Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B87ECA6DA3111EFBE1EC084762E951A.roa
File: 5B87ECA6DA3111EFBE1EC084762E951A.roa (raw, json)
Hash identifier: vXjytt0Jl1S0wcjX9qtNgmoVezd/IbjakX9JK/gwzt4=
Subject key identifier: 9F:F4:8A:FE:86:F5:AF:07:6B:7B:6C:D0:A6:FE:9A:ED:5D:96:C1:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B87ECA6DA3111EFBE1EC084762E951A.roa
Signing time: Fri 24 Jan 2025 08:58:20 +0000
ROA not before: Fri 24 Jan 2025 08:58:16 +0000
ROA not after: Wed 05 Mar 2025 08:58:16 +0000
asID: 202656
IP address blocks: 154.219.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83113 (0x144a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:58:16 2025 GMT
Not After : Mar 5 08:58:16 2025 GMT
Subject: CN=6793562b-fe5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:2c:48:58:9d:bd:c7:8f:02:09:df:77:fc:
63:09:5c:f6:75:47:06:c2:c1:73:1e:e7:19:ac:df:
43:de:0e:98:9f:76:de:6e:b1:df:60:26:ae:4f:c6:
e4:48:d7:6f:35:09:e6:6c:c0:5d:03:b5:f1:eb:58:
f4:56:62:6b:bc:94:9a:69:c7:e0:02:79:80:2e:98:
69:d7:eb:4f:65:21:91:a0:94:ad:d4:ca:72:0d:b0:
21:c3:ff:f3:32:d2:44:3b:1f:8e:e8:4f:b3:69:1a:
6b:58:9b:23:03:eb:33:76:2b:74:29:85:97:fc:1c:
b6:5b:8c:c6:cc:50:09:ae:94:6d:f5:bd:05:eb:43:
bb:23:3e:37:88:09:0f:60:56:75:65:0f:3e:5c:d4:
56:cd:90:73:bc:9c:50:a5:36:e9:75:6d:35:c7:d2:
45:d5:79:ca:f9:0c:be:70:5a:d3:04:39:0b:fd:cf:
2c:7c:ff:0f:ad:a0:b1:76:de:fd:d7:a5:10:e8:3e:
dd:3e:fc:7f:fe:a2:5c:ef:41:1c:02:f7:7d:1d:42:
0a:58:40:71:84:67:0e:b1:3a:59:99:41:70:eb:a9:
6b:b0:2c:41:3b:eb:e1:f9:5c:d3:a0:0f:aa:48:35:
c2:b5:f0:63:64:62:4f:87:04:43:18:dc:3a:db:34:
be:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F4:8A:FE:86:F5:AF:07:6B:7B:6C:D0:A6:FE:9A:ED:5D:96:C1:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B87ECA6DA3111EFBE1EC084762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.200.0/24
Signature Algorithm: sha256WithRSAEncryption
85:40:a7:04:64:2b:20:b3:fd:19:8d:df:32:65:5f:1d:ae:89:
9e:93:03:52:97:07:29:93:05:81:ee:75:11:47:eb:ed:21:64:
83:5d:39:ab:58:67:8d:8a:ff:3f:d2:8b:a4:da:c2:61:ca:9d:
b3:67:c0:56:8a:e0:32:d3:7e:8a:b4:45:89:ab:60:9d:ca:cc:
67:75:7c:01:3b:b4:41:24:bd:79:2a:2d:80:98:31:54:b5:7d:
95:57:d3:23:b9:6d:6d:4d:e1:88:a4:2f:8e:1d:86:6c:00:16:
1b:44:aa:ba:db:bb:49:75:99:0a:71:26:e2:fc:ff:66:bf:39:
59:ff:06:62:80:72:7e:13:d8:24:02:91:5a:ae:26:b4:fe:80:
8d:bf:99:e6:85:08:c9:58:a9:3e:2c:3c:b5:65:1c:14:7a:2a:
ae:c9:df:3a:22:32:16:ab:9e:a9:24:b1:dc:9b:9a:2c:57:c3:
25:82:8a:d4:c6:b3:50:25:e9:2c:5e:38:19:92:77:80:84:d0:
a6:9f:37:19:92:5a:ee:86:6a:1a:55:06:c1:d6:14:db:bf:40:
54:5f:3f:f8:f6:59:a1:d7:44:5d:a4:77:2a:83:69:c3:59:0f:
3c:16:a1:43:10:87:95:ac:1c:6f:70:a6:ab:f1:9b:de:a5:22:
ba:a3:7e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:44 2025 by rpki-client