Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997D36CAD80011EF8EDA8B5C762E951A.roa
File: 997D36CAD80011EF8EDA8B5C762E951A.roa (raw, json)
Hash identifier: gMzTHkwoJhu8gD7FIXFFbhzKQ29vpFzWQpA13BNct6U=
Subject key identifier: B0:96:31:64:B5:3A:E7:D1:30:BE:A5:F8:1C:C8:B8:CC:70:29:98:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013E6F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997D36CAD80011EF8EDA8B5C762E951A.roa
Signing time: Tue 21 Jan 2025 14:04:16 +0000
ROA not before: Tue 21 Jan 2025 14:04:12 +0000
ROA not after: Sat 01 Feb 2025 14:04:12 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81519 (0x13e6f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 21 14:04:12 2025 GMT
Not After : Feb 1 14:04:12 2025 GMT
Subject: CN=678fa960-a5e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ec:db:c6:48:7e:d6:a9:2d:34:b6:05:47:5b:
90:d8:93:ae:60:94:6a:07:26:f2:64:64:6d:90:0f:
91:47:54:b7:0e:2d:af:d2:9e:04:82:bb:0c:91:94:
f8:cc:e2:cf:b3:75:ef:30:51:10:56:1e:09:d3:f8:
9c:ae:0d:00:30:5f:98:e2:66:3b:7e:59:7c:2d:a1:
4c:eb:01:46:12:39:e1:fd:6f:0f:41:9b:49:a6:d3:
40:14:60:6f:bf:e9:8f:c4:9a:3a:1a:99:fc:9b:1d:
57:15:6a:f9:a0:c5:25:65:40:88:ba:36:aa:ef:50:
db:c4:7d:5b:ea:21:f0:0b:55:0e:9d:23:d5:03:d1:
ff:b6:8c:82:38:70:b6:62:b0:a3:86:66:cc:46:7b:
1a:63:88:b8:f0:9f:ef:e5:bb:c2:f3:6f:f9:9d:ff:
85:55:56:ba:fb:6d:47:28:a2:f1:62:e6:da:ac:f1:
9f:c0:dc:43:3c:89:48:7e:0a:72:e0:4c:e9:2c:8c:
f2:34:22:84:be:53:6e:45:b5:f8:ce:64:db:18:8a:
58:67:2e:cf:7c:ca:e5:ba:05:9a:b1:17:a9:02:f5:
f6:8f:ec:7d:aa:e1:48:c5:65:3f:c7:9b:45:f2:62:
7e:e7:92:19:5f:5e:f9:80:8b:48:3c:8f:bc:29:2f:
34:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:96:31:64:B5:3A:E7:D1:30:BE:A5:F8:1C:C8:B8:CC:70:29:98:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/997D36CAD80011EF8EDA8B5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b5:12:96:62:f8:29:c7:83:29:14:d1:f8:de:5f:46:c0:c5:
f1:6f:64:72:ad:f8:1a:ef:51:25:a6:ce:11:df:37:dd:12:4a:
0e:e0:d4:26:f9:72:82:4b:23:7f:e0:11:d9:ac:af:55:c2:7a:
b1:cb:90:3b:59:67:32:9b:ea:a5:c1:69:86:11:1d:a7:35:cc:
84:2c:77:27:f6:a6:0a:bd:aa:bb:69:0b:c4:d9:ba:b3:46:7e:
ad:1e:e1:d2:b8:05:e2:61:d2:f7:4e:c1:22:da:64:b3:be:31:
c5:dd:e8:93:65:ad:93:1c:00:a4:93:f6:9f:bd:dc:57:da:4a:
7c:c0:16:f5:a3:95:24:e3:74:08:bb:15:2f:ab:55:55:e3:b7:
56:85:01:c0:f8:11:78:93:f7:23:6b:c5:49:4b:2c:fd:42:9c:
5f:01:b0:0a:f1:f9:a3:20:86:13:f8:c3:de:5e:3a:68:3a:28:
a1:59:d5:1a:2c:46:f2:f0:b0:04:6a:d4:65:e0:17:96:e1:a8:
1e:06:40:07:e2:e6:0b:d7:10:4f:d9:fd:10:9d:ea:d6:da:42:
f9:18:39:cc:d5:22:af:e7:d1:46:17:34:5c:cf:42:a9:e4:45:
c8:88:06:25:2a:db:0b:b9:5d:40:d9:26:47:ec:74:cb:30:79:
32:e4:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:46 2025 by rpki-client