Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19DE60EABB7911EFBB15659C762E951A.roa
File: 19DE60EABB7911EFBB15659C762E951A.roa (raw, json)
Hash identifier: BTAfEkfYP2YvqSo2P38cw/urmQUE62DykCTKY7d9h9g=
Subject key identifier: E1:61:5A:CB:17:60:B7:B5:F8:D3:DC:35:74:DF:7B:45:66:65:A5:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011B9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19DE60EABB7911EFBB15659C762E951A.roa
Signing time: Mon 16 Dec 2024 06:43:47 +0000
ROA not before: Mon 16 Dec 2024 06:43:43 +0000
ROA not after: Tue 04 Mar 2025 06:43:43 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72606 (0x11b9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 06:43:43 2024 GMT
Not After : Mar 4 06:43:43 2025 GMT
Subject: CN=675fcc23-930a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:02:0e:fc:6d:95:bc:1f:74:15:45:39:8e:86:
b6:18:c3:7b:d6:68:21:5d:15:06:bf:11:41:8a:4b:
bf:fc:ac:2e:10:eb:eb:09:ec:0b:a3:a4:c7:06:8c:
c5:53:c3:e6:bb:68:62:0e:58:84:c1:80:0c:23:b0:
16:fd:b7:e0:a1:e3:9b:f7:ac:fb:98:46:c0:b2:83:
f1:62:fd:ed:ba:20:65:9a:a0:18:13:8a:7f:33:d8:
0a:3b:e1:dd:70:bf:8f:10:97:00:6f:26:2d:76:ac:
1d:84:7c:f9:9a:9d:71:de:70:da:6b:a7:5a:31:58:
a1:a7:e7:d1:1c:36:a5:4d:a6:ca:a0:34:07:52:ab:
cb:17:e0:46:60:d3:46:9f:b7:b3:4b:4f:f7:ff:84:
94:ec:bc:10:61:97:c2:fd:c1:5b:35:d5:73:9a:cb:
e8:4d:8b:89:48:00:2b:9c:dc:14:02:a8:96:12:c6:
85:dd:66:85:19:97:97:d5:17:82:20:13:60:1d:37:
67:57:3f:df:9c:de:f0:a5:59:b6:ff:51:46:6e:f9:
33:78:60:1f:ec:8a:56:3b:d8:03:79:87:91:68:0b:
7e:ea:84:8d:eb:f6:ad:f0:68:b7:87:dc:de:9a:bc:
a3:87:c4:96:36:15:7d:c2:21:27:76:52:28:ef:5b:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:61:5A:CB:17:60:B7:B5:F8:D3:DC:35:74:DF:7B:45:66:65:A5:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19DE60EABB7911EFBB15659C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:10:d7:98:36:b0:e4:04:7a:9a:ae:3b:4a:63:3b:25:87:91:
4e:aa:2d:87:ac:50:b0:62:0e:13:f2:14:a4:45:de:c8:0a:e4:
8c:df:90:93:53:9d:ed:3a:14:64:d2:05:d4:07:d8:c8:d9:81:
8f:49:ee:bf:9e:24:98:4c:2c:6e:1a:59:53:ba:34:1c:d9:2f:
b3:ed:a8:d7:3b:9d:67:36:ee:4f:86:1c:9a:64:e5:0e:2f:ec:
9d:08:7a:cf:cd:2a:a5:06:6b:cd:6d:28:88:34:00:86:8b:70:
05:18:a6:56:b2:72:e3:f9:8f:e8:a9:8b:49:bf:4d:d6:fd:80:
25:fa:e6:c0:28:ae:4a:ae:bc:03:be:46:1b:61:47:8f:ce:60:
6a:cb:6c:b2:21:49:6c:3e:ce:a1:95:ac:8a:b4:6f:64:b4:95:
42:85:a8:b5:97:ec:5a:3e:08:8d:46:1b:a9:6e:7a:1b:fa:ed:
c9:8a:ca:48:0d:0b:1c:a9:ba:d2:7b:bb:a8:3b:72:b4:20:59:
e4:9e:53:4f:d2:6d:85:c4:d2:57:82:05:ed:3f:61:1c:af:8c:
5a:2f:2a:2d:69:d9:bc:8f:43:39:40:df:0b:fc:30:ff:49:56:
fe:21:c3:2c:82:78:67:43:80:f2:87:b6:c6:30:83:5a:60:88:
3a:d0:8f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:41 2025 by rpki-client