Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865BDC3CDFFC11EFA2D21299762E951A.roa
File: 865BDC3CDFFC11EFA2D21299762E951A.roa (raw, json)
Hash identifier: fwQWCzTc+DEfRcu5Jm2d+w0wbpBrJW7VrUyFHFXGDqo=
Subject key identifier: 15:58:19:B9:D0:43:4A:C1:81:19:52:FF:E0:AA:1E:73:C8:26:5C:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E3B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865BDC3CDFFC11EFA2D21299762E951A.roa
Signing time: Fri 31 Jan 2025 17:55:15 +0000
ROA not before: Fri 31 Jan 2025 17:55:11 +0000
ROA not after: Mon 03 Mar 2025 17:55:11 +0000
asID: 54600
IP address blocks: 154.202.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85563 (0x14e3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 17:55:11 2025 GMT
Not After : Mar 3 17:55:11 2025 GMT
Subject: CN=679d0e83-1a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d0:27:2f:f0:d2:11:01:c7:39:94:13:5e:b1:
2c:6e:86:c3:8f:d7:71:de:23:78:da:32:cb:17:b7:
cb:19:97:70:72:ee:e3:32:c9:b0:54:8b:92:f3:62:
37:12:84:6b:43:3f:01:b0:88:eb:fc:ce:b0:cf:0e:
87:7f:73:69:64:6b:db:b9:9d:f8:21:e4:f4:e9:b1:
4a:43:cd:fb:08:f5:11:ab:29:32:07:e0:2a:f1:67:
f0:41:65:a1:85:70:da:69:c0:0a:c6:da:b5:84:a3:
dd:47:ae:98:13:08:78:6d:63:43:19:f5:6e:9e:e7:
5e:ab:fa:38:1a:ba:d1:60:a1:f8:69:3c:b1:fb:8f:
3e:84:30:22:f2:36:a2:ae:b3:0f:75:30:dd:76:68:
81:c9:21:18:6d:88:8e:cc:de:9d:9d:9a:0f:59:4f:
be:7f:43:b1:60:a0:00:37:1a:37:20:c7:d1:78:29:
24:2d:57:55:65:62:e9:56:a5:e8:4c:ab:e5:52:e0:
c9:e7:6a:2c:2a:3b:3d:8f:27:b2:60:d2:4b:b7:b5:
ba:8d:62:93:01:bb:f9:4d:dc:72:63:0b:4a:70:e9:
5c:a1:39:10:0f:bf:ba:e0:fe:bc:31:2b:92:df:47:
c6:65:ac:5f:f4:68:ee:5d:d3:4a:2b:9e:b3:be:39:
4a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:58:19:B9:D0:43:4A:C1:81:19:52:FF:E0:AA:1E:73:C8:26:5C:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/865BDC3CDFFC11EFA2D21299762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:20:b3:5d:9f:7b:a6:6a:98:6b:57:a0:5d:c0:67:cf:2c:41:
ac:ee:7f:8e:80:cc:55:1e:d9:52:36:cd:8b:f5:69:36:b5:1b:
48:61:ba:6c:b1:39:8a:ed:92:dc:ee:ed:bf:0f:2f:54:89:8d:
39:84:9d:13:12:8b:a1:24:b8:70:8a:32:d8:64:29:63:90:07:
86:17:e9:c8:81:43:21:fe:47:94:3b:27:fa:5e:b6:d3:85:af:
cc:b1:f3:25:ad:80:e4:06:bd:f7:af:dd:6b:42:70:73:43:bf:
f8:a8:71:4b:e4:2a:f0:df:aa:48:e2:f4:9d:7e:cc:21:71:06:
c2:76:19:bc:ba:bf:82:8f:df:cb:cb:3c:5b:38:58:a1:73:dc:
e3:b8:8a:3e:d0:f6:8b:38:d2:c7:c6:88:de:20:2a:ab:23:0c:
aa:73:a3:04:ec:11:f6:2e:bd:66:60:95:89:7f:78:f1:d7:74:
4d:7f:e7:2b:d6:d4:0f:10:ca:df:3b:1c:2c:1f:c7:61:17:b6:
6d:5f:08:28:3f:d6:72:7d:b1:4b:53:37:5c:1c:39:62:33:e8:
82:00:06:84:a9:0a:77:2d:33:2d:01:0f:69:0d:d3:e1:d4:da:
6b:ea:97:b9:b4:93:3a:4f:89:df:b6:7d:5e:09:a8:0d:c1:14:
9a:99:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:06:02 2025 by rpki-client