Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11E5BB8804BF11F0B4495E41762E951A.roa
File: 11E5BB8804BF11F0B4495E41762E951A.roa (raw, json)
Hash identifier: PB+fbgUDEdi0uymf9t7M4OobDlZWWxjVlIKNfNL/aAc=
Subject key identifier: DF:E5:EF:18:C3:DE:C6:9B:25:50:F9:B2:31:7A:45:46:77:3C:A9:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01750C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11E5BB8804BF11F0B4495E41762E951A.roa
Signing time: Wed 19 Mar 2025 12:38:33 +0000
ROA not before: Wed 19 Mar 2025 12:38:29 +0000
ROA not after: Sun 27 Apr 2025 12:38:29 +0000
asID: 395886
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95500 (0x1750c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 12:38:29 2025 GMT
Not After : Apr 27 12:38:29 2025 GMT
Subject: CN=67dabac9-1f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:00:9d:e2:02:9d:d5:78:1c:52:51:3f:84:
b9:e8:ff:aa:ee:e7:1c:d4:5d:a4:2d:40:b1:6c:7e:
3d:cb:99:a5:ea:30:b4:71:9d:ce:89:cd:2d:da:7e:
c9:2e:6a:5b:70:02:cc:fc:0a:67:e8:6a:d7:d7:b6:
2a:32:81:98:a4:ef:4d:51:3b:6d:64:4f:9b:1d:05:
93:ba:31:51:13:17:fb:49:a8:04:44:ba:96:ff:eb:
2d:15:d8:c2:ba:ab:52:74:f9:20:7a:e1:94:5b:52:
d8:15:63:68:1d:f4:e6:c1:f6:08:14:5a:36:df:46:
4c:b7:ce:43:c5:12:62:bd:1c:8b:02:10:86:d8:42:
f5:43:52:b8:4d:b0:aa:ec:4a:07:a8:b6:8e:34:4d:
b4:32:13:a9:86:38:ab:04:96:8b:8d:c4:2a:ac:d6:
d1:28:68:8c:7d:3f:c1:af:31:32:cc:54:50:44:8f:
e7:ef:60:0a:e4:01:69:29:e3:99:48:fc:7e:d6:fb:
a2:8f:c5:c8:3a:6e:ca:ad:83:fd:5e:b1:bd:19:12:
d9:b4:d9:19:20:bc:f4:d0:3a:09:91:01:c2:f1:b5:
cb:15:cc:0d:e6:ff:a0:4b:87:90:61:e5:30:03:52:
db:e1:d7:9d:3f:5c:32:04:3f:92:00:51:ba:6e:7c:
bf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E5:EF:18:C3:DE:C6:9B:25:50:F9:B2:31:7A:45:46:77:3C:A9:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/11E5BB8804BF11F0B4495E41762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
26:6d:e7:ec:39:30:fc:6a:27:e6:e1:9d:84:66:a8:e3:50:d2:
04:39:04:df:8e:c0:9d:a1:72:32:0e:b9:72:2a:c6:4d:f7:6d:
48:21:86:8b:c3:01:fa:1c:82:e0:c6:6b:06:91:f3:99:b1:68:
f0:7e:7f:4c:0c:bd:69:07:16:68:41:a7:9f:62:b2:6c:05:74:
b1:f2:48:7f:0f:bc:72:28:1a:a8:9f:fe:4e:94:51:c2:42:dc:
77:27:48:3e:3b:04:91:7c:35:8f:0d:ff:41:37:de:0b:f5:24:
90:e7:98:a1:40:85:b2:23:31:29:d8:22:bc:f0:47:d9:aa:8e:
24:cb:26:b9:37:5c:57:e9:e3:d9:a8:71:3a:fa:8f:00:18:9c:
ee:99:d2:94:1a:40:8a:45:76:ec:60:3c:ef:87:be:fc:3b:90:
d8:7d:45:51:2f:12:f9:35:60:e4:8c:14:68:9b:47:40:de:b7:
12:37:e2:74:c4:44:4e:d1:d3:7f:ef:dc:85:36:6e:fe:25:26:
df:64:48:5f:46:ec:b3:46:2d:95:ea:33:05:4b:2a:af:cd:bd:
1a:1f:54:50:88:61:19:40:76:5a:b5:4b:1c:76:11:e0:44:0b:
4b:35:63:87:c6:bf:1f:ae:a5:cd:36:8b:ef:a3:4f:7f:e8:6a:
50:22:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:21:03 2025 by rpki-client