Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20568EAABEAA11EFB88201AC762E951A.roa
File: 20568EAABEAA11EFB88201AC762E951A.roa (raw, json)
Hash identifier: FpEGFuTaQeek+4liJYNk/jnOJ9KOa5C6mSNtak6rqOM=
Subject key identifier: 5F:16:6A:41:9A:CF:AC:36:C8:DB:4D:3D:A0:B1:7F:F7:B9:02:85:19
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20568EAABEAA11EFB88201AC762E951A.roa
Signing time: Fri 20 Dec 2024 08:12:17 +0000
ROA not before: Fri 20 Dec 2024 08:12:13 +0000
ROA not after: Thu 20 Mar 2025 08:12:13 +0000
asID: 328608
IP address blocks: 154.214.192.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72840 (0x11c88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 08:12:13 2024 GMT
Not After : Mar 20 08:12:13 2025 GMT
Subject: CN=676526e1-a531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:99:ce:3f:a9:13:4c:1f:2e:1b:5f:02:10:19:
38:7f:9b:39:99:54:9c:7b:88:5d:9c:42:c1:f0:1b:
6f:28:0e:8b:3f:42:65:1e:80:ae:ba:24:c5:d5:6e:
e4:3a:f6:f1:77:9d:69:43:a9:39:b4:22:a0:79:6e:
60:3d:90:11:e1:59:51:1b:6f:51:41:47:cf:8e:ef:
21:25:62:1e:3f:66:3d:55:ab:f9:80:bf:12:0c:d8:
d2:bc:5c:d0:97:e1:a0:e6:80:8e:3f:76:44:a2:45:
d1:01:26:bd:fc:e6:67:ce:49:a3:4b:e5:bb:4c:e9:
75:90:2e:c0:83:22:ba:7f:40:d8:96:6e:79:40:1a:
9c:d7:0c:fe:0a:49:e6:23:42:19:ca:0f:05:b0:30:
47:8a:03:2d:ac:a7:86:b0:2d:f0:6e:cf:0b:43:82:
7d:23:29:b9:2c:db:cc:70:1f:ab:d4:dd:be:03:6f:
2d:26:b1:a1:91:1d:49:3f:8e:bf:67:06:bf:50:d4:
b6:de:42:6e:8e:ce:e4:c1:5c:19:6a:6e:e4:15:64:
cf:d1:27:c5:65:e3:6f:6e:d3:7c:07:ad:29:37:e9:
4c:ad:47:04:e5:10:8c:9c:30:08:00:16:97:3c:1f:
43:51:f2:f1:ae:92:7a:a8:ac:39:ba:3b:28:58:4a:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:16:6A:41:9A:CF:AC:36:C8:DB:4D:3D:A0:B1:7F:F7:B9:02:85:19
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/20568EAABEAA11EFB88201AC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.192.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:e8:67:ec:17:50:77:8f:64:14:1a:d8:47:f0:4d:62:47:1f:
c6:1e:d0:92:ab:ae:58:53:8f:75:78:9a:73:c8:1e:c1:1c:c1:
0a:c2:58:ba:83:11:74:8f:d5:cb:46:a5:8b:43:18:85:27:37:
e8:74:76:37:a4:5f:16:a9:cd:1c:04:5d:22:fe:24:5d:64:bd:
71:13:24:ee:6b:8a:ec:94:05:5f:42:43:5f:ef:1c:e7:6f:e6:
87:03:5e:36:b7:2f:28:d0:64:c0:c0:ee:27:7e:50:6b:36:c8:
2b:74:bc:b8:5b:1a:0a:6b:15:54:10:64:73:74:1a:0d:8b:33:
f8:02:5d:08:64:a5:07:2a:b8:19:85:15:0a:ef:fd:7b:7e:3b:
ff:a8:d5:5d:76:44:86:5e:41:3d:1e:5d:95:e8:09:61:8b:6c:
57:b9:1f:52:62:35:63:af:8e:27:d6:d4:e0:71:63:f9:22:1f:
00:f3:fd:c3:09:9f:ee:af:1a:84:e7:40:af:5d:69:75:1e:8a:
4e:0a:ad:d4:e6:ef:1a:85:b0:7d:67:a1:62:d5:5f:be:5d:c3:
cf:ac:c4:c0:84:45:8f:8f:d7:d9:90:d3:7c:6f:6a:c2:bc:6a:
c9:66:78:4d:29:5a:74:a2:40:9b:1d:72:f0:52:b6:52:a9:02:
56:63:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:38 2025 by rpki-client