Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF5212A6C74411EF8737A1B8762E951A.roa
File: CF5212A6C74411EF8737A1B8762E951A.roa (raw, json)
Hash identifier: SyViid6pwPItUaTbQwSxGNv/Fduar9wYWDcdEKU9fHE=
Subject key identifier: 30:04:44:22:0C:D2:1F:CD:ED:50:BD:51:F2:54:26:C8:BF:78:6B:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013101
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF5212A6C74411EF8737A1B8762E951A.roa
Signing time: Tue 31 Dec 2024 06:59:42 +0000
ROA not before: Tue 31 Dec 2024 06:59:39 +0000
ROA not after: Sun 09 Feb 2025 06:59:39 +0000
asID: 272369
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78081 (0x13101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 31 06:59:39 2024 GMT
Not After : Feb 9 06:59:39 2025 GMT
Subject: CN=6773965e-8d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:8f:cc:80:74:84:b7:5c:ab:5b:99:70:b6:
5e:7a:93:bc:52:23:04:7a:35:95:7a:3a:f0:c8:e1:
c2:57:c4:a1:ae:dc:7f:33:66:4a:c9:72:7d:53:a4:
c1:5e:6b:fa:08:f8:1e:40:5c:c8:d6:33:61:c9:95:
ea:f8:13:ae:38:1f:92:ce:a1:62:3a:c0:94:84:24:
e1:c4:04:5a:91:a1:8b:16:f0:8d:1e:d3:e1:03:d3:
06:62:8e:80:16:ba:b5:19:21:eb:8f:f5:0c:19:87:
e9:db:51:89:50:67:5e:cd:f5:d8:fe:b0:5c:50:51:
78:ae:05:fa:db:91:84:ad:ed:31:d3:23:cd:a3:dc:
96:ef:f4:0c:0c:4c:2b:67:ce:43:17:0c:ab:b1:10:
e6:c7:ec:90:df:d7:4d:e8:a8:9b:5f:38:40:9a:bd:
e0:b5:1c:82:29:1b:db:71:e6:0e:e7:7b:95:59:4f:
87:5c:4a:68:7a:ec:9f:6f:ab:06:18:fd:d4:1a:4e:
63:c5:b6:53:58:39:9f:aa:e9:65:7b:fb:4c:a8:ce:
15:9d:eb:e8:7b:a7:93:a6:3a:b5:d0:6f:bf:60:bb:
08:41:cb:e6:e3:52:c7:ae:92:2d:5d:0f:81:12:03:
c9:38:fb:30:19:a7:26:46:b2:0d:13:c5:86:f0:93:
20:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:44:22:0C:D2:1F:CD:ED:50:BD:51:F2:54:26:C8:BF:78:6B:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF5212A6C74411EF8737A1B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
80:02:22:a8:11:45:a0:83:9b:c2:16:c3:94:43:29:fe:ae:ab:
bc:39:48:d3:9e:d2:d0:93:85:5c:77:84:91:48:ca:39:d3:53:
3c:bf:06:53:0c:56:4b:ff:da:2c:a4:5a:96:8e:40:93:6c:c9:
ab:05:b4:dd:f2:ec:fd:da:6d:4a:52:08:3a:5f:57:35:4c:02:
9c:4b:85:86:f1:3c:e5:4d:22:6e:85:c7:9c:6e:6a:83:ba:d2:
61:cd:8e:a9:41:30:de:33:33:55:bc:99:37:0c:69:85:d2:67:
40:a3:06:fd:78:f7:f6:a0:e0:d4:c5:02:7e:ed:76:f5:b5:03:
68:51:dc:9d:96:0b:e1:33:e6:50:a6:d8:42:63:92:ed:8c:96:
bf:e0:97:d1:18:29:0d:67:23:5a:ad:82:42:63:8c:1e:11:2d:
cd:90:18:2b:bb:04:b2:cf:66:ea:47:0b:d9:b1:01:a4:41:da:
4b:a6:38:40:7a:e5:d3:0c:16:d0:aa:fd:10:7e:3d:d6:62:fc:
a9:e4:b1:60:83:f3:33:57:65:27:bd:4e:fc:d7:71:e8:bf:d6:
15:3e:2e:ed:77:88:9c:b1:73:0d:81:86:95:9f:3e:5a:f9:b8:
73:3e:5f:db:ad:83:dd:22:ca:13:bc:c0:71:75:a0:b7:31:75:
de:63:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:47 2025 by rpki-client