Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56B92F7EDB1611EF92802894762E951A.roa
File: 56B92F7EDB1611EF92802894762E951A.roa (raw, json)
Hash identifier: eDvuQOB4VtBAi3XnbBu4u3sxU2Opu6XVnsG7o13w2MA=
Subject key identifier: 0D:3D:24:F9:2F:27:57:E5:4E:AE:AE:B8:83:10:93:35:4A:8B:14:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01493A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56B92F7EDB1611EF92802894762E951A.roa
Signing time: Sat 25 Jan 2025 12:17:26 +0000
ROA not before: Sat 25 Jan 2025 12:17:21 +0000
ROA not after: Mon 02 Feb 2026 12:17:21 +0000
asID: 132839
IP address blocks: 154.213.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84282 (0x1493a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 25 12:17:21 2025 GMT
Not After : Feb 2 12:17:21 2026 GMT
Subject: CN=6794d656-2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:d2:32:8e:0d:63:36:9c:b2:62:0f:9f:85:
7c:8f:9c:5c:91:d7:ba:5a:7d:82:52:ac:24:69:d5:
72:29:e7:e8:7b:d7:ce:7d:4d:ca:34:43:c1:0b:e7:
fd:67:6f:5e:64:af:1e:0f:b8:79:ac:b3:fe:8a:62:
9d:50:cb:b3:29:41:bc:a1:d2:52:1f:7b:89:30:07:
60:92:cb:27:e1:fa:af:37:a9:bd:b6:fb:b7:11:62:
68:74:5e:b6:69:af:a7:fb:8e:fd:18:77:8e:32:19:
01:7b:05:cd:ca:bf:8f:e8:aa:80:4e:9a:a0:09:9e:
e7:8e:32:5d:7c:89:00:e9:e6:d4:f2:24:c0:69:41:
eb:01:80:b3:42:17:e3:c6:f3:89:94:89:9d:b2:db:
01:4a:dd:f7:fa:b3:e7:13:07:58:a1:0a:65:eb:a4:
60:f2:3f:f2:1e:43:74:ac:c7:66:5e:97:79:b3:bc:
7b:27:c9:d8:38:b3:44:44:73:7c:2d:8f:f1:3f:dc:
54:99:8d:b7:7b:ea:36:b8:98:43:7b:d4:0a:17:d9:
b8:30:2b:2e:ba:5a:8c:cc:c9:8c:7e:7f:e0:7b:4f:
de:f5:56:79:62:ef:94:74:e2:d9:0a:38:96:9c:57:
7f:85:7b:53:a8:2d:87:1d:c3:6d:c9:18:ed:a0:40:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:24:F9:2F:27:57:E5:4E:AE:AE:B8:83:10:93:35:4A:8B:14:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56B92F7EDB1611EF92802894762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.224.0/19
Signature Algorithm: sha256WithRSAEncryption
29:03:72:d6:b2:53:36:74:18:3d:42:a6:e9:eb:9f:5a:49:9c:
7e:f9:f2:51:64:1a:8b:6a:b7:d8:25:9a:c1:7c:71:05:1c:8f:
e8:76:4f:e8:ff:e0:e3:20:69:11:05:2c:83:75:61:d2:b6:f5:
9c:01:3f:d5:14:8f:4f:fa:7f:91:35:1d:0d:56:9f:be:9a:a6:
bf:74:2a:bc:eb:a3:df:72:04:ec:95:1d:be:13:95:95:ed:75:
3f:ff:3d:a1:37:f0:32:4b:94:d2:45:ef:e9:f3:cd:dc:1f:e7:
e0:54:6c:8e:fe:a7:72:36:60:a1:60:a5:51:ce:39:26:7a:45:
00:ac:96:1d:04:eb:cb:b2:25:a4:ca:9e:81:14:af:67:fe:5d:
48:83:98:be:37:c1:68:26:ce:58:46:18:0c:90:01:6d:57:90:
7e:c4:90:ac:d3:56:08:33:57:01:61:46:33:7c:3b:ec:be:93:
44:2c:b0:89:6b:4b:c8:c6:1d:ec:1b:c4:8a:6b:56:66:84:9f:
28:54:a9:8a:0c:45:f3:54:d4:81:44:5f:88:51:7a:02:31:ff:
2e:b5:23:cf:8a:e9:5f:94:9a:15:ad:f0:11:49:9c:c7:fa:67:
5d:65:07:c3:ce:f6:cd:0e:77:48:64:60:bc:16:73:68:2b:bf:
0d:b4:58:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:20:46 2025 by rpki-client