Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9871384D98A11EFB1DC219E762E951A.roa
File: A9871384D98A11EFB1DC219E762E951A.roa (raw, json)
Hash identifier: 0xyOvYuuuVcLpuZkyE4TMIPrhXD//v4qZ0Xj7C/9/VI=
Subject key identifier: 3E:F7:8A:19:71:BC:72:19:DB:52:75:1F:08:AE:32:B0:63:76:34:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01425D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9871384D98A11EFB1DC219E762E951A.roa
Signing time: Thu 23 Jan 2025 13:05:04 +0000
ROA not before: Thu 23 Jan 2025 13:05:01 +0000
ROA not after: Fri 28 Feb 2025 13:05:01 +0000
asID: 62240
IP address blocks: 154.196.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82525 (0x1425d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 13:05:01 2025 GMT
Not After : Feb 28 13:05:01 2025 GMT
Subject: CN=67923e80-8989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:73:3d:1d:2b:d9:01:e7:ef:9b:c7:13:a6:c6:
66:bc:7e:d6:9b:0f:47:d0:6c:9d:75:cf:c9:90:ee:
e4:63:f7:b1:a5:b7:d6:50:14:5d:c1:cd:a1:b6:8a:
38:c0:06:78:ec:d6:78:3b:fb:fe:da:1c:d7:06:de:
23:97:46:fd:0d:9a:cf:73:af:8a:05:61:07:6b:cb:
9b:3a:dc:57:ad:dc:18:3a:6a:25:58:bd:90:80:30:
bd:eb:6a:c5:b3:af:f1:0f:8a:70:72:4e:87:0f:40:
d1:32:83:d9:8c:7c:db:f9:d2:db:43:dd:01:24:ea:
aa:fe:e6:39:e6:d3:98:70:31:19:93:2f:d9:83:b9:
6d:e3:bb:13:77:80:ee:ad:28:78:52:e2:c3:08:8b:
81:98:4e:9e:f4:c8:3f:a9:65:a6:24:00:1c:40:62:
16:0e:d6:62:57:3e:b6:dc:c1:05:17:22:63:3d:4f:
22:60:86:41:6d:66:a4:72:26:88:39:e8:e4:0e:6f:
87:11:6b:0a:05:32:5c:3c:c6:7f:0c:96:6d:78:35:
15:d7:39:56:56:c9:c7:51:b4:0b:3e:31:00:82:d2:
cf:4d:9d:f0:d6:09:f2:46:90:fd:25:e2:3a:51:f3:
6d:6d:45:5b:c4:fd:bf:85:70:9c:68:15:7c:dc:33:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F7:8A:19:71:BC:72:19:DB:52:75:1F:08:AE:32:B0:63:76:34:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9871384D98A11EFB1DC219E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.19.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3c:f8:64:50:64:5e:dc:dc:51:c6:52:0f:74:12:46:a7:22:
3b:2a:d4:52:3e:ad:5a:08:5c:f2:18:d1:df:25:f4:03:fe:15:
4f:e3:4c:1e:53:6f:6c:e5:3e:04:d2:7a:6d:93:c2:2c:5b:cb:
20:26:70:75:4d:19:c1:28:34:95:ff:17:04:cd:02:3b:d8:4a:
5a:ae:14:ba:75:a5:84:e2:81:59:6f:8b:0a:9f:82:62:e2:bc:
14:02:43:13:71:5c:a5:9b:e0:8e:be:21:52:95:81:07:0b:03:
10:01:2d:68:dc:69:36:60:6c:b3:ef:ee:d4:2d:9e:3f:c9:d1:
88:f7:9f:7d:0f:cd:7d:a2:54:93:75:03:d1:93:76:02:9a:47:
5b:04:a9:1f:f6:f6:6c:a3:5e:3b:58:3b:96:c7:26:00:e1:fb:
30:0c:c4:d8:0b:ab:c6:b9:b2:fc:82:3d:94:ba:a3:08:b4:70:
fc:9e:88:42:da:39:75:da:80:2e:09:09:22:1a:18:ec:16:ec:
79:12:7c:93:77:d3:be:bf:ce:61:cd:d0:40:1c:af:6a:6b:cb:
e9:3e:91:1d:d4:fe:0a:6e:92:1a:a1:60:64:b8:6d:3e:4b:59:
86:d2:ac:3f:d3:8f:a7:37:8c:b9:f7:c0:82:1d:39:74:dd:a4:
26:92:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:56:26 2025 by rpki-client