:37:f6:ad:45:ea:1a:79:13:23:28:c4:7f:
d0:8d:9c:3e:ca:6a:e5:a1:15:df:80:03:00:70:c3:
1c:f5:96:0e:21:05:3b:71:1b:4d:ff:58:4c:5c:4d:
65:cb:ff:7d:89:cd:e4:09:68:d1:37:07:79:4b:d1:
98:2b:29:8f:7e:61:e8:9f:71:f7:9f:2f:12:d4:67:
cc:67:26:39:b5:40:2a:22:0d:56:28:ee:91:37:85:
bb:0b:07:2a:88:d2:11:e7:33:b5:d4:ce:a5:02:9e:
c0:03:99:82:ea:07:3a:f4:8f:83:a3:4d:c5:4e:39:
bd:fe:ce:57:ab:b2:0f:f6:15:1f:ca:36:08:32:4f:
7d:0b:05:cc:27:f9:eb:8f:96:e4:1f:45:f6:6e:84:
09:bf:5e:48:72:56:79:b4:fa:9e:e7:f5:db:12:dc:
a3:9d:17:4c:6f:ec:e6:e5:4d:b7:7e:40:1e:c8:d9:
8f:36:12:16:5b:b3:74:98:b8:4d:2d:6d:59:c5:1e:
d8:cc:31:75:68:e9:78:23:5f:08:79:32:bf:6c:e0:
2a:e0:9c:9c:29:8c:f6:1b:28:3d:30:96:12:79:0c:
3c:e6:f9:32:e3:78:8b:62:70:8f:db:c7:68:b3:2e:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:98:F0:72:A6:57:87:49:1A:92:1C:56:15:54:11:78:C7:B5:7E:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD84E196D98011EFBCC1055D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.174.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bd:cc:cc:97:d9:77:f6:ab:8d:07:0b:b6:87:4a:6a:59:1c:
ef:ba:5b:64:b5:c2:b9:29:36:a0:f8:f7:59:96:6c:d7:a1:a8:
ea:e0:90:7e:1d:a5:31:57:61:69:a1:7c:ab:80:64:7f:53:76:
93:0c:82:70:3a:88:38:0a:c1:45:a5:13:10:8d:af:84:aa:c3:
d5:e2:52:00:c5:6f:9e:f9:e4:67:ee:b2:2a:58:76:ae:c6:c2:
ff:bd:22:a9:f8:0a:52:eb:85:22:1a:cd:36:00:0e:12:ba:aa:
ad:56:44:d1:bc:55:06:04:44:9a:5e:60:32:92:b6:31:d1:3c:
c1:ce:71:5c:cf:76:dc:35:45:34:b8:7f:38:e9:75:58:31:83:
0e:da:b0:a2:52:55:67:3f:0e:66:30:60:a8:3f:e6:5e:e4:f9:
b3:0c:c7:80:04:af:f9:0f:f1:0f:b0:93:a1:72:45:f6:2f:ca:
cf:55:44:7d:79:b1:37:54:83:e1:6f:1b:68:48:09:ff:cd:87:
6e:66:b3:92:a1:47:c0:66:b7:85:19:3c:cb:3a:81:65:fd:86:
f5:1c:f7:15:07:c9:14:47:84:fa:59:eb:ce:d4:f4:15:c9:e9:
cb:91:44:c2:26:95:b5:0d:5a:42:75:ec:e9:8a:8c:9c:df:a7:
e8:78:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:19 2025 by rpki-client