Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12CD96FADA3111EF9BBEEF80762E951A.roa
File: 12CD96FADA3111EF9BBEEF80762E951A.roa (raw, json)
Hash identifier: pAqI/Ck4AUUhuQyojs2+5e7J4ygzgwrX7jm8gJsWltc=
Subject key identifier: F6:4D:9E:1D:4D:EE:69:28:21:A5:AD:56:FE:20:C0:C8:D5:A4:6F:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12CD96FADA3111EF9BBEEF80762E951A.roa
Signing time: Fri 24 Jan 2025 08:56:18 +0000
ROA not before: Fri 24 Jan 2025 08:56:14 +0000
ROA not after: Wed 05 Mar 2025 08:56:14 +0000
asID: 202656
IP address blocks: 154.219.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83109 (0x144a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:56:14 2025 GMT
Not After : Mar 5 08:56:14 2025 GMT
Subject: CN=679355b1-82a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:75:32:5a:d9:17:a4:fe:10:35:fe:2b:57:
c5:c4:08:ee:aa:b5:be:6c:fe:fb:73:33:3b:3b:2f:
f9:11:ca:23:18:58:5b:d7:70:93:ab:59:58:20:f1:
fe:32:5c:e1:e2:d2:fb:aa:01:10:90:bb:9c:5f:5b:
6f:f2:44:81:5d:7b:51:08:b4:53:47:31:b3:42:60:
aa:a7:34:3f:a7:56:0c:64:4a:ce:8d:39:2e:6d:bf:
9b:ce:67:00:ee:c7:d3:d1:66:5a:6a:04:9e:7b:d3:
32:09:0f:ef:fa:5b:9d:c1:83:8f:ce:01:a5:99:50:
c7:dc:4c:55:f4:b0:62:af:5f:3e:46:10:b2:16:c0:
1a:6c:47:e0:a5:55:1c:1e:0d:30:9f:be:88:b0:5a:
f6:6f:2e:85:61:83:92:89:5d:b0:79:1f:4f:42:5a:
45:13:c2:e1:b7:20:34:9b:3a:5e:74:3c:de:fa:33:
87:d0:0d:56:e4:2e:dc:32:35:d0:7f:22:0a:cc:49:
d3:36:2c:f9:7e:8f:2f:d0:57:09:ae:84:d5:24:37:
2e:5d:74:f6:0c:19:3b:e4:e9:3e:93:94:d0:73:da:
db:ba:61:c5:bd:a7:4e:be:61:dc:7d:07:c0:a6:f4:
f0:73:ac:b1:3a:1d:48:46:29:65:93:28:63:65:47:
d5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:9E:1D:4D:EE:69:28:21:A5:AD:56:FE:20:C0:C8:D5:A4:6F:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12CD96FADA3111EF9BBEEF80762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:49:b6:d5:a4:9a:f0:6d:52:89:01:f9:e8:fd:21:c0:5b:71:
68:e7:84:d0:09:3c:1c:f5:93:9a:73:33:d6:8a:61:bf:9a:6e:
ba:aa:b1:9c:41:c1:bb:fb:5e:39:a3:33:41:39:bf:f9:14:e4:
b7:96:eb:01:32:67:f3:5e:1e:3f:19:4c:90:21:15:53:59:c0:
3c:98:03:42:03:33:a8:01:8b:3a:88:ba:87:6c:3b:c6:a8:75:
fa:b6:4a:52:e4:df:d1:1d:86:66:76:f3:f5:13:29:fa:e5:b3:
a7:a4:04:99:14:b7:1f:f1:94:2d:4f:fb:d3:11:9f:e7:4d:f2:
c0:54:72:4a:52:19:7f:e4:6d:29:21:b3:14:11:b0:d5:86:09:
55:79:b4:55:ab:a1:db:22:89:d3:79:01:63:c0:08:ac:bb:26:
cd:92:73:c1:50:7c:ea:2c:af:45:3d:9d:7c:44:53:57:a3:7f:
77:3e:b3:77:f2:9a:7a:9e:f8:97:bf:f1:44:ce:9c:5a:fd:2a:
38:eb:ec:00:bf:95:df:60:5f:3c:bf:b6:31:38:39:92:38:ac:
29:8a:67:7c:f6:3d:5d:3a:59:e5:43:a8:3b:97:74:9c:9d:d8:
ed:38:7b:c3:71:43:9e:83:99:15:b5:30:53:c6:23:32:82:88:
43:d0:1d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:46:47 2025 by rpki-client