Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02559148B20D11EF88DC734F762E951A.roa
File: 02559148B20D11EF88DC734F762E951A.roa (raw, json)
Hash identifier: JDFD10uboP/BhamwtvbSgUwntcmXOhGIpJqvLD2uxJA=
Subject key identifier: 3B:9E:84:64:FB:CE:E6:51:01:46:9E:14:7C:6B:F0:A3:F7:D9:D4:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011798
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02559148B20D11EF88DC734F762E951A.roa
Signing time: Wed 04 Dec 2024 06:57:22 +0000
ROA not before: Wed 04 Dec 2024 06:57:18 +0000
ROA not after: Fri 14 Feb 2025 06:57:18 +0000
asID: 135097
IP address blocks: 154.197.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71576 (0x11798)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 06:57:18 2024 GMT
Not After : Feb 14 06:57:18 2025 GMT
Subject: CN=674ffd51-7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:d5:b6:bb:83:55:e0:78:bf:af:47:08:84:
36:ed:ee:d9:b1:88:c2:0a:2c:d7:e0:93:b4:69:98:
cd:d8:0d:e3:cd:b4:92:40:78:a1:56:7e:6e:e2:9c:
e4:86:be:08:8c:ce:9a:93:4b:18:16:7f:06:5e:5d:
34:60:fd:f9:e4:8d:f9:d7:36:3d:5d:70:24:ad:d4:
c6:7f:ea:a4:ae:ee:40:af:bc:38:04:fa:db:be:70:
d9:48:e0:a7:9b:6e:f3:15:8c:49:59:be:de:f3:e1:
1f:cd:a5:b0:d7:52:6f:96:de:82:eb:34:7c:99:23:
96:f3:fc:6a:9e:14:eb:85:0b:4b:a4:4e:80:9d:88:
c4:d8:43:57:32:f7:a7:a8:4b:07:52:48:18:c3:b2:
b7:1d:6a:e4:73:95:e5:fd:a4:e2:83:59:fd:5a:d1:
fb:34:be:33:9c:fd:be:f3:5c:f7:ef:26:15:64:95:
d7:3c:41:16:dd:a2:f2:ca:7c:33:58:94:b8:73:1f:
73:70:c1:a6:ab:33:8a:7d:8f:53:c9:9b:92:55:88:
bc:10:c5:0e:2f:ce:2d:9f:f2:b5:3a:41:e4:46:94:
b3:be:55:28:08:df:18:e1:a2:92:21:29:49:1f:9b:
f0:a1:ce:86:6d:66:69:09:aa:03:b9:fc:f3:31:aa:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9E:84:64:FB:CE:E6:51:01:46:9E:14:7C:6B:F0:A3:F7:D9:D4:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02559148B20D11EF88DC734F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.224.0/19
Signature Algorithm: sha256WithRSAEncryption
0b:08:fc:43:94:1a:20:78:29:cd:ae:62:8b:aa:53:f5:7b:35:
9e:49:f6:bf:ff:8f:a6:2b:52:88:0e:a2:c1:9c:19:7d:19:8d:
2c:cf:e3:22:ac:ca:a8:94:1f:cc:b5:4e:a2:65:e3:26:10:ce:
60:23:e7:1c:2c:ce:98:4a:3e:6e:50:ec:35:31:b2:36:87:95:
ec:1b:cb:eb:1c:5f:f3:5c:fb:e5:75:4b:ed:d2:c9:95:8d:f2:
5b:34:30:ac:fc:83:03:62:02:95:e2:92:a6:3e:eb:a7:8f:d8:
b8:5a:65:2e:30:ac:82:a8:da:d2:09:1c:6c:c8:a6:58:60:e9:
05:24:10:4f:7d:99:bc:94:49:41:25:08:2a:54:8f:04:fc:96:
8c:c3:b7:6b:25:35:fb:5c:51:f7:1c:67:62:96:b9:30:60:9b:
b9:f7:2b:73:66:13:33:f2:cc:c0:3e:8e:d1:7a:83:5a:6c:ef:
c3:e6:4b:96:cb:ed:6c:8f:e4:8e:60:22:71:3b:08:54:0b:c2:
c7:28:65:b0:e2:a4:b5:c4:3b:fd:41:40:a1:bc:21:c4:74:e2:
eb:10:76:3d:63:fe:77:cd:cc:00:bf:ab:07:50:26:17:51:7b:
0a:95:4b:9a:44:c1:c3:09:93:0c:58:ab:80:9e:2e:26:30:77:
ce:42:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:48:13 2025 by rpki-client