Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911F0090D98511EFB245977D762E951A.roa
File: 911F0090D98511EFB245977D762E951A.roa (raw, json)
Hash identifier: G4EaMr/GInhOAz7NoVFqWWQ9iuq0MnTJsTm07xxkwkE=
Subject key identifier: F7:15:F0:0C:B6:EA:C2:88:FE:84:A9:3A:24:98:05:A3:4E:E4:41:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01421A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911F0090D98511EFB245977D762E951A.roa
Signing time: Thu 23 Jan 2025 12:28:36 +0000
ROA not before: Thu 23 Jan 2025 12:28:32 +0000
ROA not after: Fri 28 Feb 2025 12:28:32 +0000
asID: 62240
IP address blocks: 154.195.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82458 (0x1421a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:28:32 2025 GMT
Not After : Feb 28 12:28:32 2025 GMT
Subject: CN=679235f4-7760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:17:cf:f0:3b:be:2f:0c:3c:ca:c7:2a:2f:
ca:22:75:37:3a:a4:77:5a:35:1b:ee:0f:89:5d:f9:
0f:6a:3d:37:95:4c:e6:7c:f6:47:e6:e2:66:b1:c8:
d0:fa:54:30:4f:30:5d:b0:46:7a:ec:9b:1c:39:1c:
38:49:f6:41:00:b7:85:21:62:7c:1c:be:ba:93:db:
6b:64:15:db:2b:b0:57:bf:67:88:f0:64:ba:49:d3:
26:a8:b1:af:a8:ab:1a:49:62:72:ba:00:59:f3:40:
f8:e7:f0:39:a0:9f:95:e2:b7:e5:d0:6a:25:f6:e6:
8f:fa:bd:ce:8a:d3:3b:bf:94:b0:26:71:e8:e2:be:
f2:21:d2:89:43:99:c4:b8:91:49:a9:8b:d4:9d:01:
d1:ee:e2:ae:c6:79:a8:f4:1c:33:7b:81:71:42:68:
70:6f:37:fd:4d:35:d9:0c:67:13:44:0c:1d:38:49:
b9:ee:2b:eb:ea:3a:7b:49:5a:8a:63:da:7f:91:6c:
0d:33:50:88:b3:4c:cf:f9:40:6c:29:e5:76:48:43:
8f:82:78:c7:80:55:9f:ff:3c:7d:18:85:84:4e:53:
73:69:b2:76:a7:fd:9c:6b:33:81:e9:8e:0f:4a:54:
9b:ac:4b:00:16:4f:a1:3d:dc:ee:7a:a7:df:0f:df:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:15:F0:0C:B6:EA:C2:88:FE:84:A9:3A:24:98:05:A3:4E:E4:41:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/911F0090D98511EFB245977D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.19.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:97:98:70:7f:00:8c:55:12:13:1a:f8:d6:62:31:80:76:6a:
85:49:fc:f4:20:da:4d:e7:78:07:36:10:ea:a4:1a:bd:65:41:
d4:b1:84:5d:06:c0:7a:82:04:84:dd:fc:ac:43:a5:bc:2c:24:
a6:19:d9:f3:2e:2e:72:26:43:09:27:67:6f:43:e3:39:91:33:
b1:38:3e:cd:d9:f2:76:42:43:fd:e9:9b:41:9a:dd:29:76:46:
0d:d7:0a:3b:c7:62:ec:36:a0:4c:52:0e:07:7a:30:89:ad:96:
75:fd:d1:4f:8c:45:28:51:9d:d9:fa:5d:2f:34:dd:85:f0:ea:
78:d6:0a:31:44:d4:cc:e6:02:a5:20:ff:0f:60:51:46:4f:15:
e4:4a:91:8f:89:3c:d8:46:f1:ad:b5:21:af:f5:f5:5a:48:d1:
24:23:5a:28:86:1a:ed:a5:80:82:16:2d:1a:74:9d:ab:18:0c:
73:cc:8d:37:45:b5:0a:97:24:5a:b5:ee:e0:30:95:9c:5f:0b:
81:54:9c:07:56:87:63:51:07:01:71:f5:0d:bd:5e:24:ce:29:
cc:9b:cb:86:c3:ee:cd:66:2e:c8:ed:9e:7d:64:fa:4b:1b:03:
ae:5f:e4:2e:2d:ef:15:36:11:a6:ed:dc:01:f6:0a:d3:b6:84:
f1:cd:08:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:55:18 2025 by rpki-client