Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62EABCD8C40811EFA2BADCB6762E951A.roa
File: 62EABCD8C40811EFA2BADCB6762E951A.roa (raw, json)
Hash identifier: uiknVxqoGEpooXmwTsxxcHzEXjwXOCT3aZbAaz0gn00=
Subject key identifier: C0:B5:EC:4C:B6:BC:3D:F8:4B:1D:91:67:D4:A7:67:8E:91:5B:C0:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62EABCD8C40811EFA2BADCB6762E951A.roa
Signing time: Fri 27 Dec 2024 04:09:37 +0000
ROA not before: Fri 27 Dec 2024 04:09:33 +0000
ROA not after: Fri 12 Dec 2025 04:09:33 +0000
asID: 984
IP address blocks: 154.195.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76025 (0x128f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 04:09:33 2024 GMT
Not After : Dec 12 04:09:33 2025 GMT
Subject: CN=676e2881-44a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7d:4c:7a:5f:cf:23:5c:d2:e5:33:7f:9d:18:
da:2d:55:d6:4d:ff:1e:9a:80:91:c1:4c:c0:ee:36:
d3:d1:d1:a8:73:ec:79:25:3f:51:8a:43:4a:e2:ae:
b9:49:5b:f6:50:ba:4c:cc:71:91:7a:86:3c:cc:89:
ac:1f:ed:f2:f7:82:42:7b:b8:9f:69:c0:8f:89:1a:
7d:ce:64:93:be:be:63:29:4e:1d:c0:3f:4b:72:80:
5f:0e:c4:72:a2:a2:ef:a9:21:91:8b:8d:d1:51:e4:
87:0a:98:dc:fe:ac:13:5a:68:b1:fe:8f:6a:4d:98:
d7:34:0d:71:fa:50:24:e6:83:4d:e3:0f:c1:90:32:
bc:9a:7a:7e:52:57:87:78:ce:fe:6f:50:dc:58:4f:
e1:f9:a4:29:a0:c0:a7:3d:b3:83:34:37:3c:72:33:
76:0a:be:8a:7c:a5:de:f0:0f:78:6e:b8:a1:b8:ab:
28:92:93:c8:03:af:0d:eb:bf:09:56:28:d0:f0:1d:
a5:61:9a:06:be:f7:84:d9:cf:1d:86:c6:72:71:5f:
99:f2:6b:42:91:f0:02:df:5e:3a:fe:56:a2:95:a7:
46:22:43:ec:74:ac:a0:6d:47:44:4f:85:de:91:7c:
d6:07:98:e9:02:cd:af:7e:c7:7c:a6:a6:f6:e6:ba:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:EC:4C:B6:BC:3D:F8:4B:1D:91:67:D4:A7:67:8E:91:5B:C0:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/62EABCD8C40811EFA2BADCB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.42.0/24
Signature Algorithm: sha256WithRSAEncryption
36:74:d2:29:e7:35:79:a6:66:75:e0:d9:84:8a:75:dd:37:60:
d8:f2:1b:38:1f:8b:51:30:82:01:53:75:8a:0c:78:81:e2:d1:
ed:d6:b9:53:cc:d4:55:7b:87:cc:93:4c:39:54:e0:92:08:4e:
83:d4:c4:86:71:83:05:0f:46:05:d5:da:5a:f6:df:b1:bf:d0:
41:f0:97:8f:f2:73:56:59:4b:8b:a9:6a:1c:8b:aa:18:43:a4:
a4:fc:fc:d6:ad:e5:01:55:34:1d:8b:1a:22:5c:8b:7a:7a:c7:
31:d8:2d:70:d2:7b:be:a9:1b:14:37:a8:53:71:94:f9:3c:77:
6e:d0:f0:47:d2:10:6a:6a:79:72:17:f2:6a:31:bb:9d:72:1f:
0c:b3:48:05:53:bb:94:27:c6:7f:40:1a:bf:8d:67:ec:1b:7b:
2e:dc:a4:4b:f9:b8:31:21:4a:87:ea:9f:bd:b3:b2:8a:4b:1a:
8c:de:97:21:0d:49:5a:01:ae:c2:21:ec:db:be:c1:e6:7d:14:
16:9c:de:94:73:07:0a:a4:3e:d8:17:66:a6:78:12:75:a7:cc:
6f:42:8e:26:7b:ff:2b:ed:fd:1f:2f:58:1d:75:1f:13:c6:06:
a9:3b:f6:ec:68:51:8a:57:34:48:fa:4f:5d:1b:d4:36:33:d8:
a6:4d:7f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:30 2025 by rpki-client