Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D96CC6F83411EF858E9F57762E951A.roa
File: 57D96CC6F83411EF858E9F57762E951A.roa (raw, json)
Hash identifier: qwfh26jak+cwey0PAdddLHQigDRQL94U/8uHDEu+kF8=
Subject key identifier: AF:4E:B8:55:06:F4:AF:4F:6A:94:CD:87:DC:61:EB:B1:85:2D:09:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0170D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D96CC6F83411EF858E9F57762E951A.roa
Signing time: Mon 03 Mar 2025 13:35:17 +0000
ROA not before: Mon 03 Mar 2025 13:35:13 +0000
ROA not after: Sat 05 Apr 2025 13:35:13 +0000
asID: 396073
IP address blocks: 154.198.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94421 (0x170d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 13:35:13 2025 GMT
Not After : Apr 5 13:35:13 2025 GMT
Subject: CN=67c5b015-46b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:41:79:1a:43:d4:f4:46:11:6b:27:29:58:
b9:fa:41:64:51:4c:94:f3:df:12:8b:a3:fe:a5:06:
0a:55:28:e2:dc:f9:14:d9:d0:f2:9b:2b:6a:fb:5a:
f5:6c:21:99:ba:0c:76:a1:6a:f9:12:d6:3e:b6:07:
fa:5b:89:68:94:fd:1b:2e:11:ec:b6:a0:44:b6:56:
8b:c6:b7:c4:1d:c8:4c:c5:4f:39:62:25:ca:d4:48:
5a:58:80:96:83:32:f4:7a:2b:1b:0f:3c:30:7b:1c:
e1:7e:77:72:17:f5:2c:0e:b4:fc:e0:0e:2b:36:fc:
c9:20:8e:49:b2:a9:b3:3a:19:d6:63:8d:3a:8b:80:
3b:da:39:c6:ec:e6:dd:4b:8b:aa:14:1c:83:35:63:
79:61:3b:a6:3f:8a:40:c5:3b:ef:ad:3a:0f:33:76:
5c:22:5d:1f:f0:cd:87:e1:8a:67:2b:63:fc:1c:dd:
79:20:a5:e3:90:ea:43:30:0e:8a:7d:bb:dc:8c:48:
fd:0b:10:1d:1a:8d:05:06:e3:ba:df:7f:e8:40:1f:
06:81:2c:6b:44:02:55:6a:6e:69:f0:5d:18:45:34:
ac:2a:75:d1:1f:8e:8b:45:ee:31:7a:b7:ff:85:28:
49:50:09:6b:20:a7:49:90:d2:88:7e:fb:02:36:a0:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4E:B8:55:06:F4:AF:4F:6A:94:CD:87:DC:61:EB:B1:85:2D:09:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57D96CC6F83411EF858E9F57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e1:d6:5a:eb:48:a8:f3:a5:22:21:d4:7a:b8:4f:4f:9e:8a:
12:39:9e:ad:94:e9:4c:cf:3d:d1:93:c9:05:3f:72:81:b2:38:
31:35:e5:a5:77:6f:c8:45:67:11:e6:37:e2:16:cc:80:4d:8f:
7a:99:ee:8b:1a:33:85:36:87:35:ae:7c:bb:7c:9e:9f:f4:50:
14:26:83:e7:24:c1:27:c1:60:66:4d:f0:40:d6:bf:53:a1:37:
52:5b:d3:40:a2:2d:53:fa:13:c5:69:ef:36:e9:37:a5:66:8c:
a8:35:06:a1:f8:b2:aa:aa:8e:85:b5:ed:d5:ff:98:72:6c:3b:
ac:d6:b3:59:bf:b5:02:f2:c7:c3:ee:58:90:40:5a:b3:5e:ee:
e2:e0:ca:2c:ec:dd:2f:ce:28:83:73:01:98:78:84:1d:86:cc:
f2:0a:54:82:a8:6a:02:2c:e5:3e:98:cf:46:51:10:67:5c:b5:
52:0b:db:37:65:dc:35:26:64:4e:2e:f2:eb:79:03:dd:77:c6:
d3:6b:b8:0f:c6:50:a8:ff:d3:9a:46:77:f5:cd:bc:77:56:87:
23:f9:1b:56:1d:08:6a:24:5a:f4:d9:a2:f1:1a:50:94:a2:73:
bc:3e:42:de:c2:e8:6f:4d:ea:b8:05:f4:2e:57:f1:4a:98:57:
c0:d8:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 07:23:45 2025 by rpki-client