Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A7FA3CDA3F11EFB8C30261762E951A.roa
File: 11A7FA3CDA3F11EFB8C30261762E951A.roa (raw, json)
Hash identifier: 0eBVlW2OlCriwy7rNui7jGsn2iKG6fGHJwlQzmjxbPw=
Subject key identifier: 7B:89:7C:86:A5:4D:33:AC:68:5A:43:FC:76:AB:40:35:8D:F8:74:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A7FA3CDA3F11EFB8C30261762E951A.roa
Signing time: Fri 24 Jan 2025 10:36:29 +0000
ROA not before: Fri 24 Jan 2025 10:36:25 +0000
ROA not after: Wed 05 Mar 2025 10:36:25 +0000
asID: 202656
IP address blocks: 154.219.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83360 (0x145a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:36:25 2025 GMT
Not After : Mar 5 10:36:25 2025 GMT
Subject: CN=67936d2c-cc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4a:a7:4b:00:5a:50:ea:4d:54:12:f2:32:b2:
70:ce:24:77:94:33:87:4f:8d:1d:af:70:b6:34:ff:
17:47:a5:fc:41:88:23:87:51:cc:4c:9c:4f:69:79:
ee:b1:06:43:fb:94:a2:a6:59:7e:a8:1b:2e:3b:4f:
f8:8c:5a:6f:a9:02:b2:ce:3f:66:60:2e:22:ee:89:
17:91:ab:99:32:01:59:33:5f:d6:67:7c:af:c5:12:
3b:7c:4e:dd:da:d8:3e:83:85:44:57:82:26:2e:c1:
f9:d4:41:a0:9a:21:c7:bb:85:e1:8b:5f:77:94:ac:
7f:6f:64:9e:41:34:35:2e:33:8b:3e:9c:e2:b4:b8:
84:49:8d:13:17:5f:96:4b:22:4b:42:1d:90:97:61:
33:09:e1:80:a4:de:3e:6c:6b:8f:63:9b:ea:9e:8d:
7f:72:19:5d:62:0e:1d:be:fe:26:63:d9:95:7c:01:
a8:18:b9:fb:8d:f1:a3:21:d0:3c:71:db:a2:2a:f6:
41:7c:6e:44:9e:56:1a:29:b0:a4:61:e1:51:77:a2:
e3:ba:bb:14:e1:93:fa:95:ad:3f:5e:0c:4b:01:ff:
c8:2d:32:de:c1:91:fe:59:2a:1d:71:c3:03:fd:c0:
1b:c9:f0:cf:23:72:1c:ea:37:72:87:41:5a:91:5f:
73:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:7C:86:A5:4D:33:AC:68:5A:43:FC:76:AB:40:35:8D:F8:74:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11A7FA3CDA3F11EFB8C30261762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.17.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1b:45:de:e1:2c:44:3a:cc:bf:ce:d2:62:32:9f:c2:0f:b1:
61:46:47:c2:0d:27:74:20:c1:68:0c:0b:d3:86:96:03:cb:c5:
ca:ac:d1:97:ad:9d:3b:72:e7:f7:40:88:81:42:c9:21:82:40:
ee:7f:78:6e:3d:12:fb:67:c5:49:ff:33:2b:96:db:72:ca:50:
a5:60:4b:b2:9b:7e:f9:be:12:5d:67:fe:1e:35:2a:90:9b:93:
4d:da:d9:96:0f:36:a5:df:6e:9a:d1:86:b6:6d:19:f9:5e:22:
fe:5d:e4:38:bd:ef:24:1a:fb:e7:20:6a:46:9c:73:27:8f:ce:
1e:90:22:36:e2:7d:c0:77:67:f2:19:d5:44:a2:4a:61:ad:c9:
a6:ab:f1:9c:ef:ad:87:7c:9e:0d:1a:27:1e:07:1c:7f:90:6c:
be:2b:98:bc:95:ef:09:de:96:4d:99:b7:5d:8f:9b:26:9a:56:
90:60:49:2a:9a:f8:bb:c7:19:64:91:28:59:f8:cf:7f:08:5e:
1e:75:8d:b4:75:fd:b5:5b:26:c5:31:bd:b3:69:5f:52:ec:ba:
74:fb:50:78:02:f4:ca:b8:23:c2:90:8f:2f:0f:b3:38:99:bd:
a3:53:bc:b8:ce:48:c5:36:d2:5e:5d:26:42:f8:e9:09:c8:a3:
c1:80:76:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:26 2025 by rpki-client