Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193B3632BEB611EF94DD4678762E951A.roa
File: 193B3632BEB611EF94DD4678762E951A.roa (raw, json)
Hash identifier: 1L5cvmiCCZWRfcaDYwSEX9gXsUcPPL3roDUZm+uDbJs=
Subject key identifier: C6:D5:7C:10:CA:17:75:9D:E7:70:E1:06:58:F7:BC:85:6A:C5:97:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CBA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193B3632BEB611EF94DD4678762E951A.roa
Signing time: Fri 20 Dec 2024 09:37:59 +0000
ROA not before: Fri 20 Dec 2024 09:37:55 +0000
ROA not after: Sun 02 Feb 2025 09:37:55 +0000
asID: 202656
IP address blocks: 154.222.192.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72890 (0x11cba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:37:55 2024 GMT
Not After : Feb 2 09:37:55 2025 GMT
Subject: CN=67653af7-2237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:90:03:0d:fd:52:77:a7:8a:6b:4a:af:e5:30:
b4:46:c0:76:b6:23:63:81:02:f5:96:9c:24:e3:7e:
66:89:38:a3:c0:e3:17:9f:42:28:e7:93:a2:16:8c:
80:02:f9:f4:6b:c5:aa:b0:70:6f:cf:7f:c8:f1:cd:
bb:ba:7e:db:e7:b7:1b:d6:1e:e6:00:38:8e:0a:ae:
1f:a1:db:2f:d6:71:23:a9:30:b9:50:76:0a:16:0c:
7f:ee:88:f8:64:1e:b9:29:c4:2c:97:4b:63:bf:d2:
a8:17:17:d2:51:d9:83:e7:76:63:92:bf:0f:cd:7c:
3b:da:66:e8:3a:06:cd:5d:d2:39:3a:3c:25:77:37:
d3:09:5e:ca:05:e1:ac:76:4d:d6:cd:de:38:b1:7a:
c5:89:9e:55:e5:1c:93:d1:73:9c:8b:70:42:99:75:
d7:44:18:c0:42:aa:a8:f5:c4:22:5b:ca:07:58:56:
b6:a8:67:1d:a9:a2:e3:16:ce:d5:69:28:bf:7a:5d:
0f:d8:19:66:cb:64:81:64:b8:58:05:8c:2f:d3:dd:
a4:54:94:8d:20:a8:26:46:93:af:2c:b0:a6:d5:19:
fe:45:a2:83:d1:78:e1:32:a3:93:65:a9:8a:38:35:
79:a4:85:6c:eb:01:e9:49:b6:bc:4b:2b:1d:d5:07:
79:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D5:7C:10:CA:17:75:9D:E7:70:E1:06:58:F7:BC:85:6A:C5:97:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/193B3632BEB611EF94DD4678762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.192.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:9f:38:58:98:cf:e2:18:56:8a:51:9f:2d:59:bd:d3:ed:96:
c5:f9:e4:93:88:10:1b:e4:ca:06:8c:9a:56:d6:98:0e:37:62:
6d:47:8e:c8:a8:13:ff:8c:68:64:f1:25:ac:db:3e:08:a1:22:
71:52:f7:8f:a2:6b:9b:e5:b7:4f:81:7f:b3:70:8c:09:6b:5d:
70:dd:66:04:e1:2b:61:75:74:d9:06:5d:4e:a2:a2:f9:22:25:
51:21:44:99:4e:da:6c:ea:11:95:9e:82:0f:9e:e3:9a:43:61:
22:41:63:27:dd:25:2a:6f:3c:b0:bb:02:75:7d:83:35:d6:5b:
e4:82:cc:31:17:a3:b7:95:83:0f:e5:6a:d6:07:03:c8:a9:43:
34:4c:43:aa:c3:5f:bd:eb:2e:b0:fe:5e:51:c0:02:0b:cf:2c:
e4:f4:35:7a:29:39:a2:8a:47:4b:15:36:03:9f:c2:c3:aa:4a:
58:8b:bf:7a:aa:98:d3:b6:99:47:6e:2d:cd:35:93:4c:b0:92:
84:39:ef:68:79:4c:1b:c8:f3:cf:ba:80:d1:aa:5c:cc:64:5d:
e8:a6:95:00:b9:9f:3f:47:53:fb:1c:e8:6c:f6:43:7c:23:e2:
f2:36:56:20:7b:72:fa:76:42:e7:58:62:2e:26:d1:55:7a:34:
68:4b:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:58 2025 by rpki-client