Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A3713CDB1911EFA6926BAB762E951A.roa
File: F5A3713CDB1911EFA6926BAB762E951A.roa (raw, json)
Hash identifier: YZH01jTKl1GS1/Qdii1xgVqJw5IuIHUOFvcL/FmJ6J0=
Subject key identifier: 78:06:BD:05:FE:59:C2:85:B3:5D:3D:23:A7:46:11:EB:F6:C7:C0:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014952
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A3713CDB1911EFA6926BAB762E951A.roa
Signing time: Sat 25 Jan 2025 12:43:21 +0000
ROA not before: Sat 25 Jan 2025 12:43:17 +0000
ROA not after: Mon 03 Mar 2025 12:43:17 +0000
asID: 202656
IP address blocks: 154.219.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84306 (0x14952)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 12:43:17 2025 GMT
Not After : Mar 3 12:43:17 2025 GMT
Subject: CN=6794dc69-d7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ff:b6:b1:8e:34:5a:8b:7d:6e:f6:09:a6:f8:
87:ac:58:41:81:5c:35:10:f5:04:0c:f0:e4:74:ea:
f5:5b:e3:30:a8:6a:f0:7e:77:1b:2b:4b:54:94:ba:
0d:33:b8:a7:3f:4d:c0:92:fe:49:4c:ea:37:be:10:
a0:96:6b:6f:e9:ce:c0:f1:34:85:3c:86:34:8b:4c:
51:a3:3a:35:e0:1e:4d:da:8d:06:e5:92:90:5c:15:
7c:67:fd:5d:a1:ba:76:66:c2:2f:87:4f:91:59:c4:
69:72:7e:49:38:cb:6c:98:5f:04:77:57:af:06:ea:
c5:37:9c:9e:37:c7:2c:77:6d:3f:2b:69:c8:66:d2:
69:54:fd:f2:77:bb:11:97:81:d5:7f:11:be:42:21:
91:03:bc:f9:c7:34:40:86:5a:48:24:90:f6:ed:9d:
7b:29:89:7a:06:cb:9c:af:de:43:64:34:ce:92:ea:
0e:d5:c9:eb:db:cb:dc:f2:01:0c:e7:95:c3:95:d9:
f5:7e:b3:b7:76:64:63:ba:ec:d0:5e:e5:9f:05:10:
75:be:cc:04:d9:70:2c:62:f5:01:35:b8:2b:55:26:
93:da:b2:c9:3e:a8:9b:0c:a8:b9:ac:a0:64:5b:87:
3e:96:0f:3f:87:90:da:d3:ea:08:7d:d0:d3:2e:4c:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:06:BD:05:FE:59:C2:85:B3:5D:3D:23:A7:46:11:EB:F6:C7:C0:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5A3713CDB1911EFA6926BAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.232.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e4:c5:c8:de:a3:5d:b2:b3:57:75:f0:ea:f1:12:db:57:97:
87:2f:43:d5:b7:97:42:98:3a:94:2f:db:88:fe:b9:58:25:ad:
31:91:19:0b:21:b8:bb:a3:88:bd:29:af:c0:4b:db:7a:b6:4d:
3c:02:6c:ff:c0:e5:e3:fb:c0:1f:d2:5c:00:a1:40:40:31:40:
a3:36:61:53:13:02:1e:f3:bd:df:6a:c3:5b:5d:2e:d4:03:42:
87:35:15:bb:65:9d:95:c5:2b:71:39:14:2d:f3:9d:6f:7f:91:
f7:0f:2d:0a:27:ae:88:84:db:f9:58:a1:eb:75:27:03:81:70:
0d:a6:e9:d0:98:42:e6:2b:f5:c1:c3:b3:25:2c:42:b5:d7:41:
94:f4:9a:27:2b:69:d4:25:57:bb:aa:b4:d4:80:80:82:d8:d4:
be:da:86:5c:68:f8:f7:4a:c4:f1:04:6e:42:6b:9b:4c:17:a6:
80:dc:de:a8:cd:7c:86:aa:ff:6c:89:4f:d0:5a:f8:bd:e8:6e:
05:98:25:48:a6:9f:d3:d3:ac:47:c6:a3:83:fe:0e:bb:11:2d:
a2:b6:96:c7:1c:87:d2:83:96:0e:cc:1f:b5:3b:09:26:10:92:
fc:2b:95:44:22:88:19:95:6e:37:a7:81:fe:e9:47:3d:96:19:
e8:16:b5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:50:31 2025 by rpki-client