Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1979DD18F47311EFB7E7ACA9762E951A.roa
File: 1979DD18F47311EFB7E7ACA9762E951A.roa (raw, json)
Hash identifier: GnDNr+xD8vLk0GvEdGi3BZP3VvW2FimEYdp0HBCrqHE=
Subject key identifier: 19:C0:3D:58:60:D8:1B:3F:5B:B7:06:CE:6D:27:86:69:3E:E2:B2:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016572
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1979DD18F47311EFB7E7ACA9762E951A.roa
Signing time: Wed 26 Feb 2025 18:54:26 +0000
ROA not before: Wed 26 Feb 2025 18:54:22 +0000
ROA not after: Sat 19 Feb 2028 18:54:22 +0000
asID: 17561
IP address blocks: 154.218.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91506 (0x16572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 18:54:22 2025 GMT
Not After : Feb 19 18:54:22 2028 GMT
Subject: CN=67bf6362-8afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f0:70:33:5b:35:4f:ef:a2:df:b4:da:76:aa:
61:7e:ce:89:ce:a9:1d:6a:ab:55:b1:a5:9b:48:03:
f9:ac:4c:e2:05:18:7b:14:0d:5b:15:93:82:51:a0:
57:74:dc:02:7e:0d:8d:01:ea:2e:b6:39:8f:e8:ea:
68:7a:9f:57:30:2d:b9:c8:52:90:8e:22:1b:ed:16:
a9:b1:bf:d1:68:d7:d8:1f:54:19:ca:3d:12:f9:02:
c3:a4:4a:76:36:fd:08:75:b5:6c:36:12:3c:fd:11:
f6:6b:5a:8b:ae:75:64:7f:7c:50:f7:cb:f3:f3:93:
d4:82:7e:b0:be:ac:ed:ed:57:15:a2:e3:5f:79:34:
8c:33:b5:b7:f8:ee:0d:50:77:94:94:34:08:b8:b7:
65:1f:40:5e:3e:f1:5a:da:c7:c6:5d:10:b3:4b:45:
19:64:93:84:d8:1d:da:c5:b2:bc:be:65:a8:d2:52:
3d:fd:7b:36:d8:20:e3:18:df:7f:9f:1a:c7:5c:36:
8c:1b:3f:ee:1c:4b:20:3d:5f:55:f2:03:9d:3b:4d:
e8:d9:c9:9b:c4:58:cd:3d:52:0c:94:1f:f3:d1:a6:
75:a4:fa:d7:54:64:56:43:5b:65:7a:eb:4c:e8:50:
67:7c:98:17:d0:02:cb:63:b7:c1:ee:d2:fb:18:4b:
6c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C0:3D:58:60:D8:1B:3F:5B:B7:06:CE:6D:27:86:69:3E:E2:B2:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1979DD18F47311EFB7E7ACA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:24:b6:94:5a:45:05:cf:dc:c5:1c:87:35:60:ba:d4:eb:1c:
bf:64:7e:43:c3:6c:fa:b9:03:64:61:f6:a7:c7:53:be:b8:e4:
b8:23:f2:1f:b6:fd:5f:0d:85:83:bb:a1:a9:4e:d9:63:d1:45:
a7:f3:96:3a:d4:27:d7:93:08:63:f0:ea:a9:b8:fd:43:f8:01:
eb:bf:c7:8e:d7:c9:c8:2e:30:35:88:92:b4:6c:64:be:59:d8:
46:05:98:c4:cc:ca:83:be:b6:ba:bc:f3:ec:20:cf:0d:d1:02:
de:f1:95:8d:d8:92:d7:84:24:7b:ac:b2:a3:0e:33:34:0f:ea:
41:d1:d0:44:ef:8c:3c:c0:48:fa:82:42:42:f2:ce:b3:8d:85:
bc:52:29:ce:55:3b:bd:31:b1:67:ca:b7:38:95:8e:64:67:b7:
48:6f:c9:68:c8:75:ec:cc:f1:b1:1a:b4:6c:f0:20:cd:77:da:
70:e9:84:3b:06:f4:d6:87:7e:7f:ae:08:4c:5a:c2:92:f8:0b:
e0:5b:73:7c:b2:6e:97:d2:8f:df:bc:a9:de:be:c7:ac:66:d8:
82:9f:bb:6b:bc:83:4c:61:26:50:11:17:f2:c6:55:16:bb:ec:
e5:b8:2d:45:8c:03:aa:a5:93:6a:9f:09:d7:d4:39:2d:a3:2b:
ec:5e:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:04:10 2025 by rpki-client