Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCE99490D51611EF998D53BE762E951A.roa
File: DCE99490D51611EF998D53BE762E951A.roa (raw, json)
Hash identifier: 7CGKSSwN98rK0hJ1a3q/3Gu7jolQ0Cet08T8fsAwVG0=
Subject key identifier: 58:84:47:E7:13:44:9A:38:70:B4:6F:FE:69:17:E9:16:F4:1D:7E:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D4F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCE99490D51611EF998D53BE762E951A.roa
Signing time: Fri 17 Jan 2025 21:06:04 +0000
ROA not before: Fri 17 Jan 2025 21:06:01 +0000
ROA not after: Sat 01 Feb 2025 21:06:01 +0000
asID: 139646
IP address blocks: 154.214.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81231 (0x13d4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 21:06:01 2025 GMT
Not After : Feb 1 21:06:01 2025 GMT
Subject: CN=678ac63c-1150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:75:0d:6e:93:52:9e:74:da:bf:8f:33:20:
13:98:17:69:aa:1b:ad:36:56:dc:a4:cb:a7:27:45:
21:89:3f:24:3d:c8:66:04:00:8e:f7:e0:85:24:30:
af:fd:2d:aa:f2:0f:02:a1:99:f1:7f:af:28:b7:b6:
73:6d:27:a1:00:3e:74:1e:b0:7d:60:54:f7:71:d5:
7d:6e:5b:18:f6:0f:7b:47:73:0e:a1:1b:88:77:85:
72:cb:9c:30:68:50:7b:d5:3a:f7:41:19:74:f4:f2:
e9:42:27:d9:5b:50:86:f9:4f:5c:a0:ab:0c:5f:df:
10:a9:4f:3f:bb:8b:0a:33:13:10:87:28:29:27:bb:
06:8e:62:ab:d2:12:f8:58:b1:b2:29:02:56:f6:8e:
13:1e:57:49:7f:99:86:36:a5:b8:df:60:ec:d7:b5:
68:dc:26:b1:00:8e:8d:d3:66:84:e3:b1:fc:4a:ea:
a0:10:b0:8b:f3:cd:98:57:b3:73:59:a1:a2:07:f7:
bf:90:c0:09:b8:62:ed:76:48:de:d7:0f:72:5f:8a:
cf:64:77:cb:85:4e:a2:bf:c5:70:8a:71:e5:cf:32:
29:f2:72:ca:84:b0:9b:21:5b:35:31:a4:79:4b:d9:
5f:87:59:03:e3:ff:4d:5a:20:d7:53:c3:a7:3c:c7:
6f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:84:47:E7:13:44:9A:38:70:B4:6F:FE:69:17:E9:16:F4:1D:7E:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCE99490D51611EF998D53BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.32.0/19
Signature Algorithm: sha256WithRSAEncryption
d7:76:81:70:0d:f5:8e:43:23:6a:a9:48:b0:e8:f8:b3:c7:3f:
84:f4:6a:85:e6:21:c8:2e:2e:ba:66:ac:a1:26:94:82:e2:5d:
ce:cd:27:86:14:2a:fe:14:f2:c4:22:66:66:9d:e4:5f:c5:ff:
e1:2a:72:13:60:c7:4b:dc:1a:6c:43:ce:8f:d0:8d:ed:2f:b4:
a2:c9:15:a0:a5:b0:38:94:84:e6:52:c0:fd:ae:64:6d:56:67:
52:79:65:35:d5:f5:45:be:2e:bf:8d:50:4d:29:42:72:65:f9:
71:26:41:d8:d1:31:81:0a:d2:75:fb:61:e1:ee:ac:5a:dc:1c:
45:31:ff:e9:0d:5c:c6:9b:25:13:da:54:d7:9c:10:ef:ad:31:
42:83:e8:92:1c:6d:40:64:ed:00:c1:32:61:25:8c:52:98:50:
b1:c5:4c:09:ff:af:e0:6c:df:bf:19:a6:79:0c:f6:a0:85:fd:
6d:55:f1:0f:b2:ac:ca:c6:34:ef:dc:d6:b5:a5:c2:9e:33:6d:
64:00:e6:de:34:92:15:3b:18:1f:4a:a7:44:18:0f:39:21:55:
c1:2e:6d:d9:7f:a1:8e:d5:81:4e:a8:3e:90:de:92:c9:48:8d:
cc:23:cf:97:61:bb:33:8d:9a:49:2a:20:3e:01:b2:00:31:cc:
96:42:b7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:33:22 2025 by rpki-client