Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7533A392DCBC11EF9FFDADAD762E951A.roa
File: 7533A392DCBC11EF9FFDADAD762E951A.roa (raw, json)
Hash identifier: JKVTexQmhDZJdkiAsvV+CykTsLjsg1UrJlv7ouVAR4o=
Subject key identifier: FB:27:CF:D6:72:20:24:A1:16:51:49:FB:16:98:30:9F:F3:9A:FF:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7533A392DCBC11EF9FFDADAD762E951A.roa
Signing time: Mon 27 Jan 2025 14:39:05 +0000
ROA not before: Mon 27 Jan 2025 14:39:01 +0000
ROA not after: Sat 08 Feb 2025 14:39:01 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85019 (0x14c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:39:01 2025 GMT
Not After : Feb 8 14:39:01 2025 GMT
Subject: CN=67979a89-a0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fd:46:f5:f5:7a:3d:e5:16:03:0d:f3:78:27:
c1:7d:99:bd:c1:a0:dc:b6:d0:cb:ee:e2:51:3a:15:
cb:4b:f8:2b:2f:18:82:1e:aa:08:f3:38:da:a6:0b:
35:f0:42:db:38:4a:d5:1b:6a:ae:c2:d9:f1:4a:82:
7e:55:5a:55:ed:0a:2f:ab:33:ae:86:c9:30:bf:5e:
1a:6d:9f:56:e2:7c:75:b5:a9:c6:15:da:82:0a:cf:
35:ad:c5:b5:76:14:71:4f:33:12:0c:15:6e:ce:5c:
10:79:0b:e7:5f:1b:b6:25:9a:fb:be:04:52:5a:54:
83:b0:66:9e:d1:44:35:28:b1:8c:75:cf:35:16:81:
fd:0d:71:ce:b0:1b:32:6c:c8:f4:6f:fe:59:1c:c4:
c6:78:49:14:da:38:de:d5:9c:97:24:83:07:30:21:
9f:30:f1:21:68:88:c9:f9:b4:5c:a1:2b:b9:a4:13:
a3:de:40:32:4a:c9:1a:df:33:46:1a:e7:1e:9d:21:
09:61:cb:58:46:0c:0c:d7:a1:ae:4a:bb:3b:0c:6f:
bf:fa:d2:8a:2a:f8:99:32:30:6a:a9:21:15:3e:74:
96:d5:7f:80:cc:c2:a7:a9:9b:14:87:76:91:ed:be:
c2:3f:57:ad:26:2d:d5:80:f0:9b:f2:69:28:33:fe:
62:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:CF:D6:72:20:24:A1:16:51:49:FB:16:98:30:9F:F3:9A:FF:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7533A392DCBC11EF9FFDADAD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b6:42:f8:35:ec:94:7e:cd:c4:59:4f:02:8f:83:dc:a5:52:13:
f4:eb:85:da:98:8a:5f:71:bc:b0:ed:ad:b7:19:65:85:93:9e:
00:af:ac:92:51:4b:ae:8d:5d:a9:4f:74:a2:4e:66:b0:11:64:
3c:7b:63:0a:a0:d7:b1:f4:72:c1:2c:88:b2:a8:da:27:96:76:
45:64:bf:f8:72:33:3c:31:00:a4:71:8f:9c:77:de:85:ab:06:
a6:33:6b:8f:c7:b5:c1:c9:c5:83:bc:08:5e:6d:46:11:08:97:
74:f9:8e:e8:cc:8d:a0:9c:1b:f2:65:c4:9c:b0:ad:68:ae:10:
76:52:4e:2f:1e:37:e3:a9:ab:e1:d2:1a:1f:a3:76:7d:57:b2:
46:8e:11:68:38:70:73:a7:6d:d3:f6:7b:59:20:1c:4d:59:f8:
f9:9a:6e:c9:d1:b8:34:f9:21:68:c1:be:f0:3e:70:3c:61:89:
36:f3:7e:21:f4:c6:06:2a:36:05:ec:3b:94:8a:d2:99:7a:79:
8d:a6:d7:e6:47:76:ac:0d:5a:3f:c6:fd:5d:0c:2b:29:4d:e1:
27:84:e6:0e:ed:b9:1e:ec:e8:e2:5b:51:43:23:96:c5:a4:02:
e1:f7:96:11:c4:38:e9:70:82:ca:05:8a:3d:8f:98:94:62:e9:
5f:21:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:27 2025 by rpki-client