Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/513FCEB6B60611EF97DDEB55762E951A.roa
File: 513FCEB6B60611EF97DDEB55762E951A.roa (raw, json)
Hash identifier: zb9N3pHG4GkZqSshXmGaTW4PfA+SXQXQJA5WVIP89Og=
Subject key identifier: D4:55:27:14:4F:89:AD:2A:46:B1:C4:88:CA:3C:EB:E7:0C:EE:9D:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/513FCEB6B60611EF97DDEB55762E951A.roa
Signing time: Mon 09 Dec 2024 08:19:32 +0000
ROA not before: Mon 09 Dec 2024 08:19:21 +0000
ROA not after: Thu 06 Feb 2025 08:19:21 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72171 (0x119eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 9 08:19:21 2024 GMT
Not After : Feb 6 08:19:21 2025 GMT
Subject: CN=6756a814-0555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:61:1a:fd:e0:62:b7:1e:a5:d4:c8:54:cd:9a:
31:c4:b1:cf:fc:79:d3:12:a4:5f:87:88:df:03:3b:
b0:64:c8:c0:cf:81:b4:6b:3b:73:e8:98:31:81:75:
36:49:b9:bc:ed:44:00:11:cd:ac:c1:cb:06:fb:60:
81:98:ac:6e:ab:1a:92:02:fe:a1:81:de:e3:d2:d0:
7e:c0:2d:67:ce:27:d1:26:1f:5f:06:cf:87:ef:92:
2b:46:f1:d2:8c:88:5f:52:4a:58:15:c0:f8:5c:a8:
23:91:2d:23:18:78:e4:4f:57:f8:cb:46:a7:78:06:
0f:90:d7:0a:57:6c:8d:f2:ab:19:b4:2f:fe:9f:bc:
65:37:e2:21:f7:26:bf:52:ee:16:ae:1d:36:27:58:
9f:a3:04:4f:27:47:6f:b7:3d:e7:f0:74:f1:5c:82:
06:c4:27:b8:ba:02:0a:9b:d6:8c:e9:41:78:20:ab:
2c:ec:98:54:dd:e6:70:42:f7:a1:aa:c5:e8:65:51:
f1:e7:27:0b:a6:96:8e:53:af:7b:b5:b8:9a:d3:c6:
36:f1:ff:3f:11:b4:4d:41:78:d8:65:6a:d8:09:f6:
1d:77:45:ed:b1:e0:26:3a:b6:86:bb:08:f1:47:ed:
f4:5e:9a:41:11:45:8b:79:11:bd:a8:52:e4:70:47:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:27:14:4F:89:AD:2A:46:B1:C4:88:CA:3C:EB:E7:0C:EE:9D:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/513FCEB6B60611EF97DDEB55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:16:73:18:1e:ed:c1:4d:ad:69:75:42:12:60:79:3c:1c:27:
80:2c:60:44:58:77:7b:89:94:a7:be:fa:56:35:61:b2:48:b0:
e3:17:8f:48:fc:61:c1:35:98:9d:2e:cc:8a:2a:f6:67:f3:d4:
18:45:78:b5:df:2f:8f:52:40:71:86:40:4f:4b:95:f8:b6:17:
18:9a:71:eb:40:10:68:0d:a8:c3:8c:f1:85:57:da:85:8c:47:
83:f1:44:dc:e6:df:90:1a:d4:a6:10:36:17:08:b6:17:f3:3e:
99:59:41:21:a9:ba:4b:d2:d7:96:13:50:81:b4:85:e3:27:7a:
1a:f5:f5:81:b2:3f:a4:30:03:8b:59:9a:e0:81:70:1d:df:40:
c7:d7:e5:cc:9d:bd:b5:3d:69:cb:55:69:b7:b7:55:94:02:36:
f0:59:be:82:e4:7a:03:22:78:cd:45:a6:94:07:38:e9:a7:bc:
3e:c3:1a:e1:d9:20:25:eb:2c:79:ed:3a:20:69:64:e9:31:89:
48:63:18:14:e1:f3:74:b8:eb:8b:82:4e:4a:35:f3:a4:85:4b:
ed:7b:d3:70:db:42:8d:d6:7b:14:a0:71:96:63:f0:c1:5e:6f:
fe:3d:28:d5:d5:79:5f:4a:7e:c8:27:36:58:6f:e6:8a:6e:e1:
7d:24:04:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:14 2025 by rpki-client