Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C88F406AD58111EFB3D9AC89762E951A.roa
File: C88F406AD58111EFB3D9AC89762E951A.roa (raw, json)
Hash identifier: oEtNXlfpcUqAC9azqBSo87vEJyJNToraBIma9xeMh3E=
Subject key identifier: 96:5E:4A:9C:36:E3:29:42:A3:38:08:9E:C5:7D:8A:44:96:E0:A8:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C88F406AD58111EFB3D9AC89762E951A.roa
Signing time: Sat 18 Jan 2025 09:51:26 +0000
ROA not before: Sat 18 Jan 2025 09:51:23 +0000
ROA not after: Wed 26 Feb 2025 09:51:23 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81384 (0x13de8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 18 09:51:23 2025 GMT
Not After : Feb 26 09:51:23 2025 GMT
Subject: CN=678b799e-07f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:c4:1f:dc:52:d9:91:9a:d4:2b:de:9b:46:
0c:a3:c1:65:32:0e:c1:59:c9:83:c8:ff:3e:8f:4d:
aa:c4:76:23:bb:2a:60:ef:d9:05:34:8f:7f:b1:a2:
17:6a:44:a1:52:7e:35:ae:91:67:cf:1d:fb:3e:49:
6b:05:27:33:c7:c6:44:31:8a:b5:cf:36:f2:ec:05:
2d:21:c7:f6:b0:24:eb:4a:2b:63:39:c8:32:5d:ca:
4e:e5:0a:a7:f1:c8:20:23:ca:59:9c:3c:77:bb:4b:
5f:cd:1c:d0:32:2b:1c:54:b9:1c:47:7f:7a:b7:81:
01:db:a5:76:47:ea:7d:b4:8c:0b:33:0f:19:6a:b3:
7c:12:fc:9a:71:ba:93:35:cc:d6:0b:ac:4f:ff:d2:
16:2b:de:a0:10:f0:d4:6f:83:c1:92:2a:26:7d:7c:
df:94:63:01:da:34:a3:4b:28:b3:99:7e:a8:29:fb:
09:da:75:ef:a1:92:bd:89:7f:93:48:c9:cf:3b:a4:
c9:a1:85:8f:ee:aa:21:ee:19:f7:a6:e1:53:6a:e4:
32:07:bd:78:93:23:cd:37:2a:83:1c:68:81:96:27:
98:87:69:4e:c4:15:db:85:b5:78:a8:9a:af:a7:59:
26:b1:e0:f2:64:d9:20:be:e7:3f:21:aa:89:ce:fe:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:5E:4A:9C:36:E3:29:42:A3:38:08:9E:C5:7D:8A:44:96:E0:A8:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C88F406AD58111EFB3D9AC89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d4:4a:01:d0:68:ce:c4:11:57:e6:98:de:fd:54:fd:19:3b:
91:da:b1:bd:8f:20:a8:ce:6c:ba:40:5c:e7:d6:98:83:81:08:
2a:e8:75:24:5d:87:4a:46:72:c9:6c:36:43:3a:99:74:80:ec:
76:35:2a:50:fb:4d:95:6b:bf:f6:97:0f:f7:43:b3:e0:db:28:
68:f9:3f:fc:ef:8e:7f:b9:3f:a5:b5:88:02:df:33:95:f9:51:
9e:c1:54:65:41:ee:f5:31:a7:08:e1:59:77:e2:89:e3:b9:77:
a7:12:bb:b6:7b:d0:67:d0:52:55:9d:96:ef:77:a5:27:c7:33:
51:32:d5:86:66:ac:da:0f:09:ee:43:62:ee:e3:b4:71:c3:cb:
32:73:85:9c:af:1f:c3:2e:15:27:c1:81:ec:fc:99:a1:0b:d2:
51:83:8f:02:bf:5a:85:d7:1f:ea:30:e8:93:09:6c:68:b2:b1:
b0:84:58:52:09:57:0e:31:67:ec:4b:14:c5:b1:75:7c:37:9c:
ee:fd:54:ec:08:f5:21:f3:9d:23:cf:7f:ac:4b:41:80:9b:14:
80:b4:43:b8:56:46:0c:d5:e7:ba:a7:48:8b:20:10:c3:12:a4:
05:4a:ff:69:9a:91:9b:2d:a6:98:02:61:e9:6d:fa:95:5e:f3:
f6:4d:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:06:12 2025 by rpki-client