Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD782C3CD4B211EF9407FBB6762E951A.roa
File: DD782C3CD4B211EF9407FBB6762E951A.roa (raw, json)
Hash identifier: oJ5sZFOlhPG0imGQBSSs5Uabo8/xAVO5umWDiwVUGes=
Subject key identifier: C4:DC:84:EC:F9:7B:D0:DD:A1:B3:24:3E:D8:8A:8B:8C:DC:AC:3A:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C49
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD782C3CD4B211EF9407FBB6762E951A.roa
Signing time: Fri 17 Jan 2025 09:10:16 +0000
ROA not before: Fri 17 Jan 2025 09:10:12 +0000
ROA not after: Mon 17 Mar 2025 09:10:12 +0000
asID: 17561
IP address blocks: 154.216.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80969 (0x13c49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:10:12 2025 GMT
Not After : Mar 17 09:10:12 2025 GMT
Subject: CN=678a1e78-f5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:79:84:53:60:48:9e:d9:f4:17:d6:92:7a:2f:
26:d3:02:ab:09:3b:ee:c6:a6:48:92:36:82:81:88:
33:95:81:bb:29:df:73:02:97:52:bc:3f:85:01:82:
7c:1b:95:d0:8f:30:13:2a:52:87:60:c4:11:4b:44:
88:6a:fa:48:e9:b0:cd:e2:77:b6:79:ce:6c:30:ff:
21:30:38:d6:39:97:4f:68:e0:5a:43:00:db:54:da:
06:6f:61:c2:68:ec:59:62:d1:ec:d0:e5:91:4f:22:
8b:1e:be:fb:2b:1e:b4:16:0e:34:a0:18:83:66:6d:
73:a5:31:91:e3:20:ee:42:5c:29:d7:ab:14:c5:3e:
10:1f:20:7b:62:11:70:98:15:c2:78:91:d8:15:ec:
da:10:ad:fa:7c:ba:31:56:92:8a:14:e8:7c:a3:b1:
e9:2e:c0:47:ac:77:aa:d8:65:53:5d:e9:1e:4c:a7:
85:fa:4f:14:92:1e:31:94:7a:ea:ae:2e:81:66:7b:
c8:40:e9:3e:92:67:9b:bd:fb:e0:bf:75:a9:08:1e:
45:1a:fa:08:5f:d7:11:53:9f:a6:71:d8:91:a2:20:
f5:21:d7:c3:c6:2a:36:2a:16:b9:94:45:b7:f3:10:
c9:3c:59:7b:fa:ce:51:55:0f:d9:87:50:7f:c0:94:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DC:84:EC:F9:7B:D0:DD:A1:B3:24:3E:D8:8A:8B:8C:DC:AC:3A:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD782C3CD4B211EF9407FBB6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.19.0/24
Signature Algorithm: sha256WithRSAEncryption
37:06:92:9d:e0:41:da:3e:77:9d:bb:8b:aa:0f:e3:bf:fa:7f:
14:09:3e:25:dd:20:5a:ec:d9:fe:ea:b1:40:ab:04:ce:a3:8b:
8e:47:bc:9d:0a:dc:41:8f:da:82:df:bb:ae:dd:cb:77:ed:27:
d0:68:9e:52:d0:cc:81:d1:d5:31:88:95:fe:1b:f2:98:f1:90:
93:97:58:1d:88:c6:2c:69:04:73:24:00:a4:41:b8:e7:c1:63:
74:36:b4:e9:aa:10:03:26:8f:0e:c8:a9:b0:12:5a:21:8a:37:
61:0d:8b:91:b7:bd:90:2d:4d:d7:e0:1e:4f:aa:d7:8a:0f:e2:
26:e9:48:67:e6:28:76:c6:51:f6:61:e8:b6:18:b4:a0:a9:17:
89:4e:a2:ef:0f:20:87:2d:63:e7:4d:f2:68:b2:9c:29:7e:52:
94:60:df:f6:07:bc:af:2f:57:67:e7:34:8b:d6:67:b8:c2:36:
f0:6f:41:9e:68:08:3b:75:68:af:ef:8e:d2:49:57:78:0f:30:
40:47:b9:5a:ed:23:a7:6c:6e:46:66:1c:57:08:a8:3a:1b:9e:
71:7c:cd:b7:e7:f7:20:7a:a5:f0:0a:91:1b:63:06:47:d5:32:
ee:75:f6:69:53:bd:93:52:98:45:05:ed:6c:de:9f:83:5c:f7:
d2:27:c2:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:45 2025 by rpki-client