Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/543F15C6D9CA11EFA18AD240762E951A.roa
File: 543F15C6D9CA11EFA18AD240762E951A.roa (raw, json)
Hash identifier: FgrZPikqQ+9A7zZ1bfqKeFc8zsV955rbJkvC0LOWoJk=
Subject key identifier: D9:CC:AC:58:6A:F4:94:0D:70:C0:35:FA:80:CF:61:67:C6:BF:6B:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/543F15C6D9CA11EFA18AD240762E951A.roa
Signing time: Thu 23 Jan 2025 20:40:49 +0000
ROA not before: Fri 24 Jan 2025 20:40:45 +0000
ROA not after: Fri 28 Feb 2025 20:40:45 +0000
asID: 62240
IP address blocks: 154.196.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82654 (0x142de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:40:45 2025 GMT
Not After : Feb 28 20:40:45 2025 GMT
Subject: CN=6792a951-423d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:b5:29:f9:14:79:46:8b:18:03:59:f4:03:
86:eb:e2:95:59:56:b6:b2:5d:78:14:c1:48:66:29:
82:ea:53:86:04:48:a5:a1:3d:b2:47:78:0e:84:b5:
fd:4f:35:6c:db:e2:d7:a8:94:76:03:9d:ec:d0:63:
a9:0d:50:a3:bf:67:12:b7:41:53:35:55:93:58:7d:
d1:17:d0:e8:98:41:28:ed:cd:e4:21:84:62:bd:ec:
62:85:78:52:29:4c:fd:42:d0:9d:87:04:99:fe:a5:
57:d4:1d:cb:bb:f3:b5:f2:92:01:c5:27:5a:f3:99:
00:8d:f3:b0:20:6c:8f:ba:88:70:51:86:0d:d4:e8:
c8:59:f8:a0:e7:64:c6:aa:f9:22:91:70:07:02:19:
8e:87:04:c2:0f:6a:7b:da:e4:42:d9:fd:7e:0e:74:
4f:05:79:f4:6d:7d:cb:2e:26:e0:9a:a3:45:07:69:
c9:14:60:d7:d3:a8:23:ee:c8:ae:61:75:66:3c:2e:
ff:4a:3a:3e:2f:f7:4c:ef:af:ac:47:9a:65:8d:b3:
24:78:a4:1a:51:89:3c:2f:2a:8e:ea:e5:43:01:7e:
de:2e:a1:dc:a2:22:2a:ed:a0:ee:c2:0e:31:7f:78:
ed:2c:55:60:f9:06:79:3f:a6:8c:df:2d:d0:a8:d8:
6e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CC:AC:58:6A:F4:94:0D:70:C0:35:FA:80:CF:61:67:C6:BF:6B:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/543F15C6D9CA11EFA18AD240762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.59.0/24
Signature Algorithm: sha256WithRSAEncryption
99:e4:0b:05:ba:c8:5e:63:ad:06:8d:2c:74:1b:e0:56:7f:4c:
bc:11:20:35:b9:76:96:56:96:2c:b1:10:b2:2c:c2:7d:86:74:
e3:9e:85:ac:d1:73:3d:78:52:9f:ec:13:7b:79:20:cf:06:11:
f2:ea:8d:be:36:e9:1c:e5:73:a3:a0:ff:d7:4c:0d:d4:35:cc:
26:72:3f:09:aa:57:da:fc:d6:10:6b:1f:48:c0:d2:fb:2e:24:
b9:9c:46:99:a7:c1:6d:6b:7a:d0:53:27:66:f4:e4:99:d4:21:
57:46:66:10:18:3b:3b:ec:b0:08:cc:b4:bc:7a:d0:b8:f5:cd:
5a:ea:4e:6e:46:3b:20:17:dc:15:ce:c7:bf:f0:30:4f:e7:83:
fe:01:50:85:16:1e:28:6d:ca:77:de:07:bd:43:4e:17:7e:76:
12:6b:70:e6:7d:52:34:ff:ee:71:ff:84:5e:62:d1:6e:2a:77:
c2:1d:60:d7:da:a7:88:01:5f:40:29:84:4c:77:45:3e:c7:f7:
c1:5e:26:ee:f6:05:7e:9d:da:9c:17:d2:d5:6a:49:6a:71:06:
ed:3b:8d:70:d4:09:95:7e:db:7d:13:46:8d:fb:5f:38:9a:36:
b8:63:36:8d:c6:87:24:ab:48:8c:7f:f3:da:58:97:3d:25:c8:
26:a9:a7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:50:32 2025 by rpki-client