Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/596D0F52DA2F11EFB012E876762E951A.roa
File: 596D0F52DA2F11EFB012E876762E951A.roa (raw, json)
Hash identifier: 0smvhCt7E/OnfNgK38cBZgzcu1GtKQTpA046xOfrJWg=
Subject key identifier: B0:76:E5:2D:C1:20:56:7E:C2:A7:AC:13:44:57:2A:07:F9:F5:DC:39
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014487
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/596D0F52DA2F11EFB012E876762E951A.roa
Signing time: Fri 24 Jan 2025 08:43:57 +0000
ROA not before: Fri 24 Jan 2025 08:43:54 +0000
ROA not after: Wed 05 Mar 2025 08:43:54 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83079 (0x14487)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:43:54 2025 GMT
Not After : Mar 5 08:43:54 2025 GMT
Subject: CN=679352cd-b363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:e7:cf:04:25:9b:07:5e:23:e4:6b:12:de:
70:e5:9c:bb:d6:09:c7:d1:4d:bf:b5:ff:23:6b:34:
3f:f7:40:d3:fb:c4:f9:39:30:cb:6a:8e:43:22:15:
24:ed:80:93:0d:eb:5b:7f:6d:df:66:4b:e7:1e:80:
53:b0:c6:a7:b9:7c:a8:f8:b0:f3:31:b7:83:12:2d:
b8:60:06:76:1d:2c:68:63:87:5a:d6:22:2f:05:9b:
84:a3:54:30:bf:11:40:1d:da:f4:93:8f:ea:f1:07:
aa:2f:d3:6a:56:28:1a:e5:02:b5:25:2b:b8:c7:c4:
84:0b:6b:4d:2b:3a:9c:b4:72:fc:18:1d:54:09:ed:
b7:f4:84:81:54:f4:63:93:be:68:d2:9d:a5:12:69:
d5:c2:3c:6b:5d:b7:36:33:06:ea:7b:c6:26:19:6c:
8c:28:d1:51:53:1f:3d:f3:1a:08:c2:74:ea:4a:b0:
fa:cd:11:06:16:4b:86:67:7e:9c:b4:73:55:7e:60:
06:ff:a0:5c:62:eb:a1:b1:17:72:57:77:9b:16:69:
b2:87:8f:41:d4:6f:e5:19:ca:53:b9:65:70:73:d5:
f7:7a:f7:24:d9:c8:63:be:93:ba:a6:76:95:c7:cf:
39:81:98:52:79:0b:d2:53:14:cc:e3:51:d8:c5:92:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:76:E5:2D:C1:20:56:7E:C2:A7:AC:13:44:57:2A:07:F9:F5:DC:39
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/596D0F52DA2F11EFB012E876762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:89:37:d5:c5:9a:4e:0c:23:51:59:52:72:ed:7a:25:41:31:
3a:24:e0:9a:2e:3a:cb:2b:0d:6e:cd:02:58:12:cb:ab:09:a1:
af:59:89:87:84:12:17:d2:33:11:58:2b:61:20:f0:8e:49:01:
a6:4b:a9:a9:99:30:16:37:d6:3a:83:2f:80:4e:7f:7d:37:2c:
6f:95:2b:f2:9e:d9:fc:af:63:f6:16:d2:94:54:e8:4f:e0:c5:
97:ea:86:81:6c:a0:6c:81:bb:59:bd:28:0c:ad:c6:4a:dd:cf:
0f:c5:90:42:6b:b8:21:c4:45:2d:e7:22:89:d2:3b:47:69:36:
3a:3f:40:b2:ff:c3:89:06:db:fc:e2:06:c2:bd:75:fd:8a:e9:
3b:f6:15:00:18:40:13:f7:94:08:a6:2c:8d:81:f5:c1:d6:d2:
93:0c:12:fb:45:88:42:a5:4d:40:da:c5:45:98:d1:38:29:f7:
9f:33:e4:f6:14:73:d3:cb:a0:44:ff:24:16:19:24:68:de:3a:
9c:78:b6:50:bf:44:50:0b:83:f8:c1:49:eb:75:03:bd:99:38:
5c:2e:d7:aa:92:10:03:fb:5d:06:a8:13:26:49:b7:c7:27:cf:
e3:44:de:c2:ee:1d:3a:a3:5b:ba:a5:42:ce:bf:9c:b5:a7:35:
57:ef:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:38 2025 by rpki-client