Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743A8D74C51611EF9A8D7E5F762E951A.roa
File: 743A8D74C51611EF9A8D7E5F762E951A.roa (raw, json)
Hash identifier: MHcxotsf9FFcvlpR1DN69ywhXFeAjL2wuTJS7nesOfE=
Subject key identifier: B3:75:49:65:70:9B:CD:87:B3:43:64:3E:06:78:2D:FB:B0:70:A7:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012B19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743A8D74C51611EF9A8D7E5F762E951A.roa
Signing time: Sat 28 Dec 2024 12:22:50 +0000
ROA not before: Sat 28 Dec 2024 12:22:46 +0000
ROA not after: Mon 03 Feb 2025 12:22:46 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76569 (0x12b19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 28 12:22:46 2024 GMT
Not After : Feb 3 12:22:46 2025 GMT
Subject: CN=676fed9a-c607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:af:dc:39:3a:7f:25:f7:19:ac:4b:5b:17:64:
dd:4c:2f:1f:77:39:a9:1a:54:8d:88:22:d6:ec:9b:
ff:f4:9c:ad:8a:33:ae:3e:f1:e1:01:98:a7:c7:c1:
f2:23:10:d0:8f:26:08:27:92:c8:a7:dc:65:3f:06:
6f:5f:6b:c2:84:08:8e:b3:ab:9c:c4:2f:a2:e2:4f:
4a:10:35:44:9e:32:6e:8d:6e:08:d2:af:62:3d:fe:
71:0f:88:8b:13:bc:22:ec:2c:8e:50:3b:a8:60:1f:
57:18:f2:7e:32:26:d5:67:d2:41:be:65:96:d6:d1:
a1:83:a8:3a:c9:9f:6d:b3:24:6b:cb:18:98:3f:5f:
fd:2b:09:9b:0b:4f:45:0a:26:77:2d:a5:07:1a:b0:
df:03:f8:b0:f5:5f:c0:24:b4:21:9e:3c:3e:5b:9e:
3c:28:19:db:c5:1b:7b:20:a7:50:54:a3:56:47:29:
ea:2a:dd:47:9d:28:bb:56:26:02:f8:76:c9:2b:97:
14:90:52:a9:41:c3:70:a2:24:19:7b:91:2b:d4:1c:
58:98:d5:6c:3f:f7:05:73:2f:63:67:e0:d1:2a:7f:
12:df:39:ec:d0:80:e4:54:d8:bf:09:8f:f9:94:78:
f4:cb:4c:01:a2:59:fb:aa:9e:c3:9d:eb:90:51:92:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:75:49:65:70:9B:CD:87:B3:43:64:3E:06:78:2D:FB:B0:70:A7:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/743A8D74C51611EF9A8D7E5F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:75:dd:b5:59:74:db:b1:a6:7e:1f:0e:a8:fa:64:3b:8d:0d:
01:34:9c:e1:07:74:c3:da:8b:b6:ef:33:c5:95:b2:ad:5b:d7:
58:15:57:68:b5:89:18:4b:b0:8d:e3:b1:24:14:76:42:31:6b:
d5:68:4b:43:91:d2:e4:29:ff:07:4f:34:c9:e5:45:a3:ae:65:
59:4d:8d:b1:d9:a5:7c:d8:7f:6b:1d:dd:1d:61:d5:82:82:3f:
48:66:67:8e:df:58:d2:2a:33:d9:36:05:58:1c:c3:a6:1b:e4:
35:96:43:35:c6:08:bf:db:6f:48:ca:14:21:16:3c:24:70:9f:
f7:8b:51:f0:e0:18:d5:1e:4e:dc:04:01:99:de:69:c7:e5:2e:
2b:3f:4b:1a:b1:6e:52:c5:fd:3e:f7:c2:d5:5a:78:5a:d8:8d:
5f:6a:08:f3:14:4f:8f:c6:eb:0b:33:a1:42:29:33:b1:0b:fa:
af:31:9a:e5:bf:d2:bf:b5:03:a1:42:66:0b:9a:60:c8:1a:16:
7b:38:d6:ab:93:27:8f:54:1f:87:b5:19:44:27:65:ba:9d:04:
0a:89:96:39:bb:9d:a2:13:8a:57:17:96:71:c2:24:fe:0d:8f:
6a:2e:0d:ca:1d:e1:bf:27:91:10:58:fe:b9:40:81:ed:6a:e2:
bc:3f:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:35:20 2025 by rpki-client