Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA219F6CCDD411EFAB52AA7C762E951A.roa
File: DA219F6CCDD411EFAB52AA7C762E951A.roa (raw, json)
Hash identifier: Xrr7Xaq7GT094Cfyy4IjuERDYVn2bdcp4LnipNA0/i8=
Subject key identifier: 68:3D:C8:97:37:E9:D6:B8:DB:96:AD:BA:8C:7D:E8:C3:48:CB:2E:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013761
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA219F6CCDD411EFAB52AA7C762E951A.roa
Signing time: Wed 08 Jan 2025 15:25:55 +0000
ROA not before: Wed 08 Jan 2025 15:25:52 +0000
ROA not after: Mon 03 Jan 2028 15:25:52 +0000
asID: 17561
IP address blocks: 154.88.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79713 (0x13761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:25:52 2025 GMT
Not After : Jan 3 15:25:52 2028 GMT
Subject: CN=677e9903-9606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:46:b8:95:72:23:86:a8:5d:b7:4b:8f:8d:
af:7c:d0:3b:0f:51:68:fe:99:eb:a0:cb:b8:1a:f4:
bf:d9:c2:84:74:58:c7:00:3b:74:77:69:b6:5a:8b:
7d:3b:81:28:41:06:29:c7:34:f2:6a:11:ee:48:f0:
8f:19:a4:b0:00:a0:26:20:f7:c8:b7:f9:41:c3:62:
ec:56:24:4f:63:cc:51:1c:05:22:9f:46:83:28:74:
e5:cc:50:e6:ea:b2:88:55:58:76:a2:d7:3c:dd:e0:
61:58:f7:62:51:46:06:32:1f:90:15:9f:20:77:1f:
68:d1:59:c5:e8:b0:1e:ac:df:c1:76:66:09:3b:34:
9c:a9:73:c3:94:15:f1:a7:cc:ce:d4:53:81:4c:20:
f1:68:38:3e:e3:69:0c:a5:15:ed:3c:3d:6f:93:3b:
43:95:b2:b1:43:c9:53:59:2c:5b:10:04:76:41:0f:
86:eb:57:cd:fd:18:33:7e:67:2b:ac:d8:8a:e2:19:
a3:8c:48:ac:97:23:91:ba:1f:f5:06:f0:46:1b:cb:
91:9c:c7:af:6d:e8:24:e4:ce:09:3f:61:89:01:e5:
6a:f8:bd:4d:a4:30:bb:35:23:0b:b1:6b:ab:77:c7:
4c:2d:a1:d7:97:a7:61:96:1c:44:e3:80:b6:85:b4:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:3D:C8:97:37:E9:D6:B8:DB:96:AD:BA:8C:7D:E8:C3:48:CB:2E:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA219F6CCDD411EFAB52AA7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:53:03:12:f6:98:0f:71:42:48:2a:c6:e0:ea:24:51:d3:3f:
54:79:20:6d:cf:69:97:4b:9d:0c:1f:86:3b:1a:ff:82:44:20:
71:7e:4f:34:4a:b6:07:24:88:95:1e:13:96:92:d1:aa:76:56:
a5:94:df:c4:f2:dd:f3:45:91:74:93:85:3c:45:46:4e:77:b6:
3b:39:67:16:7a:dc:13:0e:2b:2d:03:cf:1f:9e:79:40:ee:4d:
c7:bf:76:5f:3c:5c:8f:83:92:32:14:20:cf:91:db:4c:40:56:
dd:b0:0b:01:7d:2d:30:7d:0b:e7:a2:e2:e4:35:95:65:1d:49:
31:1c:ba:9b:cc:4c:b7:1e:78:22:1d:b6:9b:53:a6:9b:4c:ef:
c8:f6:22:69:3e:62:54:dd:cb:a6:f4:7e:9c:86:cf:f5:ac:fe:
2e:77:b5:08:f6:65:7e:2e:f5:ee:f3:5f:51:5d:33:79:1f:c6:
9c:cd:b8:17:a9:78:52:65:c5:3d:60:78:87:11:d5:f5:40:90:
81:d1:54:df:87:42:f4:5f:3a:31:e1:c2:dc:04:0c:2c:ad:78:
7d:e3:c2:72:ed:97:ff:c1:67:03:c1:88:39:04:c7:d4:3c:0a:
e1:9a:e8:fd:17:93:02:0e:6c:bc:12:df:ba:0e:88:ca:fb:55:
f3:b1:73:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:17:36 2025 by rpki-client