Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A3DDCD4B411EFB613FB45762E951A.roa
File: F20A3DDCD4B411EFB613FB45762E951A.roa (raw, json)
Hash identifier: gGbYMSW6ChAxVkwQZLY6uLumwg7PNHkZp55I4izMhtQ=
Subject key identifier: A7:17:DD:AA:E3:50:FA:E0:DA:7E:2D:45:AF:D9:90:5C:94:B8:55:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C59
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A3DDCD4B411EFB613FB45762E951A.roa
Signing time: Fri 17 Jan 2025 09:25:09 +0000
ROA not before: Fri 17 Jan 2025 09:25:05 +0000
ROA not after: Mon 17 Mar 2025 09:25:05 +0000
asID: 17561
IP address blocks: 154.213.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80985 (0x13c59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:25:05 2025 GMT
Not After : Mar 17 09:25:05 2025 GMT
Subject: CN=678a21f5-628c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:94:1c:37:17:83:39:33:cf:dc:8d:d0:1a:
67:da:68:5d:c9:03:a1:cd:d8:e1:7f:f8:bb:05:c2:
b4:62:12:7f:ff:c3:52:51:fb:64:5d:32:dc:bb:7c:
5f:19:8f:c9:ae:de:fe:b9:a9:4a:8a:b0:40:52:11:
a5:a2:bf:65:70:8f:c6:ce:5e:64:9a:f1:f7:0d:1f:
04:71:d0:34:29:54:e3:be:11:22:c4:64:f3:ae:bc:
ff:21:11:75:d0:75:35:4c:aa:91:40:8b:fb:6e:96:
3d:49:8d:8f:eb:b8:68:c9:b5:d6:91:d4:bf:ab:e1:
66:af:d2:fd:53:4c:15:f0:d4:68:7c:a8:22:10:97:
85:db:c0:e1:e8:80:e9:07:1c:64:ed:02:00:49:a4:
ea:6a:f2:41:c0:2d:fc:04:ad:8c:19:67:76:05:02:
6a:d8:ea:ec:e7:31:38:74:4d:b7:ca:04:f6:3e:e1:
0c:b3:46:99:11:5e:9f:9c:51:e1:47:40:fd:ed:7b:
31:87:68:71:ab:c1:b5:c0:ff:ef:46:7a:71:95:1c:
58:e2:04:67:a8:ee:3b:41:f9:e4:45:3b:df:15:e7:
bb:1f:2b:d1:a2:18:13:08:19:c7:65:28:d7:ab:55:
5f:e6:89:af:9e:33:d9:77:ee:45:0f:48:61:3c:7f:
1a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:DD:AA:E3:50:FA:E0:DA:7E:2D:45:AF:D9:90:5C:94:B8:55:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F20A3DDCD4B411EFB613FB45762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.191.0/24
Signature Algorithm: sha256WithRSAEncryption
13:8b:32:62:7e:47:ec:16:42:ee:f2:ac:83:bf:6a:4e:e8:17:
40:fa:db:75:61:81:d0:4e:07:d5:eb:9d:04:85:5e:be:4a:73:
5b:a8:2e:35:10:db:16:9f:d3:ed:3d:68:76:6a:45:ae:60:4d:
4e:cd:16:ec:b0:cc:e9:f3:1c:ec:dd:49:fe:cd:7a:29:43:18:
15:b8:49:af:13:85:b4:25:37:84:95:00:ac:75:15:bf:a4:43:
26:93:94:87:50:ea:ff:b8:a8:63:54:0c:49:80:ac:4b:64:b5:
e4:aa:3b:68:76:a3:85:d6:c3:5e:bc:3f:97:d5:9f:c0:d0:1c:
1d:51:52:5a:f2:e5:fc:c1:a7:06:1d:6d:e8:e1:b7:56:96:b5:
e2:49:14:8a:1a:53:1b:85:90:db:05:a6:52:22:84:cb:20:c5:
33:b7:34:77:5a:b0:65:ad:8e:bf:79:01:bd:f9:07:a1:a0:b7:
4c:6a:ff:a5:b5:a9:09:06:09:b1:17:4f:cd:5c:4f:09:0c:30:
c5:19:3e:ec:c4:7d:06:d1:9a:8b:d9:3f:dd:57:c6:60:f8:df:
a1:7e:05:b7:db:db:d0:18:11:be:ad:0b:22:67:f4:e6:dc:39:
07:6c:e9:a5:ba:4a:0c:0a:82:36:e7:a4:29:4f:f8:2e:27:62:
94:99:f6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:38:10 2025 by rpki-client