Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6196036DA5911EF982A0097762E951A.roa
File: C6196036DA5911EF982A0097762E951A.roa (raw, json)
Hash identifier: PSVkEb0UXWIWsCRO35w3GS6eab1+2evpzBdvY45EuNA=
Subject key identifier: 8D:65:0B:52:D9:EE:C2:FA:AE:2E:73:FF:85:43:98:62:60:58:B8:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0147B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6196036DA5911EF982A0097762E951A.roa
Signing time: Fri 24 Jan 2025 13:47:38 +0000
ROA not before: Fri 24 Jan 2025 13:47:35 +0000
ROA not after: Wed 05 Mar 2025 13:47:35 +0000
asID: 48031
IP address blocks: 154.218.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83888 (0x147b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:47:35 2025 GMT
Not After : Mar 5 13:47:35 2025 GMT
Subject: CN=679399fa-8731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:fd:9d:f9:80:31:de:5f:1b:fc:d4:4d:a4:
45:0b:61:e1:6e:66:53:fc:85:a9:0f:77:8e:ff:30:
c0:6b:a1:c7:be:24:77:ca:21:a1:cf:da:d4:a4:b6:
84:e8:95:36:20:a6:cb:89:09:62:11:f3:cf:44:71:
0e:84:00:e1:10:14:f9:66:9c:ef:21:9d:15:a1:c9:
d1:ad:d0:66:eb:99:f3:39:d0:b5:4f:bd:2a:d1:83:
dd:83:33:35:a1:5f:0d:4a:8b:b0:ab:6b:ce:6a:41:
a8:cb:7d:84:9b:1a:83:02:93:bf:d6:66:e3:d2:f2:
6a:15:13:e2:06:c0:3d:5c:06:f5:0e:f3:24:fa:c7:
dd:41:d2:a7:0e:04:1f:22:74:38:4e:2b:c4:f7:84:
81:fb:b3:e8:a2:19:a5:d7:23:a2:5f:78:66:cd:54:
fe:2c:e2:00:bf:bd:31:8e:84:a6:60:6b:7d:00:16:
60:7e:ad:47:e4:21:e7:73:4d:bf:76:8d:3d:e4:7b:
40:e3:81:08:86:4e:72:c8:fe:99:2e:87:15:10:2e:
ea:17:e7:04:9e:a0:0f:07:3b:3b:77:ea:09:b6:39:
ff:e1:b8:52:f5:e7:98:c7:b3:07:d8:11:b7:5f:aa:
c3:a4:c7:6d:75:ca:a2:d8:43:8b:6c:47:6a:5d:c2:
c3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:65:0B:52:D9:EE:C2:FA:AE:2E:73:FF:85:43:98:62:60:58:B8:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C6196036DA5911EF982A0097762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.24.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:cb:fc:f2:f4:ed:67:86:8b:45:8a:28:82:d9:89:80:6b:51:
2d:61:8d:31:63:d9:fe:c5:62:0c:ef:2f:84:c4:bb:d0:7e:92:
ba:0b:4c:3d:2b:f0:ab:2c:bd:a1:ef:4f:59:e6:2e:55:0c:49:
eb:46:48:b7:e6:ec:62:37:6d:8a:8c:77:c3:8e:b1:ac:0d:a1:
e2:61:8e:06:f4:c6:a2:0b:5f:19:78:3c:22:ef:6f:a2:e0:0a:
87:5b:d2:a2:b0:cc:b3:dd:59:ce:a6:09:12:a5:ac:86:1a:65:
e3:82:45:42:29:5c:f2:f9:76:95:da:fb:30:85:12:9a:d7:8f:
56:fd:02:84:b1:1e:ac:a6:16:f2:b9:ca:8e:cf:2f:78:db:eb:
c2:9e:33:df:98:d4:d8:cf:e5:1a:98:c7:99:30:ac:32:70:50:
0a:1f:eb:3d:7c:a4:89:f7:ba:db:00:27:29:5b:4a:eb:d9:bd:
18:23:fd:f8:a8:78:ff:4c:1f:7b:92:4d:b8:8a:a6:24:ea:de:
09:af:7f:e3:e9:db:22:e4:ca:20:04:ac:a2:e4:4d:23:c6:f3:
d4:d4:45:8a:2e:dd:29:68:e1:54:72:42:11:c7:08:ab:2f:fb:
56:f5:3e:52:8b:69:e8:88:5b:7f:81:90:5a:65:8c:48:60:9d:
c5:06:87:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:39:21 2025 by rpki-client