Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306A23FEDA3611EFB347C1A4762E951A.roa
File: 306A23FEDA3611EFB347C1A4762E951A.roa (raw, json)
Hash identifier: LhO56rCZqsCXeojv6KekXHvlHozfwM+02SAd/+LRf9o=
Subject key identifier: 8E:60:83:F3:5B:81:4C:4C:7A:71:7C:2A:AA:35:41:D3:1D:00:69:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144FA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306A23FEDA3611EFB347C1A4762E951A.roa
Signing time: Fri 24 Jan 2025 09:32:55 +0000
ROA not before: Fri 24 Jan 2025 09:32:51 +0000
ROA not after: Wed 05 Mar 2025 09:32:51 +0000
asID: 202656
IP address blocks: 154.219.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83194 (0x144fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:32:51 2025 GMT
Not After : Mar 5 09:32:51 2025 GMT
Subject: CN=67935e47-7738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:8c:ff:c5:57:06:cc:1c:d9:08:60:cc:46:
83:ad:0c:16:2e:df:72:65:01:5d:3a:b8:a6:42:cc:
ac:20:6e:4d:0e:b3:70:45:4e:6d:47:71:9f:84:5a:
f3:8b:55:a5:6b:d3:21:4a:0e:62:e1:a5:8b:60:56:
07:42:d4:5c:13:ea:46:02:26:fc:a0:07:3a:67:24:
d9:be:27:a4:68:93:5b:de:18:13:b3:25:a6:2d:8a:
fb:04:68:9d:6e:84:7f:fc:41:da:3e:11:19:3f:c7:
fd:90:9c:e9:ea:12:73:09:6c:eb:fd:ce:d0:89:c1:
e4:6a:5e:0b:15:7f:09:10:94:43:a9:8b:58:f5:40:
6f:36:11:e2:63:d6:05:55:b0:44:1d:ff:bc:ca:f7:
80:2c:dd:d4:3e:28:d9:5d:10:cc:ec:d1:a5:ab:30:
3b:c0:38:d6:11:d5:42:bc:62:da:91:cf:c5:de:29:
7d:03:35:93:fe:93:3f:da:25:4c:93:ce:ca:87:24:
a2:34:3a:ad:29:17:36:ba:48:c8:05:bb:6c:a5:6a:
c0:c2:2b:a3:64:9d:de:3c:ee:01:a9:28:00:3a:70:
7b:d7:64:a9:89:6d:21:8f:b8:d0:22:c0:17:fd:b6:
f3:98:67:fb:87:49:9f:cf:d4:85:01:cf:2a:3f:b2:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:83:F3:5B:81:4C:4C:7A:71:7C:2A:AA:35:41:D3:1D:00:69:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/306A23FEDA3611EFB347C1A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.219.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:40:1e:81:90:de:1e:16:30:c1:81:10:14:44:80:0d:92:1b:
7d:68:bc:5e:35:2a:f6:0f:87:1a:62:e0:a3:cd:4a:1b:b8:1d:
57:26:b2:14:ef:9f:e0:e4:b8:46:a3:42:df:85:4f:d0:37:47:
b1:ef:6c:4d:bd:9a:c4:ef:33:46:96:c8:8e:ae:d4:ea:04:b6:
3e:bc:2a:74:7b:3a:b2:5b:47:25:1e:6c:d9:b1:a1:5a:b6:39:
7b:d3:88:d8:94:68:d8:5d:c0:48:49:64:56:85:ca:17:5d:8b:
d1:f1:46:9d:c9:ab:ad:65:36:ec:40:72:b5:20:f4:45:ba:1e:
10:1d:a4:87:64:95:35:43:0c:55:8f:a6:9c:6e:e7:de:75:67:
3c:a2:1a:57:e5:95:4e:56:c7:e2:86:7d:fa:24:f1:13:c0:71:
cf:f4:18:1b:b5:4c:9b:cb:c9:ad:62:84:15:da:df:69:a4:b6:
73:8f:64:70:20:54:74:d9:03:85:1a:ec:15:6e:7b:90:63:9e:
7e:94:62:f2:79:53:a9:73:b1:76:3b:92:14:7e:22:93:32:02:
75:fd:3e:c6:3a:21:5d:66:39:35:30:13:d1:a1:93:4d:a3:75:
09:a7:39:7c:ca:21:3f:ee:20:88:a4:1e:4f:1a:a5:f6:7f:e7:
0a:34:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:50 2025 by rpki-client