Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/221E75DCDA3811EFAB63BBB0762E951A.roa
File: 221E75DCDA3811EFAB63BBB0762E951A.roa (raw, json)
Hash identifier: h7OLG3NKp/TKCFB1KJB9Eg2VOBKBLr41u2Xp6EErptY=
Subject key identifier: 5B:E1:F2:D3:E5:33:AB:EA:B0:4D:AC:77:48:2B:05:19:E8:7C:CA:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01451B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/221E75DCDA3811EFAB63BBB0762E951A.roa
Signing time: Fri 24 Jan 2025 09:46:50 +0000
ROA not before: Fri 24 Jan 2025 09:46:46 +0000
ROA not after: Wed 05 Mar 2025 09:46:46 +0000
asID: 202656
IP address blocks: 154.219.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83227 (0x1451b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:46:46 2025 GMT
Not After : Mar 5 09:46:46 2025 GMT
Subject: CN=6793618a-a7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:a7:0a:5a:45:03:59:6a:93:af:bb:03:60:
17:69:b7:31:95:d2:42:76:8a:f7:5b:04:ce:82:9f:
16:d9:90:96:ae:69:d8:2b:d2:f5:a0:88:72:5b:ac:
5d:ba:eb:2f:3a:09:8e:cf:17:32:40:6b:95:e0:e8:
05:96:d8:05:02:76:9c:73:29:81:4b:90:56:87:64:
3a:b4:e6:e3:ae:5f:19:bb:14:89:7f:17:13:5e:eb:
a9:2c:ab:0e:7f:10:58:50:7d:95:b2:99:11:0b:66:
3f:40:8f:36:e2:4d:0e:df:11:e8:a7:4b:1f:6c:f4:
14:b6:ff:fd:79:a3:75:2a:01:4c:09:3f:57:e3:67:
2b:a9:44:33:65:5f:6c:e8:02:38:69:12:54:c2:24:
43:d2:9c:eb:b8:fc:71:e2:b0:7f:dc:ea:96:1d:e7:
64:53:14:ae:b6:e2:71:bd:ac:ea:eb:5c:f7:d5:a4:
0b:0c:7a:8f:8a:6f:8a:bf:df:52:00:af:58:f3:2d:
49:ca:49:89:e4:88:da:df:5a:36:cc:e6:1d:bc:aa:
28:bc:d6:fb:de:c5:13:8d:40:de:5f:07:16:b3:cc:
ee:4e:c1:04:1a:b8:89:83:a5:65:3a:eb:66:e0:73:
dd:60:35:42:74:96:10:0c:7a:1a:30:81:36:00:27:
2d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:F2:D3:E5:33:AB:EA:B0:4D:AC:77:48:2B:05:19:E8:7C:CA:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/221E75DCDA3811EFAB63BBB0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:8d:5f:dc:6e:af:48:e7:88:44:af:00:9b:7e:27:6e:18:3d:
a6:ab:d8:cd:23:34:c1:99:a4:f0:20:9a:8b:fc:3a:29:a1:92:
0f:dd:59:70:09:9a:e3:eb:58:da:60:f9:46:c9:53:0c:b2:45:
f1:76:c5:67:13:d5:77:1e:da:87:f6:f0:e4:da:b9:1e:e2:d2:
0f:8b:23:21:1d:c9:10:23:b2:17:28:c7:22:70:77:9f:de:e7:
95:40:95:90:ca:e9:63:c7:8a:2a:ea:52:f0:8f:e1:46:8a:72:
07:c4:46:01:91:7a:9e:f5:37:9d:40:8b:93:a4:6a:3f:24:c2:
0c:c7:39:95:7e:9f:6e:a7:a5:1a:66:27:fa:2e:f4:73:2d:9b:
7b:07:6a:f2:6c:d6:3f:71:5a:43:ee:a0:0d:cf:21:31:20:cf:
3b:bb:25:0b:20:51:5d:e1:a4:fd:11:2e:1b:81:d5:b6:f9:73:
b5:75:0e:25:8f:63:11:f5:63:14:96:c6:6f:7a:4a:14:b3:48:
6a:89:59:88:5c:73:97:81:77:d2:ed:19:9f:a7:0e:35:78:e5:
06:15:e4:ea:3b:c1:68:ab:82:70:76:e0:47:b7:5f:1d:46:7d:
ff:28:ec:ad:96:46:a0:b6:a4:3f:a9:23:98:c1:37:86:43:0e:
67:cb:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:22:00 2025 by rpki-client