Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B18D284DA3011EF8EBEAA7B762E951A.roa
File: 2B18D284DA3011EF8EBEAA7B762E951A.roa (raw, json)
Hash identifier: 5Y/UYwxxgpC5EsOW02f4xEP+uT6sUA2Fa5t7z4NKG4Q=
Subject key identifier: 2A:5D:71:09:59:41:89:77:2F:79:B3:39:51:3C:66:6D:56:94:28:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014493
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B18D284DA3011EF8EBEAA7B762E951A.roa
Signing time: Fri 24 Jan 2025 08:49:49 +0000
ROA not before: Fri 24 Jan 2025 08:49:45 +0000
ROA not after: Wed 05 Mar 2025 08:49:45 +0000
asID: 202656
IP address blocks: 154.219.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83091 (0x14493)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:49:45 2025 GMT
Not After : Mar 5 08:49:45 2025 GMT
Subject: CN=6793542d-6433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:23:d1:cb:ab:1c:91:75:7c:83:90:d4:58:
6a:6e:49:9c:8c:ac:92:51:99:a7:62:8a:9d:10:92:
8f:7b:3d:cb:1b:c7:e5:b5:b6:13:b4:1f:0e:4c:29:
32:ff:29:64:d3:de:80:cc:d8:08:ab:01:aa:54:f4:
c4:27:76:03:50:62:7c:99:42:0c:ff:d4:1f:99:55:
dc:96:02:51:5f:a8:fe:c0:9a:f2:07:c7:7d:e4:6e:
eb:d2:7f:bb:05:41:b8:a0:c0:af:32:25:bc:7e:d1:
05:fd:09:41:64:9e:e1:f1:c7:cb:36:fa:23:37:9d:
4d:38:55:83:3d:61:6c:e0:61:89:fd:09:7c:39:4c:
ac:dc:87:ac:04:0b:40:da:b7:78:92:b8:f4:21:ce:
6d:47:2e:04:e6:0d:94:f7:2d:c8:dc:b7:af:10:11:
00:87:3a:32:4d:68:b7:96:0d:33:a8:56:6f:3d:7e:
9e:a2:d8:23:ff:b8:15:ba:89:82:1c:26:e6:c1:e6:
b1:b6:51:15:27:d7:61:17:3b:ac:62:06:3d:a1:7f:
32:c7:60:d9:59:25:e6:86:cc:bb:d6:4f:82:e0:37:
86:7e:c3:33:0c:02:06:0b:c2:a2:07:ac:c0:76:ae:
d1:e7:e5:fb:09:4f:bd:be:7b:27:60:46:e3:88:6a:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5D:71:09:59:41:89:77:2F:79:B3:39:51:3C:66:6D:56:94:28:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2B18D284DA3011EF8EBEAA7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:0f:9e:d3:e5:b9:af:57:33:41:2b:b0:7d:ab:13:3e:c4:ac:
1e:00:0a:7c:b2:18:a4:17:e9:1d:77:56:38:04:26:a1:42:75:
ef:06:e9:d0:cd:b8:90:f4:8c:90:bb:cd:20:93:a2:e2:47:c2:
2d:77:91:8a:b8:11:bd:df:d5:d2:b5:34:68:70:4d:cd:bd:8b:
90:a5:13:e9:a0:b0:0d:1b:3c:f4:19:46:e8:00:ea:bf:8a:25:
ad:f9:3d:f0:d1:a2:66:c3:9b:d5:85:bc:f8:49:30:bb:71:4f:
06:f2:fd:12:03:71:81:11:98:df:6a:7d:28:87:ce:ba:ad:c9:
11:5a:69:50:b4:11:dc:bb:11:f4:a5:70:e8:1d:4e:25:67:35:
e5:b0:16:2f:d2:94:73:23:17:f0:10:26:20:6b:2a:1d:15:be:
ea:68:57:7e:9a:00:8c:c1:7d:5c:53:61:a2:64:42:2d:42:fa:
4b:61:b7:98:55:cf:2c:15:43:6c:94:d6:1f:ef:04:84:e5:d7:
b0:1c:1d:4e:38:0d:26:ab:44:ce:fd:93:2e:9a:ab:25:6e:52:
6c:ea:c3:14:bc:f9:34:33:4b:3c:5d:8a:1f:80:41:d0:6e:7e:
97:02:c5:18:b5:6a:a2:0d:46:18:41:07:bb:c7:21:0c:b4:fe:
6e:4d:7e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:49 2025 by rpki-client