Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/757219FCB6CD11EF8F0F66BB762E951A.roa
File: 757219FCB6CD11EF8F0F66BB762E951A.roa (raw, json)
Hash identifier: 6q/YAG4gZVTQGImQPn/wRmZpquPumDqRufYyl6OfaGU=
Subject key identifier: 1E:C5:94:1C:9F:71:D2:1F:7D:EA:D4:B7:1B:99:08:AE:95:14:9F:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011A34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/757219FCB6CD11EF8F0F66BB762E951A.roa
Signing time: Tue 10 Dec 2024 08:05:03 +0000
ROA not before: Tue 10 Dec 2024 08:04:59 +0000
ROA not after: Mon 15 Dec 2025 08:04:59 +0000
asID: 140227
IP address blocks: 154.205.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72244 (0x11a34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 10 08:04:59 2024 GMT
Not After : Dec 15 08:04:59 2025 GMT
Subject: CN=6757f62f-7959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:52:f1:66:d7:5d:70:26:0f:fc:c5:cb:9b:
79:79:7c:98:e4:62:7b:ce:cb:43:c1:c2:f3:ce:e2:
0a:48:d9:29:65:44:51:48:1b:3d:bf:82:77:19:e2:
1f:10:cc:2f:be:a7:32:ea:02:3d:92:d4:3e:51:ff:
95:fe:86:42:d5:e2:d0:75:7f:70:1c:79:b8:47:e1:
58:db:c8:a3:dd:8f:7b:48:0f:1f:27:4b:65:4a:49:
a9:19:f2:db:45:c8:f0:9c:f5:cd:11:b0:27:9f:65:
6c:68:15:c9:47:c7:25:f5:76:05:fc:f0:16:f2:d2:
fd:12:45:e7:72:cd:b7:8e:9c:05:09:fb:f3:2a:0f:
05:e3:a1:55:e1:9d:14:97:d2:0c:4c:09:95:bc:cb:
9c:25:59:5d:b3:e0:cc:e4:b7:58:f5:de:c2:8f:07:
8b:f5:d5:69:87:be:99:b0:61:7f:8d:e5:43:ec:96:
2e:50:2b:63:5e:2b:a5:5b:77:38:3e:8c:49:a0:d0:
ad:8a:9d:33:14:94:88:de:a1:6f:a1:4a:55:f2:6d:
33:a2:8f:32:ff:01:61:f1:d3:62:68:72:3c:e6:12:
18:26:44:9f:8e:36:c9:c0:7a:4b:dd:c5:f5:54:c7:
7b:3f:f7:04:0c:a8:fd:cb:35:69:0a:27:b7:56:c4:
1e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:94:1C:9F:71:D2:1F:7D:EA:D4:B7:1B:99:08:AE:95:14:9F:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/757219FCB6CD11EF8F0F66BB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:5b:8d:47:2b:7f:7b:24:a8:5c:1d:7c:30:2b:72:16:14:d1:
3e:91:12:5c:41:30:17:e4:1c:2d:26:19:1f:27:18:5e:e8:dd:
80:e5:e3:83:21:b1:fe:48:dd:3f:fe:05:ef:55:7a:e9:81:4d:
d0:06:56:fd:df:7e:09:19:34:2e:45:c3:1a:2a:13:cb:0a:4f:
e9:b5:ce:13:96:38:40:14:b9:15:0a:ae:79:41:d4:ed:78:e1:
da:b2:e6:52:f6:23:d1:02:05:31:15:ee:1c:4b:d8:02:dd:f8:
ef:c1:60:8a:20:4e:3e:26:e0:7e:ca:9f:e7:41:4a:f4:b4:62:
21:3b:c6:1a:7b:bf:7d:5a:0e:6e:fe:2e:56:b6:cb:64:0b:8e:
46:9f:4d:4b:7e:50:5d:c2:f9:9d:e7:43:a4:fb:48:e7:ab:59:
7a:1f:73:df:47:44:65:d8:66:8b:1b:2e:dd:58:0a:32:47:af:
1a:4c:37:84:0d:18:4f:3e:fa:7e:e6:19:d0:6e:42:93:f8:6f:
8e:ac:0a:bd:13:e0:cb:4c:6e:82:da:d6:3d:f4:a0:73:f1:f0:
20:47:21:c4:3f:86:8d:1b:24:8e:0e:99:55:f3:1a:c9:cc:ca:
6c:55:dd:84:bf:d7:19:b0:89:e0:f1:a4:94:c5:f6:20:27:ef:
bf:fc:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:58:38 2025 by rpki-client