Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5650CBED68011EFBFF6A487762E951A.roa
File: F5650CBED68011EFBFF6A487762E951A.roa (raw, json)
Hash identifier: INccgKqFQpL6Ec7pjs9gZq/Jv6ALwrKFTDTHpqESXtw=
Subject key identifier: D1:D9:28:66:97:89:50:AA:02:65:98:40:D0:39:AD:0E:31:D2:9D:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5650CBED68011EFBFF6A487762E951A.roa
Signing time: Sun 19 Jan 2025 16:18:03 +0000
ROA not before: Sun 19 Jan 2025 16:18:00 +0000
ROA not after: Mon 24 Feb 2025 16:18:00 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81405 (0x13dfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 19 16:18:00 2025 GMT
Not After : Feb 24 16:18:00 2025 GMT
Subject: CN=678d25bb-4b5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:5d:fa:95:9d:c1:2e:ab:97:2d:48:72:5f:
e9:6a:ae:ea:8e:45:75:fc:46:81:98:4d:d5:51:3b:
c1:80:c7:d9:2e:c9:d9:ec:ec:fc:9d:aa:14:f1:c6:
d1:94:fd:19:8c:38:1a:bf:1e:72:be:95:74:d0:c4:
4a:01:f5:e1:1e:5b:c1:4a:81:de:ae:23:39:23:d4:
f4:99:0d:bd:0a:f9:ba:b8:cb:37:26:6a:6f:d0:02:
6f:44:83:fd:b6:db:c2:53:f7:18:0a:d4:80:16:8b:
f9:2f:ad:51:01:32:21:c3:ea:86:82:92:04:c6:1c:
3e:cf:d3:66:e3:01:37:0a:be:f7:09:de:c9:ae:f0:
84:74:2b:26:aa:8f:17:de:c5:09:59:c8:f7:64:c6:
d3:cc:26:57:17:29:18:50:d0:a4:07:15:c3:ef:82:
27:88:66:f8:c7:0a:7b:ad:65:bd:dd:f6:c7:fd:10:
96:48:70:3d:58:e2:21:80:98:16:03:4e:29:c3:98:
31:4d:89:4c:fa:6e:70:a0:a9:74:7e:d0:67:ea:74:
eb:aa:6a:09:5e:0c:0e:8a:64:c4:26:55:f6:b5:78:
49:7e:bb:6b:4d:3d:e5:63:f3:83:48:73:0f:e0:64:
79:20:5a:cb:d2:b6:b0:1f:ad:7b:80:b6:94:a3:02:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D9:28:66:97:89:50:AA:02:65:98:40:D0:39:AD:0E:31:D2:9D:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5650CBED68011EFBFF6A487762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1e:d1:01:40:be:5b:29:8a:f2:e7:51:0e:9f:00:02:9c:c5:
38:dc:c4:30:8f:d6:3a:35:14:ba:ee:5c:4a:88:fa:cb:71:47:
33:a5:f4:05:0f:ea:e6:bd:3c:ee:6e:17:19:44:59:44:c9:8a:
07:08:67:51:4a:37:15:33:4d:e3:94:cf:f5:dc:90:b3:3a:69:
68:39:a2:34:e1:f7:6a:ac:7a:f1:eb:97:df:e9:1d:df:b6:87:
af:b3:32:45:05:c9:28:ba:ad:cd:ae:64:a9:d4:16:2f:63:4e:
5b:49:b0:7a:6b:b2:4c:80:25:0a:51:2d:ab:03:b6:e9:be:99:
3a:ab:0d:f6:3b:cc:7a:3d:8a:4d:25:27:9f:d3:ee:8c:2e:45:
1f:e0:44:82:66:f3:09:15:81:b3:d7:ec:e8:23:6e:3b:a7:9c:
80:23:8a:a7:81:43:34:e8:22:f0:cd:ee:a6:bd:10:95:fc:a2:
bb:c2:2f:d0:3b:87:b2:35:99:b7:41:77:97:7d:2f:47:d5:c2:
df:be:7f:9c:7b:58:49:3b:1b:ca:4b:9a:49:16:66:24:67:b0:
16:e9:53:f4:ad:c2:a3:5e:41:50:7e:9f:1e:69:0d:c6:a9:2d:
db:78:41:70:91:88:4b:96:ae:fa:a7:da:88:18:7b:de:d1:fd:
94:e1:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:14 2025 by rpki-client