Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F528E1AC6CE11EFA3E12B43762E951A.roa
File: 1F528E1AC6CE11EFA3E12B43762E951A.roa (raw, json)
Hash identifier: TpPverbzKAbs+nmSh/QHLzmEvy84ABBgyhJ+Vhal5a0=
Subject key identifier: E6:DC:3A:D6:66:27:3D:A1:67:72:8E:E8:05:51:E4:36:D3:D4:B8:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F528E1AC6CE11EFA3E12B43762E951A.roa
Signing time: Mon 30 Dec 2024 16:50:06 +0000
ROA not before: Mon 30 Dec 2024 16:50:03 +0000
ROA not after: Sun 02 Feb 2025 16:50:03 +0000
asID: 54600
IP address blocks: 154.219.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78058 (0x130ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 16:50:03 2024 GMT
Not After : Feb 2 16:50:03 2025 GMT
Subject: CN=6772cf3e-7912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ef:a6:f7:04:aa:f4:a8:e6:b1:60:54:06:ef:
b3:2a:0c:f6:4b:37:c4:c1:d6:0a:a1:d6:8d:fa:29:
ba:03:43:fd:9b:91:ee:c5:d6:cf:85:f4:11:14:47:
21:f7:6a:cf:fa:3d:3a:03:6e:36:aa:97:7e:52:e0:
07:c4:d8:8b:67:fa:67:23:f2:8e:11:b4:76:e2:3e:
73:43:96:00:f9:ca:71:7e:b8:15:28:24:af:8b:48:
68:27:e3:d9:ba:1e:ec:bc:1f:a8:a0:fc:6b:0e:8b:
9f:58:e1:42:6e:ab:38:26:c7:d5:63:c7:1d:9a:20:
c3:86:e2:46:05:2f:49:e1:26:e8:eb:12:7a:69:0f:
c2:63:d7:45:62:57:ea:89:0c:3e:fa:b5:14:5a:13:
f4:09:f7:99:07:9a:b6:6e:71:eb:9e:f3:3d:d5:29:
2e:f4:4d:16:7c:d6:f3:0a:90:91:1b:5f:d9:f6:02:
a2:96:01:a7:27:31:8c:7d:ef:4b:71:ee:0e:17:bb:
59:11:c5:4b:3e:b0:bc:99:11:fd:86:3a:f0:93:76:
73:24:63:d1:27:a3:ea:e9:63:b4:59:d6:c8:f7:88:
e5:e8:a0:ea:b6:e6:2b:50:a5:4f:57:6a:76:ef:a7:
b0:fc:31:9e:35:a6:b2:bd:87:94:f9:37:99:37:ca:
a3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DC:3A:D6:66:27:3D:A1:67:72:8E:E8:05:51:E4:36:D3:D4:B8:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F528E1AC6CE11EFA3E12B43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.32.0/19
Signature Algorithm: sha256WithRSAEncryption
47:55:6d:86:13:4d:8d:30:f9:34:61:b4:2d:5b:3f:c7:13:0d:
41:68:90:b7:46:7d:fd:b1:46:f4:87:1c:9e:e0:c5:b2:39:72:
5b:6f:44:48:92:a2:0c:b5:ac:66:04:f4:f0:09:91:8e:2b:c3:
5d:da:7a:f9:29:09:89:57:56:e8:96:a3:38:eb:78:6e:d3:f8:
4b:72:78:c4:28:20:78:ae:eb:bb:fc:c5:e5:e2:77:f4:c4:c8:
4a:a2:ed:39:c4:90:04:57:fc:af:52:7c:63:31:eb:d9:b6:da:
70:56:f7:86:64:bc:2f:db:e5:6a:28:c7:4c:f9:81:8f:91:9e:
b6:04:c5:1f:40:a2:71:4d:da:3e:58:ed:b0:f5:31:70:b5:30:
20:7b:3a:19:75:0f:d3:94:1b:75:33:96:de:60:d9:1d:a2:b6:
8f:63:9c:72:6c:3d:d1:b8:11:d4:99:07:9a:ac:71:6e:f3:47:
d0:40:7b:e9:68:c5:4d:42:5a:6f:ca:4d:28:58:ae:97:b8:08:
30:f0:ea:cb:e1:69:39:07:09:f5:e6:b2:53:f7:70:35:1b:9d:
39:49:34:f8:6c:81:2d:08:ed:b0:08:44:fc:58:12:25:d8:86:
5d:db:66:ae:1e:4f:df:28:7a:f8:c3:a8:12:5f:cc:8f:f7:ff:
d7:c2:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:38 2025 by rpki-client