Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E50303F8CCD511EF8F55FE9F762E951A.roa
File: E50303F8CCD511EF8F55FE9F762E951A.roa (raw, json)
Hash identifier: s4p7+XEazDyvk2FGAe7UhB0PHA49qonH7orGyCLh2iE=
Subject key identifier: 49:75:D5:D7:B2:C1:03:25:F1:32:DE:76:2B:D2:4D:B6:A7:69:55:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01367B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E50303F8CCD511EF8F55FE9F762E951A.roa
Signing time: Tue 07 Jan 2025 09:00:51 +0000
ROA not before: Tue 07 Jan 2025 09:00:48 +0000
ROA not after: Mon 05 May 2025 09:00:48 +0000
asID: 132839
IP address blocks: 154.195.192.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79483 (0x1367b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 7 09:00:48 2025 GMT
Not After : May 5 09:00:48 2025 GMT
Subject: CN=677ced43-ed2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:79:1b:ae:bd:2b:bc:20:42:d6:8b:b8:1a:
36:e7:d9:bc:98:56:b2:3d:d4:5c:e4:03:8b:e8:6e:
db:2b:d2:fb:e9:e8:e5:17:6b:e2:23:c7:95:9d:db:
e3:bc:df:87:2d:30:60:31:94:e3:c4:d4:54:01:ae:
5c:bc:ec:62:d1:11:79:aa:ef:97:52:b8:51:be:78:
89:06:f4:12:be:99:4c:64:f2:cf:33:f1:31:df:26:
8c:08:5a:0a:e1:6c:19:e5:a1:8e:d4:b8:13:89:f3:
be:5b:8d:e2:68:20:56:fd:b4:66:f4:9d:6e:3b:1f:
a7:1a:d3:33:e9:c5:e5:e9:7f:78:60:f3:fc:56:de:
39:27:7e:5f:05:1a:d8:e2:61:fe:a0:e0:cc:a0:02:
19:15:30:0d:f9:e1:74:78:27:7c:04:9b:63:e2:57:
e4:9e:0e:2c:1b:0e:c4:c0:bc:f8:58:4e:4f:3c:f1:
df:20:d7:f9:d3:3e:2c:47:3b:1d:ea:2a:6a:90:58:
8d:3c:75:fc:a3:64:b6:33:91:b1:1b:12:0e:bf:ed:
92:b9:20:12:77:b9:49:60:c2:9a:3d:ac:7e:bf:31:
84:48:21:1b:20:b0:82:17:82:5d:84:18:7e:28:64:
9b:3b:18:e8:dd:a8:d5:ed:b7:e6:83:4a:53:ff:ff:
6f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:75:D5:D7:B2:C1:03:25:F1:32:DE:76:2B:D2:4D:B6:A7:69:55:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E50303F8CCD511EF8F55FE9F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:59:c0:1c:b0:3d:e8:22:4a:0f:51:f7:25:37:af:e4:11:a2:
4a:af:cd:84:1a:b3:9a:ea:7e:86:95:fd:cc:cb:b5:34:81:1a:
53:07:6c:f4:ba:8a:bb:77:35:bd:1d:75:c0:72:f0:94:64:e4:
24:a6:e3:76:ad:eb:4a:27:43:49:40:ac:20:ab:fe:97:c2:ab:
8f:ee:7f:55:d7:8b:8d:68:22:7a:dd:de:06:2d:e5:60:e2:14:
ec:a3:53:87:fa:7f:70:d7:97:b3:7a:ff:c1:f9:ed:67:76:03:
89:1b:72:4f:87:7b:f6:d3:9f:dd:aa:4d:e1:05:b3:2d:c5:07:
50:e8:e4:c1:f4:f8:46:be:20:37:10:78:a7:3f:cb:d5:6b:fa:
4c:4e:7f:4f:53:da:2a:24:59:98:65:a2:1e:88:f6:8b:75:2c:
3f:b3:a2:81:4e:7f:9b:29:b1:01:c2:01:9a:3f:80:7b:88:ce:
97:b8:90:11:c9:e7:f3:ca:76:55:bd:52:19:09:74:27:f1:20:
ae:cc:64:a0:65:de:e9:c4:bc:a5:95:c7:74:00:b7:c9:00:6a:
a7:65:68:ad:eb:45:f1:62:d9:69:50:5b:51:f3:e3:d6:c9:85:
c5:82:ce:dd:b3:61:64:a0:54:c7:7f:36:f4:2e:b0:db:9a:20:
ae:65:5d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:12 2025 by rpki-client