Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF641D9ADA5911EF96898997762E951A.roa
File: FF641D9ADA5911EF96898997762E951A.roa (raw, json)
Hash identifier: pLum89v2SkPKV1Z+LCRSdt8TIiXv4rKA5A6bx4K15BA=
Subject key identifier: 68:02:CF:45:F3:2F:58:00:F7:95:FB:F9:A5:0D:73:5F:90:EF:48:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF641D9ADA5911EF96898997762E951A.roa
Signing time: Fri 24 Jan 2025 13:49:14 +0000
ROA not before: Fri 24 Jan 2025 13:49:11 +0000
ROA not after: Fri 28 Feb 2025 13:49:11 +0000
asID: 62240
IP address blocks: 154.195.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83892 (0x147b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:49:11 2025 GMT
Not After : Feb 28 13:49:11 2025 GMT
Subject: CN=67939a5a-5552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:60:33:f0:cf:39:3d:0d:2a:58:22:a4:ef:31:
e3:1f:e6:31:fc:92:12:b9:19:71:41:81:76:1c:49:
6f:c9:1f:43:cc:f2:58:a1:76:45:e1:e8:02:b6:05:
4d:76:d6:99:7a:d0:69:fa:6c:44:e7:6c:9f:f1:b4:
03:fa:b1:37:27:9d:f5:2a:b2:97:65:c4:c7:b2:76:
67:b6:c9:16:a1:22:42:b0:d2:37:57:94:3e:52:13:
43:cc:c7:a8:db:63:8d:8d:9b:e2:b9:34:81:a9:1d:
2d:ac:b6:96:88:eb:ea:f0:d2:c4:e8:c0:1a:de:ae:
33:4a:35:cd:6a:9e:17:b8:19:4d:94:b4:37:13:59:
33:f0:7e:c2:5a:dc:63:7d:ed:32:d8:99:90:32:2d:
4c:53:15:ec:45:02:7f:1c:ad:be:0e:3e:65:ca:dd:
ca:01:dd:cb:7b:86:3b:62:1e:b0:33:61:8f:be:b5:
18:b8:1d:5c:a5:b8:d9:77:dd:94:67:1a:b9:40:02:
85:92:48:d5:df:21:d7:51:b6:ce:bb:8f:06:60:98:
a5:3b:49:a7:b7:98:67:7f:5c:4e:b9:ce:49:e9:fc:
03:d6:ea:5c:95:17:7b:b9:51:1a:69:bb:eb:d4:ef:
5d:3a:0f:d9:6a:ac:e8:9d:d9:5a:d7:14:00:d8:ea:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:02:CF:45:F3:2F:58:00:F7:95:FB:F9:A5:0D:73:5F:90:EF:48:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF641D9ADA5911EF96898997762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.6.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e2:2d:d4:a4:27:d2:dd:09:65:21:64:78:22:ab:6a:ef:b9:
89:08:ea:54:d0:de:c3:e8:23:22:da:40:c8:6f:7e:32:d5:28:
35:8d:93:11:7a:71:99:a5:d9:82:b1:78:ff:b8:26:19:4d:1e:
b0:eb:66:47:3e:70:57:0e:4d:f0:c6:5d:af:b0:c0:48:8e:96:
b2:b1:08:55:50:ae:d9:62:4e:9e:7d:e6:cd:12:fc:29:ab:8c:
80:89:f9:cc:92:fe:81:b6:9d:59:df:ee:d0:14:64:9a:70:23:
16:d1:e2:bb:43:ee:c1:4a:c9:9c:9f:2d:7c:69:1e:2b:e0:c8:
66:76:77:7f:91:4b:58:9f:8b:19:0a:15:b1:c5:ba:6e:26:fd:
f1:74:8e:eb:7f:82:16:71:40:98:4e:96:15:ba:51:83:c9:48:
fa:a3:bb:11:c5:e6:6a:0b:21:e6:a9:3b:5d:6e:54:ca:4a:c2:
4c:a8:92:d9:3e:47:b7:42:76:91:dd:e6:0d:9a:ec:7d:4a:52:
98:21:6e:b5:e3:04:a1:7d:ba:07:5b:1f:7d:97:ee:34:14:45:
f6:65:10:43:fc:ef:a1:7b:d6:c8:7a:2f:c4:cb:d5:55:d0:d9:
eb:3d:0e:56:a4:a3:24:3e:88:95:ba:95:79:10:9b:2b:40:1f:
b6:5a:a3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:18:44 2025 by rpki-client