Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7FB11AD97C11EF97BF04BB762E951A.roa
File: 1D7FB11AD97C11EF97BF04BB762E951A.roa (raw, json)
Hash identifier: FLSDFDcC/fFZ5iL6+uBwW5FlLhxHQudHQKax33UThBM=
Subject key identifier: F5:86:81:29:DC:B1:0F:10:36:73:7B:62:48:14:02:13:DB:12:3D:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01418C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7FB11AD97C11EF97BF04BB762E951A.roa
Signing time: Thu 23 Jan 2025 11:20:57 +0000
ROA not before: Thu 23 Jan 2025 11:20:53 +0000
ROA not after: Fri 28 Feb 2025 11:20:53 +0000
asID: 62240
IP address blocks: 154.195.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82316 (0x1418c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:20:53 2025 GMT
Not After : Feb 28 11:20:53 2025 GMT
Subject: CN=67922618-5511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:51:36:ae:4e:28:30:c3:89:b5:2f:cc:ec:16:
07:18:23:d3:b6:fd:7c:77:2d:8a:bc:b7:30:ef:17:
24:4c:05:b0:21:e0:2c:24:6c:c9:81:95:ff:14:65:
e0:f8:24:93:2c:d6:da:82:c2:14:77:65:a3:92:8e:
96:68:e2:f1:4a:2a:be:9e:d6:31:3b:07:1b:39:b3:
d9:ea:d4:ae:ad:f5:09:4f:76:38:23:3c:ed:29:79:
3f:ce:03:7b:49:e2:4b:c1:f5:16:e4:b4:0d:1a:ee:
59:c4:0c:02:ca:b2:94:05:5d:cb:e3:f5:2c:1d:37:
4c:3b:8d:b7:77:f1:bc:8d:41:1b:0f:54:9c:dd:08:
5f:ad:f3:00:f9:9d:1a:28:a8:8c:7b:79:f6:1d:9c:
d2:51:a2:94:3e:20:6d:b0:1c:10:fd:81:7c:53:65:
7f:7e:11:1a:a9:33:d8:76:8c:00:eb:74:62:61:a2:
1a:92:e8:d5:9f:49:06:3f:6c:7e:12:66:fe:3f:e2:
69:25:90:75:05:97:db:c4:46:1c:ac:97:c8:ea:ee:
b3:24:8d:45:eb:b7:e2:65:20:04:ec:c1:7c:26:cf:
91:40:18:29:c2:2f:35:da:63:04:44:d0:6a:3d:56:
32:81:0b:d9:4b:08:ee:c5:6b:63:bb:9a:ee:08:b9:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:86:81:29:DC:B1:0F:10:36:73:7B:62:48:14:02:13:DB:12:3D:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D7FB11AD97C11EF97BF04BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ea:e0:1d:7c:28:4d:4f:4a:da:60:78:36:1a:8e:46:a7:71:
40:88:93:8b:b9:8b:11:a8:53:8c:9c:20:73:4c:eb:19:ca:1a:
5f:47:8e:a1:8c:13:e1:85:ba:2b:5c:53:5c:a7:80:e8:79:20:
2b:42:98:92:70:2e:06:0f:71:11:a0:e4:3c:43:d4:6c:c5:d7:
d6:39:da:38:51:28:84:f9:96:3c:40:d0:27:b8:90:92:41:ca:
c6:78:40:06:75:d1:91:e3:c2:96:6c:9a:16:b9:ef:22:28:b6:
b5:7b:91:f5:96:6c:b2:ce:7e:6b:b3:90:45:5d:6b:b1:43:80:
21:7d:19:e5:99:2c:aa:87:45:f0:53:1c:02:75:73:46:5a:32:
44:f3:de:a1:3c:b5:88:50:c5:82:e9:1f:d1:a9:89:55:b6:b5:
11:4f:1f:ca:eb:7b:fc:c5:b3:00:fa:00:11:ad:3e:7e:62:16:
9a:a9:ea:0d:2a:ea:88:a9:14:bb:35:c9:7c:3b:54:b4:c8:f0:
97:9f:df:00:01:b5:a4:e1:6f:8a:88:aa:49:53:90:83:14:9f:
33:c3:b9:d9:46:70:d9:ab:2c:e6:10:8b:86:91:df:d4:14:03:
6a:d6:7b:a1:1a:1a:68:a6:a4:f6:10:bb:e6:7c:4f:f6:1b:e6:
9d:8c:b7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:39 2025 by rpki-client