Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E243684DA3C11EF999C2B50762E951A.roa
File: 6E243684DA3C11EF999C2B50762E951A.roa (raw, json)
Hash identifier: rT139Fq6pV6RGTgej8Xg6//R3sa4qOtuLmcFb+aIU/4=
Subject key identifier: 2C:6C:0A:ED:E6:1B:CD:C7:CD:FF:C3:C2:A5:19:37:64:57:E0:5B:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01456E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E243684DA3C11EF999C2B50762E951A.roa
Signing time: Fri 24 Jan 2025 10:17:35 +0000
ROA not before: Fri 24 Jan 2025 10:17:32 +0000
ROA not after: Wed 05 Mar 2025 10:17:32 +0000
asID: 202656
IP address blocks: 154.219.244.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83310 (0x1456e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:17:32 2025 GMT
Not After : Mar 5 10:17:32 2025 GMT
Subject: CN=679368bf-2b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:7d:4a:a8:5f:e5:7c:0d:5b:86:7b:6f:d7:
4d:df:f5:88:ab:b6:86:b0:c5:0f:ab:0f:f1:5e:2b:
ca:ec:86:b6:40:9c:75:50:5c:89:58:af:f8:96:bb:
ef:20:9a:ef:36:f4:f8:ce:5a:19:c0:a0:a8:e4:a9:
70:2f:da:26:47:58:01:8d:86:ec:ae:09:73:c1:06:
67:72:b7:5b:3c:24:87:dc:c4:f2:dd:c4:c6:8a:ac:
cc:13:99:78:4a:f3:34:31:23:be:22:e1:f3:41:db:
5c:f0:07:a1:5c:48:af:45:23:c7:19:44:5e:45:9c:
6d:a5:93:4f:46:0a:8d:5f:fa:f6:26:92:76:2f:ac:
58:58:70:30:9e:1a:41:3b:8e:3f:3c:51:60:72:f6:
7d:ba:98:e3:bf:12:4f:53:61:68:58:62:d4:ed:37:
5c:40:e2:91:cd:84:3c:ee:04:0a:ee:18:6b:ab:b9:
bd:5b:bb:d3:c5:13:26:2d:e5:02:79:e8:aa:29:f4:
d6:87:63:36:37:4c:31:b0:45:b9:48:41:7d:ec:ab:
b0:21:28:e1:12:b2:88:6d:ac:d2:09:15:aa:9b:98:
e7:3f:4d:6d:9a:da:3a:48:ed:81:9f:f2:7f:8d:b3:
2c:30:b0:41:6a:15:ea:81:d1:26:1e:c6:d4:1e:e3:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6C:0A:ED:E6:1B:CD:C7:CD:FF:C3:C2:A5:19:37:64:57:E0:5B:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E243684DA3C11EF999C2B50762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.244.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e9:0f:b5:fb:88:21:19:cd:5e:32:2c:2f:2c:a9:3f:c6:6e:
f6:4e:57:a4:04:56:4e:03:8e:7f:b2:4c:9f:3c:37:25:d9:dc:
bc:02:fb:af:32:f7:bd:e1:54:9f:fb:b1:27:28:f8:0b:08:b9:
53:69:34:4c:ff:71:35:7a:89:b5:d7:4a:f9:08:40:75:b8:e9:
fc:83:4c:cd:2c:77:5e:20:d2:9a:04:30:3f:93:c5:5d:2e:54:
14:91:76:39:5d:10:1f:88:0b:84:f1:01:20:6a:b3:3f:5e:0b:
1a:e1:f7:b9:08:37:71:d4:f4:35:77:b7:ff:36:cf:de:18:16:
a4:01:35:20:33:fe:53:64:2a:43:41:e5:66:b7:7d:01:6d:a6:
a3:fb:4b:50:f4:aa:f8:83:6c:63:60:a1:b6:e6:e9:4d:35:91:
85:32:47:a6:77:44:e6:11:17:a0:4e:8c:09:ff:6c:fa:7e:0a:
04:02:38:a7:eb:d2:6e:77:06:95:3b:65:50:15:a8:bf:39:2b:
97:cc:e2:63:31:e2:3b:2f:66:98:5f:5c:4f:df:88:a1:41:39:
6b:27:b9:1f:6a:39:89:0a:15:ab:50:5c:f5:7a:fb:1a:52:7a:
25:c3:65:99:f0:4e:45:65:aa:19:cd:85:ec:bc:26:e7:ed:be:
e8:a8:1b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:59:57 2025 by rpki-client