Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1901C176B60611EF8352CB55762E951A.roa
File: 1901C176B60611EF8352CB55762E951A.roa (raw, json)
Hash identifier: tN56FlW0iSCisztgzNA+uvAdTPRJjFL8kTHhxt9QqPY=
Subject key identifier: F0:AE:15:D0:68:1E:4F:7D:5E:20:87:BA:D7:EF:59:3B:10:60:22:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119E9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1901C176B60611EF8352CB55762E951A.roa
Signing time: Mon 09 Dec 2024 08:17:58 +0000
ROA not before: Mon 09 Dec 2024 08:17:51 +0000
ROA not after: Thu 06 Feb 2025 08:17:51 +0000
asID: 150706
IP address blocks: 154.223.176.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72169 (0x119e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 08:17:51 2024 GMT
Not After : Feb 6 08:17:51 2025 GMT
Subject: CN=6756a7b6-ee0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:8e:e0:cf:da:69:e5:da:01:c8:bd:e1:45:
d5:3c:07:23:81:df:2b:08:e4:ca:f4:1c:91:ce:a6:
66:78:24:b2:86:3d:52:41:d2:eb:41:b3:bf:4c:11:
04:a8:98:71:05:4d:7c:e4:da:35:db:9f:85:e0:01:
cd:a8:19:76:42:40:84:af:28:e2:26:2c:c1:bd:21:
4d:b8:6a:c7:f1:3d:6e:70:88:3c:da:75:4a:c9:3b:
f7:93:a7:2e:7c:83:d4:68:1b:56:09:b6:97:ee:a6:
63:cb:3e:af:ee:6c:e5:49:3d:1c:07:47:01:a6:81:
57:49:65:b4:e4:e5:b4:95:60:b9:8f:84:cd:45:47:
46:4c:cd:9d:14:47:8b:7f:a1:45:e9:bf:40:34:ac:
f5:d7:e6:da:a2:1f:89:2e:7e:01:2a:46:36:18:37:
46:92:fa:a3:a5:b5:9a:90:0d:2d:a9:61:b7:f3:73:
8c:90:23:c6:cd:81:4c:e1:35:c9:30:0a:f8:a1:21:
84:34:80:a8:fc:8d:5f:12:86:ea:60:7a:41:30:72:
41:1a:74:fa:b6:3e:20:a6:6c:d6:4b:14:23:a7:61:
17:a2:a7:c5:3f:64:39:e3:a9:73:ab:98:59:76:aa:
5a:67:f9:1c:66:f8:af:63:66:d8:3f:23:28:e8:39:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AE:15:D0:68:1E:4F:7D:5E:20:87:BA:D7:EF:59:3B:10:60:22:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1901C176B60611EF8352CB55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.176.0/22
Signature Algorithm: sha256WithRSAEncryption
25:83:15:05:cd:8d:d0:06:82:b4:d5:1a:bb:5f:bb:2b:3f:0c:
f9:56:86:26:63:98:ea:92:25:aa:4a:4b:2a:f3:50:7a:ae:ba:
e3:af:82:92:1c:61:92:11:15:c8:2c:ce:8f:65:a1:64:fd:15:
f1:e0:81:ac:0d:30:2c:71:c9:34:76:aa:1e:91:7b:df:ae:5e:
6d:6a:e6:09:7d:28:aa:29:7d:97:46:08:91:e4:41:d5:d3:ab:
29:4c:8a:15:0c:bc:04:9b:35:d3:37:5f:57:b8:b8:14:3f:09:
72:4a:33:c2:49:47:4e:ff:d6:3f:cc:75:08:8c:6a:53:a2:fb:
2a:a2:f6:08:b6:e1:42:7c:fa:6c:fe:9b:2b:6d:23:fe:1d:92:
45:2b:c4:8a:0c:1d:b9:20:85:9a:a7:ab:9f:39:1f:a7:bf:a1:
f6:26:25:67:04:39:21:50:22:56:f7:b1:fd:01:19:94:67:7b:
e1:69:96:47:35:e1:da:78:a8:1f:9f:7a:23:91:b7:93:80:9f:
1b:1a:22:f4:4d:b7:0c:f1:0e:c4:58:1e:65:47:5a:26:8a:e3:
60:b7:04:83:56:81:80:63:8d:aa:fc:ce:cb:c5:08:db:14:b7:
7d:dd:eb:df:4e:75:04:51:a3:45:6b:da:ad:be:df:48:d5:a3:
23:fd:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:43 2025 by rpki-client