Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19A80570D52011EF8CF6067B762E951A.roa
File: 19A80570D52011EF8CF6067B762E951A.roa (raw, json)
Hash identifier: Xm1ivqD79yHxdUhw6Iw+E+eQwBXbAoGlp5M+V1uPdZk=
Subject key identifier: E1:40:AB:10:0A:2D:AD:18:F8:79:6C:A4:31:DB:C5:78:96:21:22:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D61
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19A80570D52011EF8CF6067B762E951A.roa
Signing time: Fri 17 Jan 2025 22:12:12 +0000
ROA not before: Fri 17 Jan 2025 22:12:08 +0000
ROA not after: Sat 22 Feb 2025 22:12:08 +0000
asID: 139646
IP address blocks: 154.221.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81249 (0x13d61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 22:12:08 2025 GMT
Not After : Feb 22 22:12:08 2025 GMT
Subject: CN=678ad5bc-69a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1d:d6:eb:22:be:18:52:2a:1d:c3:3f:da:c8:
bf:86:5f:d0:a1:6e:55:fc:37:87:d4:50:dc:bb:c4:
98:89:8f:e5:f1:4b:dc:7f:11:62:ec:97:40:76:60:
28:35:cc:38:cb:4e:55:24:2c:59:cb:d0:d0:d1:a3:
72:2b:ec:5a:f0:b7:ef:58:58:c3:e1:c3:f5:e2:a4:
9b:60:89:8c:ad:f5:f4:cc:7e:96:0b:2e:16:77:ae:
e8:c7:6f:d5:de:2e:1e:9e:8d:b8:fc:74:3d:d3:00:
60:2a:cb:41:f1:60:9c:44:a0:04:b7:f0:7a:14:cd:
46:ad:80:40:04:71:62:ad:cf:07:f1:92:d8:6c:d7:
1e:0d:ef:87:9f:ab:4a:b1:47:da:2d:24:ce:eb:a9:
28:c1:67:37:01:f1:d2:15:c8:ce:d0:9c:2d:2c:a1:
46:18:9e:e7:6d:e6:f9:4b:77:7e:7d:14:ff:72:4b:
35:de:ba:64:35:b3:ef:3f:14:09:e1:34:7f:8c:d5:
71:7f:3a:d3:cb:cf:d1:04:6f:fa:29:94:fa:8f:9f:
e0:11:a8:da:66:54:eb:eb:5e:18:07:b8:21:5a:c0:
7f:bf:8f:1f:a9:41:cf:2d:4b:58:e7:08:e6:67:30:
1a:96:69:56:d3:90:31:7a:40:6e:2c:aa:d8:14:87:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:40:AB:10:0A:2D:AD:18:F8:79:6C:A4:31:DB:C5:78:96:21:22:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19A80570D52011EF8CF6067B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ae:56:00:4c:f6:3c:9e:31:51:3c:9e:61:f7:6a:61:c9:7d:
bc:78:31:d5:ef:43:8c:15:f2:37:eb:8c:a7:f9:61:17:c7:89:
e7:6d:74:ed:13:35:94:63:5e:da:90:80:9a:4c:dd:38:82:6f:
76:43:45:f7:a0:a6:0d:80:48:1a:c9:f8:80:ac:22:1a:ce:36:
1f:bf:53:c4:ab:47:fa:ad:31:00:c5:a1:dd:36:1e:2d:29:08:
8d:32:1b:67:9e:e0:4c:e4:f2:69:99:ea:31:da:04:6f:f4:a8:
dc:50:25:a0:65:65:47:5e:0f:60:c8:df:f6:c8:62:fd:5f:73:
b9:2e:71:e3:4f:fc:33:b2:3b:bb:b0:3a:33:c3:e8:a7:c0:dd:
32:54:20:1d:b6:3c:d8:40:65:18:ed:3a:61:3e:38:cb:56:1a:
6b:3a:ba:5a:8c:c2:61:61:4a:9c:04:64:76:de:24:6a:ee:42:
3a:bb:e9:75:11:0d:11:31:95:93:1d:8f:70:2f:3c:d4:97:d3:
24:36:c6:ee:03:70:54:96:2a:b9:cf:1c:c0:3b:69:89:e3:45:
66:ac:03:a5:d9:97:68:e0:05:0c:37:70:a2:ce:92:ce:8e:f1:
b2:73:bd:f9:e9:a8:bf:c0:76:49:6c:98:4e:8c:6c:65:27:76:
8b:00:8b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:16:08 2025 by rpki-client