Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBED5B5004B311F0981E397C762E951A.roa
File: CBED5B5004B311F0981E397C762E951A.roa (raw, json)
Hash identifier: CtaHxyIdHD8uwYrKHJt+4xvFMR/U5rcqHFDYaXW52r4=
Subject key identifier: 46:F4:F0:CD:99:10:F4:69:33:1C:AD:8D:C0:84:FE:50:03:B4:A2:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0174FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBED5B5004B311F0981E397C762E951A.roa
Signing time: Wed 19 Mar 2025 11:17:51 +0000
ROA not before: Wed 19 Mar 2025 11:17:48 +0000
ROA not after: Sat 26 Apr 2025 11:17:48 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95486 (0x174fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 19 11:17:48 2025 GMT
Not After : Apr 26 11:17:48 2025 GMT
Subject: CN=67daa7df-001d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:ab:ae:48:8f:01:4b:b9:f4:34:cc:05:27:
27:77:91:1f:97:79:b7:fc:28:8b:9a:57:2d:d9:0f:
78:9a:b9:6e:bb:6c:cc:93:18:4d:67:07:29:27:db:
f4:28:16:d2:9f:e0:a5:24:9e:e9:1c:b5:73:1e:a9:
76:c6:a0:8b:b4:f7:32:1d:15:6d:af:f5:06:d9:e8:
96:16:3c:e5:7d:7a:00:9d:fd:48:74:71:5a:08:5f:
7d:2c:34:59:fc:d5:2a:fc:26:e8:9d:a6:ec:01:9a:
3c:57:d6:f7:02:1b:d3:6f:1e:20:0b:8d:38:fa:56:
3e:06:1e:10:d9:c4:a2:6f:a0:06:db:33:cf:c7:80:
1e:23:3e:0e:50:e9:76:d9:a2:82:68:90:bb:98:c9:
ab:2b:dc:32:37:31:bf:5b:83:40:05:e7:88:97:b5:
f7:31:55:57:69:a2:c1:fc:b1:88:73:1c:c9:a6:52:
55:0d:97:00:ee:a8:33:6d:47:b1:86:1a:db:45:7e:
b8:be:7e:ac:ee:5c:ab:6e:0a:8b:0c:15:0d:e0:c4:
d8:4d:1b:02:8b:61:aa:cc:e6:1f:77:69:c6:da:f8:
e4:1c:68:62:eb:bc:b1:4c:dd:c0:09:06:ec:d2:0e:
2d:01:3e:9f:fa:02:9c:8a:2d:2b:34:45:55:20:a0:
d1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F4:F0:CD:99:10:F4:69:33:1C:AD:8D:C0:84:FE:50:03:B4:A2:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBED5B5004B311F0981E397C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5d:a1:64:16:8d:c4:9d:65:55:9c:80:28:d3:b7:ec:e3:ee:
50:ce:12:f6:b9:21:b9:fb:aa:d7:51:e1:bb:56:e4:1d:5c:68:
28:ed:3e:c7:59:a7:9e:bf:51:ba:63:8a:c0:96:23:9b:c9:cd:
b8:1d:88:b0:30:c8:a0:6f:23:05:e5:3a:b2:74:de:81:74:41:
ff:f7:59:18:a4:38:e5:68:18:f0:f6:5f:21:ef:b9:01:81:2c:
ce:60:39:f9:dc:d4:13:1b:3a:fa:ae:ca:f6:6b:fa:15:cc:7b:
9f:77:3d:9d:58:3a:9f:6e:27:a7:ef:35:e2:12:8a:2b:48:28:
c1:07:08:68:f3:f1:a2:dc:a1:3a:bc:4c:36:c2:2c:9b:cc:38:
5f:26:e1:45:8f:68:5d:aa:91:a3:6c:86:4b:60:18:a6:cf:0d:
98:b3:43:8e:43:b3:14:5f:03:80:db:8a:06:8f:0e:f0:48:1e:
d9:21:1c:83:8c:cf:66:28:48:07:c2:5b:ef:1c:dc:9f:79:fc:
50:d7:ff:e0:73:1e:ac:20:25:c3:ad:9e:b6:59:89:0f:f1:a3:
34:a4:7d:db:0d:b2:9a:d3:20:e5:f8:d2:cf:ec:56:03:cc:15:
37:17:b6:94:57:0b:f2:af:86:6f:d0:0a:95:26:81:9d:c8:a5:
0b:6b:8f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:43 2025 by rpki-client