Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/119651C6D56A11EFB162286F762E951A.roa
File: 119651C6D56A11EFB162286F762E951A.roa (raw, json)
Hash identifier: 09Hj8ZKMwa3oKI2HntgCNwvEHXAwBFx/WXU+gjg97XU=
Subject key identifier: 21:37:A6:0A:BD:1B:0B:E1:BD:68:E3:06:7F:A5:20:BA:D2:57:9D:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/119651C6D56A11EFB162286F762E951A.roa
Signing time: Sat 18 Jan 2025 07:01:41 +0000
ROA not before: Sat 18 Jan 2025 07:01:37 +0000
ROA not after: Sat 22 Feb 2025 07:01:37 +0000
asID: 54600
IP address blocks: 154.217.234.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81292 (0x13d8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 07:01:37 2025 GMT
Not After : Feb 22 07:01:37 2025 GMT
Subject: CN=678b51d5-fa91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2b:75:df:48:95:a0:39:dd:d3:32:28:a9:bb:
8e:b7:50:6c:66:3a:03:55:e2:5f:89:d7:bb:64:33:
bb:2d:9c:9b:41:65:db:6d:d2:20:56:c9:f2:6d:7e:
98:b7:cf:99:25:1e:bd:73:66:76:87:f5:a0:26:df:
c6:a5:0b:4c:ca:31:7d:25:16:0b:a9:4c:29:34:ce:
88:43:bf:08:ee:5c:75:03:30:b1:f1:1d:e4:85:42:
7c:0e:2d:53:15:18:9f:43:0d:be:21:c0:3e:59:16:
31:31:3a:d4:28:a7:19:60:b8:37:c9:99:dc:d6:c3:
03:82:ef:ef:35:51:7c:b9:e2:74:6a:7f:e4:a0:f7:
44:5e:c2:8b:90:b1:22:5f:bd:01:ec:33:12:73:52:
8f:01:10:5d:15:5f:f7:32:11:67:31:92:49:55:ab:
a1:42:25:59:c0:a9:6e:cc:ef:4e:67:54:e9:a8:70:
42:db:f7:17:fc:86:25:3a:1d:79:8b:8e:fb:20:bd:
5c:6d:85:d9:6b:1e:e5:26:13:ba:5d:ff:6e:db:8a:
45:aa:ee:39:34:27:24:95:59:05:42:d8:f7:3e:8c:
a8:3c:2c:70:50:31:26:ed:1f:ba:1f:57:95:f4:0d:
57:51:b9:80:80:aa:cc:e6:96:8f:67:1b:92:93:a0:
b4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:37:A6:0A:BD:1B:0B:E1:BD:68:E3:06:7F:A5:20:BA:D2:57:9D:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/119651C6D56A11EFB162286F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.234.0/23
Signature Algorithm: sha256WithRSAEncryption
56:5a:52:de:1e:cf:7d:28:e9:62:f2:1b:be:06:78:6d:af:f1:
64:a1:6f:e8:f7:ed:e8:5f:ed:89:55:30:fe:a0:ce:b9:1d:06:
52:01:58:2b:ed:6d:02:d0:e2:6b:48:e1:e4:97:3a:d5:8a:b8:
cd:76:6d:b8:c1:02:7f:83:f6:a0:56:66:ca:fe:72:e2:14:48:
3c:19:ec:c0:3a:3c:c2:85:7e:70:8a:a1:ad:e5:18:7c:7b:78:
ab:92:ed:48:32:a0:64:4b:84:8b:e1:61:ad:6e:a4:34:45:b8:
6e:98:f5:2b:81:66:ff:1a:b4:36:c8:e5:0a:d9:13:03:b3:2d:
fa:b5:cb:ad:34:6a:b6:df:5e:1a:6d:94:d1:7e:30:b7:a9:f3:
66:75:32:ad:56:2f:f7:6a:a0:37:11:34:2c:f3:25:58:32:be:
5d:06:76:19:96:b9:ba:42:c5:ce:d0:8c:49:04:d8:c8:c4:d5:
16:05:a7:39:18:6f:0a:b6:ae:06:2f:9b:84:27:ee:a0:68:eb:
86:28:01:a2:40:ad:d6:18:7b:2f:fb:87:7a:78:e2:97:ba:13:
0b:4b:bf:07:8c:d6:4f:ba:e2:e7:07:79:78:35:2e:0a:64:20:
64:9e:9d:71:86:b5:ce:02:c2:0d:02:72:d8:1f:6b:c1:ce:4a:
37:ad:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:32 2025 by rpki-client