Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/013E0BF4DA3B11EFA4C4CB46762E951A.roa
File: 013E0BF4DA3B11EFA4C4CB46762E951A.roa (raw, json)
Hash identifier: pZN69SUBiVgfKlt/tkdzWPerBPrkHBbyqGVE8OhvOi0=
Subject key identifier: 48:C2:1A:A9:F1:73:8E:D6:C2:8A:F0:BE:C4:11:5E:B7:F6:0E:92:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014552
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/013E0BF4DA3B11EFA4C4CB46762E951A.roa
Signing time: Fri 24 Jan 2025 10:07:23 +0000
ROA not before: Fri 24 Jan 2025 10:07:19 +0000
ROA not after: Wed 05 Mar 2025 10:07:19 +0000
asID: 202656
IP address blocks: 154.219.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83282 (0x14552)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:07:19 2025 GMT
Not After : Mar 5 10:07:19 2025 GMT
Subject: CN=6793665b-d8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:ad:b3:c6:2a:e5:d1:23:63:3f:c7:80:d8:
c5:81:4e:f3:93:95:25:14:57:bc:f9:45:74:7d:6b:
f1:62:84:2d:13:48:57:9f:9e:21:0e:bb:3a:73:5b:
e5:3b:eb:e5:cf:a6:b7:3b:93:3b:dc:51:aa:ca:e6:
a8:b8:bb:69:31:c5:c0:4e:47:b6:87:3b:fc:6d:8e:
0d:cc:ea:5d:08:78:8c:81:1a:53:fd:ff:25:2f:bf:
ad:ac:85:b3:61:0c:67:c7:c6:ce:2f:ca:10:14:60:
c4:dc:11:39:65:c6:c6:6d:8f:b3:78:51:d0:df:a8:
27:08:df:bf:07:11:a8:17:e5:c1:35:61:67:be:20:
4a:fd:7d:7c:20:0a:bc:cc:af:ce:ce:b9:26:b7:1e:
ee:e4:19:39:8b:f0:86:41:5e:68:e9:84:e7:66:48:
24:07:61:d2:4e:71:8f:da:21:51:6b:a8:58:4f:23:
c7:dc:3b:da:0d:5a:5c:da:01:75:b4:d8:c1:4c:ba:
f6:79:75:76:36:ed:0f:e7:55:31:e6:79:70:56:9a:
f1:e8:5c:5e:28:d0:29:83:4e:9a:7f:b2:92:a7:14:
17:ae:44:b5:d6:0a:8d:18:40:ea:c4:21:7e:ad:f0:
5e:85:72:fc:25:5a:21:ef:b9:3c:35:f3:f4:ba:e7:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:1A:A9:F1:73:8E:D6:C2:8A:F0:BE:C4:11:5E:B7:F6:0E:92:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/013E0BF4DA3B11EFA4C4CB46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:9c:52:d1:3b:c1:78:e4:56:df:46:ac:b2:6a:74:b6:30:12:
a9:5b:17:5f:34:ac:95:27:5f:c0:f5:79:b2:62:b2:c1:17:3b:
de:0a:79:4f:e2:02:6c:d0:64:55:8f:13:44:ec:c1:9a:a6:76:
28:7d:6d:c3:a9:3f:f8:64:a3:c9:dd:96:14:35:51:64:da:6e:
27:8b:65:8d:9f:7d:ad:f3:f5:3d:b2:1c:76:68:4a:21:9d:0a:
d3:ca:5a:b4:f8:76:d7:02:82:fa:45:6a:b2:f4:81:8d:1a:d1:
ec:d3:63:30:53:af:83:0c:45:ae:20:19:3b:07:6f:c1:6c:4b:
13:ae:f2:66:8b:9a:cf:bf:df:79:56:e6:4d:f0:62:33:31:75:
20:3b:96:8c:54:d7:23:e3:bd:56:a6:f1:22:fb:58:94:1c:14:
50:39:ee:ef:4a:23:27:ee:f0:f4:83:3c:d2:53:3d:fa:88:69:
82:43:9e:f2:18:eb:17:43:1c:39:a3:08:a3:89:f8:2f:3c:85:
65:ab:0f:63:3a:51:93:ac:3e:68:5b:b6:ac:e2:87:1e:93:d7:
71:04:b8:d4:fe:f1:14:b3:43:db:8c:c7:9a:03:e6:72:b9:c5:
3c:36:f4:16:d2:e1:8d:e0:1d:36:a9:60:cb:a3:77:2f:c6:f5:
1c:f1:b9:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:38:16 2025 by rpki-client