Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29E9DD08DFEF11EFB3F394BE762E951A.roa
File: 29E9DD08DFEF11EFB3F394BE762E951A.roa (raw, json)
Hash identifier: Kuz9H4eMGfIifXeyMsuhfScILLRABWnqazMMTlSwtXQ=
Subject key identifier: 22:D5:1A:3E:9D:14:64:1E:DF:16:4C:1B:DF:2C:D9:71:E4:B2:50:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014E19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29E9DD08DFEF11EFB3F394BE762E951A.roa
Signing time: Fri 31 Jan 2025 16:19:36 +0000
ROA not before: Fri 31 Jan 2025 16:19:33 +0000
ROA not after: Thu 27 Feb 2025 16:19:33 +0000
asID: 141883
IP address blocks: 154.91.224.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85529 (0x14e19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 31 16:19:33 2025 GMT
Not After : Feb 27 16:19:33 2025 GMT
Subject: CN=679cf818-e7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:45:8d:6a:3e:16:c3:9e:63:24:62:45:3a:
8d:a6:ed:79:ad:5e:08:b2:95:b5:e5:9a:c8:83:0a:
6a:95:9d:6f:82:38:77:94:de:85:34:af:4d:ff:49:
ca:40:48:a9:eb:78:93:b1:dd:ac:55:57:db:09:a9:
14:7e:18:35:8f:0c:cc:6e:55:86:d6:5e:ea:11:17:
1f:47:8d:22:37:6d:3c:43:37:6a:cc:47:89:32:1c:
4a:91:e6:36:85:21:10:a2:9d:74:5b:d7:d1:4b:52:
08:da:bb:c0:39:c1:57:1f:81:55:b5:76:2f:8a:2b:
25:d5:76:1b:2d:4f:a8:b9:d4:2c:88:63:56:ce:69:
85:8c:da:3c:cf:86:f1:90:de:b8:65:b1:3e:64:61:
99:b7:8d:3c:8f:ba:65:36:21:96:17:e5:93:98:b3:
14:05:1c:ac:6b:f4:19:a7:7e:0c:64:8e:b6:51:e2:
24:9b:ff:f0:52:55:92:2e:29:5a:da:cd:e1:69:e6:
bd:b5:bc:a9:6d:d3:c4:ce:39:ca:b3:21:5c:ff:b2:
e3:b8:89:cb:de:3d:e6:14:61:dd:b4:05:ad:cd:70:
2f:9f:67:ac:93:ee:ff:3e:85:c0:e6:15:05:b1:d8:
7e:aa:54:4e:c0:b9:f7:7d:02:f9:ba:f6:cf:af:5b:
a2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:1A:3E:9D:14:64:1E:DF:16:4C:1B:DF:2C:D9:71:E4:B2:50:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29E9DD08DFEF11EFB3F394BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.224.0/19
Signature Algorithm: sha256WithRSAEncryption
99:ff:24:01:ea:67:c2:a2:f7:51:5c:f8:b5:db:d0:14:56:90:
fe:96:85:73:c4:37:92:9d:b1:cd:58:89:66:37:fa:c4:66:d0:
53:0b:e1:ec:84:3c:7e:d8:eb:a0:59:08:de:5e:49:9d:f5:fe:
19:46:d8:ea:60:31:a8:85:78:fa:ec:f9:c6:7a:30:83:4f:a4:
bb:18:bd:d2:97:7e:12:3d:8f:00:08:b9:54:ea:61:83:0f:85:
7d:9b:2a:ed:64:6e:6c:93:1e:4e:4d:0b:f0:6e:d7:4b:3d:8d:
c1:da:ae:6d:ef:86:88:87:8f:f2:32:3f:84:2a:d5:69:0c:34:
e5:8d:90:ab:31:79:02:70:9e:c2:88:ae:a4:72:75:1c:3f:09:
b3:ad:41:5c:55:2a:c7:5b:de:70:e3:f9:8f:3a:42:ba:a6:64:
4d:ab:aa:8f:41:cf:dc:6b:2d:ac:97:fc:9c:90:b5:92:42:00:
35:b3:11:c5:4b:03:e5:ac:ef:75:45:1b:88:ca:30:00:20:4e:
7b:b1:36:16:16:2f:1d:94:bf:bd:50:e3:43:dd:ff:9b:7a:fa:
f1:61:a4:6e:86:e0:5b:a7:ca:51:5f:cd:16:76:39:9e:d3:60:
cc:e4:47:3e:43:19:cd:62:88:0c:ac:4b:c3:d1:c7:1b:c7:e9:
5a:9f:4f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:54 2025 by rpki-client