Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19FD57D8C26911EF94DDE65D762E951A.roa
File: 19FD57D8C26911EF94DDE65D762E951A.roa (raw, json)
Hash identifier: wtfsWtka644RFK+5VmjGu+QIuDPtLH3jg4NOHC3eTsM=
Subject key identifier: 40:80:83:C1:1B:C8:97:B8:93:1B:75:1C:36:ED:81:DF:5C:6D:98:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01240C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19FD57D8C26911EF94DDE65D762E951A.roa
Signing time: Wed 25 Dec 2024 02:36:53 +0000
ROA not before: Wed 25 Dec 2024 02:36:50 +0000
ROA not after: Wed 10 Dec 2025 02:36:50 +0000
asID: 984
IP address blocks: 154.211.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74764 (0x1240c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 02:36:50 2024 GMT
Not After : Dec 10 02:36:50 2025 GMT
Subject: CN=676b6fc5-d8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:56:f3:57:e0:c8:cf:e2:f8:06:eb:08:f9:
51:cc:47:f2:9b:df:08:40:a2:6f:9e:1b:5a:17:46:
e9:07:c9:16:27:8d:64:72:87:62:96:ab:8b:06:11:
c4:ec:79:e2:8c:60:80:64:98:c5:64:c0:12:2b:2d:
42:be:96:5e:9b:80:a8:e7:41:36:d7:94:32:6c:16:
a8:3a:bc:aa:de:58:f2:45:25:0b:a3:69:46:2e:c2:
55:cd:e4:87:c7:cb:da:f4:9a:6c:6c:d5:d4:c9:2a:
43:2d:cf:4a:5a:66:3f:45:81:e6:f9:a0:b6:5b:93:
85:95:cc:06:d8:35:f1:34:e1:42:6f:17:28:c3:ff:
e9:99:cb:c5:c5:91:4c:4b:38:66:fe:5e:a5:dc:36:
fe:b4:bd:37:2c:30:a4:99:22:2b:42:b6:f8:64:30:
7c:2b:7b:3f:eb:38:38:4e:51:7d:03:7c:2f:a6:88:
e1:c0:c7:58:73:16:b3:3b:55:20:84:7a:27:09:04:
e9:1c:9e:cb:f3:b3:7a:a0:43:83:6d:19:32:fd:0b:
f9:7d:97:0d:49:b0:8a:8e:62:05:96:30:44:54:74:
e4:6e:cc:64:ef:95:48:d0:79:9b:ba:c0:e7:68:ec:
f2:3c:08:0d:72:2b:e2:30:87:60:3a:ad:59:9a:bb:
00:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:80:83:C1:1B:C8:97:B8:93:1B:75:1C:36:ED:81:DF:5C:6D:98:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19FD57D8C26911EF94DDE65D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.146.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e1:a8:b8:83:9a:0c:2c:65:b5:e1:f3:57:7b:bc:f2:a6:37:
74:d8:cb:14:f2:e0:f3:40:42:76:7f:e3:86:24:fc:03:7e:38:
f1:12:c5:2f:f2:b4:b2:6d:ed:cd:98:a8:59:9f:a7:75:4e:8e:
16:bd:cd:51:09:b6:2f:b5:ba:6b:04:c4:2c:4f:e8:69:b8:9c:
64:38:65:2f:27:97:eb:ca:c2:f8:a4:ca:45:75:6a:9c:8d:36:
82:df:4e:5d:cb:b8:76:6e:b4:43:d8:85:b5:96:05:92:68:f3:
db:42:97:4e:67:47:3d:e7:29:ed:1d:76:e2:76:09:44:db:8f:
c5:c5:ab:3e:39:4a:01:1b:cc:0f:13:da:bd:6c:3a:32:72:ef:
d9:5a:f6:8e:54:3e:23:80:42:0b:e0:af:35:d6:56:6e:ac:8c:
a8:e6:be:7e:1f:54:9c:7f:0f:28:9b:e6:1d:93:03:19:5a:49:
19:59:77:d7:fb:37:51:88:47:f4:c2:3f:76:58:ff:fd:5d:0b:
65:45:bf:ff:44:75:f2:b6:73:92:33:b2:82:f5:76:ac:a4:28:
8b:59:f7:6b:ff:3d:4d:1e:76:4b:7c:36:af:51:bb:f0:62:38:
d4:b4:cf:fa:c2:88:98:54:49:c8:67:27:7a:ae:f3:9f:cc:2f:
64:6a:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:21 2025 by rpki-client