Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA4CB84DC1511EFA8EB0043762E951A.roa
File: 1EA4CB84DC1511EFA8EB0043762E951A.roa (raw, json)
Hash identifier: 2r2iu8ATOALD3XNdOJkbhc9ToW4Dssv5a4Zn/Fvch8s=
Subject key identifier: F0:BA:97:46:58:30:E9:21:06:B1:58:FC:28:3D:44:E5:E7:77:FC:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014B58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA4CB84DC1511EFA8EB0043762E951A.roa
Signing time: Sun 26 Jan 2025 18:41:14 +0000
ROA not before: Sun 26 Jan 2025 18:41:10 +0000
ROA not after: Thu 20 Feb 2025 18:41:10 +0000
asID: 11331
IP address blocks: 154.195.64.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84824 (0x14b58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 18:41:10 2025 GMT
Not After : Feb 20 18:41:10 2025 GMT
Subject: CN=679681ca-2146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:59:c0:bb:42:11:ff:18:3d:f2:46:dc:b8:e1:
59:e4:e9:ee:25:be:e0:2b:10:e3:17:3e:13:f9:4d:
fd:f2:6c:08:4f:f5:7c:87:2c:ad:95:b8:07:ca:8a:
2d:06:5c:39:bd:c0:33:70:f5:63:ee:a8:b7:df:c4:
c9:ad:89:0e:9f:09:f9:d4:9c:4d:28:4a:03:bb:28:
48:a1:66:e0:3f:3c:fe:a8:78:de:ae:13:94:81:47:
a1:44:2d:a4:3f:b1:eb:e6:8c:a7:41:a2:90:3e:c7:
13:4f:a9:1b:06:41:f3:bd:82:ee:8c:10:8b:95:22:
38:0f:8d:00:4c:bc:01:cb:78:6c:9e:2b:80:4b:26:
dc:fa:38:21:89:1b:f3:f1:af:ad:06:08:13:7d:ca:
fd:e7:ec:2d:c4:c9:a7:e4:d9:0c:c7:18:99:39:4a:
26:22:68:1b:cc:e3:23:98:21:1f:a3:70:c6:86:f6:
b2:47:e5:ba:ec:e3:fa:83:c4:82:17:b1:ed:4a:ee:
8f:60:7b:44:4a:63:9b:c2:f0:17:84:71:29:90:fe:
33:a1:6e:5f:1d:40:4d:41:25:30:8a:43:b6:7e:c6:
e3:c9:94:ce:91:8f:c9:fb:eb:91:93:a4:42:23:a1:
85:08:a6:06:1c:83:a5:12:db:8c:b6:f7:ec:15:6e:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BA:97:46:58:30:E9:21:06:B1:58:FC:28:3D:44:E5:E7:77:FC:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EA4CB84DC1511EFA8EB0043762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b8:dd:79:b2:90:ee:79:a0:89:d0:09:a8:ea:1b:e1:4f:38:8f:
45:6b:91:25:fc:b9:87:52:37:12:32:0f:3f:c0:0d:79:59:37:
4a:ac:e2:37:02:82:40:fd:e4:41:7c:30:31:61:37:b2:8b:f0:
bc:a8:24:c3:70:e5:aa:be:ef:f6:d7:ed:e6:22:4b:96:8c:05:
c1:13:7b:b6:7d:85:36:ee:91:dd:f3:6f:f2:97:b7:63:48:c7:
ce:af:fd:02:d2:91:b1:48:85:65:a4:50:3c:41:86:5f:f3:96:
b6:51:97:f8:b0:26:d2:eb:2b:23:87:10:59:a7:aa:30:5d:f3:
06:72:f7:fc:ed:7d:57:76:4f:1b:57:ba:07:35:f8:62:53:b2:
ac:41:d1:3b:17:c0:a0:83:2f:69:2f:2f:de:85:d7:5c:e5:bf:
4d:f6:d3:2d:a1:22:fc:68:13:98:9c:cf:7b:0e:a9:37:70:5d:
48:9f:dc:17:05:19:c9:e8:53:2c:5f:32:9d:49:fa:ef:05:61:
2a:e3:bd:cf:b3:76:37:e1:64:03:cf:95:c3:48:a8:1e:d1:37:
50:ce:8e:87:4c:5a:0d:40:55:f5:14:b5:fb:b1:c0:ac:9b:4a:
df:26:d8:d8:aa:8d:a1:77:5a:7e:96:bf:c8:23:cc:e4:ec:32:
34:dc:f6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:05:29 2025 by rpki-client