Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA036A4EDFFC11EF97D9A89C762E951A.roa
File: DA036A4EDFFC11EF97D9A89C762E951A.roa (raw, json)
Hash identifier: ad+L2W0oq89pyW6RQn28DRxczo/SohqYcaA1lzmkMU8=
Subject key identifier: 71:44:51:70:AA:64:25:58:4B:81:2B:41:A9:73:FA:2F:0C:F4:A5:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA036A4EDFFC11EF97D9A89C762E951A.roa
Signing time: Fri 31 Jan 2025 17:57:35 +0000
ROA not before: Fri 31 Jan 2025 17:57:32 +0000
ROA not after: Mon 03 Mar 2025 17:57:32 +0000
asID: 54600
IP address blocks: 154.219.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85565 (0x14e3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 17:57:32 2025 GMT
Not After : Mar 3 17:57:32 2025 GMT
Subject: CN=679d0f0f-7610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:51:e2:31:0e:ac:79:b9:e4:d2:7c:1e:65:2b:
10:5c:40:ae:3f:9c:e2:e1:de:0a:97:13:7d:f3:82:
52:52:b7:75:d1:6b:7e:d9:2c:ce:b1:3f:79:b6:6b:
ef:6f:fa:85:71:82:e0:10:47:35:0c:d9:a2:37:a1:
12:9c:43:4e:89:d0:4c:3b:d6:ad:e6:a6:a7:aa:36:
20:d0:87:4f:97:e0:8c:38:01:a0:5d:59:fd:19:d5:
a0:65:34:45:52:b1:e7:b0:eb:54:73:c0:78:84:c4:
7a:31:16:17:ee:ed:9a:33:62:d0:7f:9e:29:52:d6:
a0:11:57:6f:07:15:f9:06:21:39:36:d9:f2:e2:ac:
77:d9:1b:37:2d:a5:3e:74:42:f1:e0:f0:fe:8b:c6:
f5:44:f2:ef:b6:e7:6f:20:08:81:71:78:e5:4e:39:
b3:ea:ad:19:7b:b5:2e:1e:0f:93:9c:eb:b2:5d:ba:
43:56:b4:ab:0e:b3:71:ce:5c:8e:2a:f0:65:0a:23:
f4:6c:88:32:90:8d:bc:07:b6:0e:42:21:10:65:33:
ca:49:49:63:5c:9e:33:e8:58:16:bd:b7:cd:65:b6:
ce:8d:88:1b:2a:63:a9:36:17:00:62:4a:7d:eb:b8:
29:8b:de:a3:16:b2:5b:1c:19:d3:5f:6a:9c:20:04:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:44:51:70:AA:64:25:58:4B:81:2B:41:A9:73:FA:2F:0C:F4:A5:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA036A4EDFFC11EF97D9A89C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.32.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:ee:fc:46:f2:bf:a6:c9:2e:96:d8:78:02:e8:02:61:a7:83:
f6:4d:b3:81:b7:5a:ef:bf:87:c6:f9:8a:d4:16:64:b9:cd:63:
dc:1e:7a:e7:84:9d:74:76:f0:a6:8d:b0:58:c9:18:fc:7f:f1:
e3:d7:17:09:95:18:28:0e:ae:7b:e2:16:c7:82:b1:5a:63:c6:
da:85:dc:0e:b8:09:aa:38:81:89:ec:61:5e:20:c2:10:04:8e:
98:20:c9:cd:79:d8:1c:79:db:5b:6d:1f:c5:fd:0b:b0:07:2b:
72:88:35:37:6f:af:3f:34:71:ca:4d:88:f0:3f:ab:88:39:a0:
3b:c6:2e:70:fe:78:f3:5e:19:b1:6f:1f:1f:66:90:0b:dd:b5:
f1:4f:14:a8:92:85:82:4f:e2:15:f2:55:b0:35:eb:39:97:e8:
bd:76:23:50:75:b2:94:3d:ca:bb:ae:d6:c9:d9:c6:6c:4c:13:
f0:4e:1b:cf:e3:17:f8:7c:48:5c:8a:a1:d7:0b:f1:fa:bc:55:
c3:d2:4b:65:97:12:00:9f:06:d9:11:90:a9:7f:63:e0:08:a4:
d4:83:a9:0d:59:e4:a0:25:92:8f:d4:1f:16:af:2a:cb:f0:87:
61:34:0c:5f:e0:84:ac:31:ad:1b:d8:26:e8:71:e5:c1:c8:a6:
7c:98:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:24:40 2025 by rpki-client