Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966303F0DA3711EFB984F2AD762E951A.roa
File: 966303F0DA3711EFB984F2AD762E951A.roa (raw, json)
Hash identifier: z5CXKq7H6VM+IL2s8LVEQzAtgTQAy8bisRleNAgMRGY=
Subject key identifier: BF:BD:8D:98:0A:1F:E3:13:5E:F0:F0:DE:AB:62:68:56:9E:57:B3:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014511
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966303F0DA3711EFB984F2AD762E951A.roa
Signing time: Fri 24 Jan 2025 09:42:55 +0000
ROA not before: Fri 24 Jan 2025 09:42:52 +0000
ROA not after: Wed 05 Mar 2025 09:42:52 +0000
asID: 202656
IP address blocks: 154.219.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83217 (0x14511)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:42:52 2025 GMT
Not After : Mar 5 09:42:52 2025 GMT
Subject: CN=6793609f-9c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:5f:06:07:59:ce:e6:a7:1d:09:03:df:82:
99:26:dc:76:1d:c2:52:0b:00:b4:1d:c2:db:54:2e:
98:c8:4f:ac:f2:ab:eb:3c:fd:8f:73:ca:39:78:b4:
5c:ea:a0:ed:85:29:5b:0f:00:78:f5:82:58:3e:ef:
73:20:1f:d8:bd:7d:7f:3e:85:92:f4:13:22:da:37:
2d:d6:b0:b7:d7:b3:f4:ca:a6:05:cf:d9:82:e1:ff:
2b:8b:9a:2c:30:40:4e:5e:aa:5b:be:b0:d5:0f:b9:
b0:cd:f6:be:6b:40:5d:db:fa:98:7c:d9:a6:cf:ff:
55:a5:7f:8c:f0:a2:87:78:c2:8d:16:05:ad:3d:11:
fb:f5:0c:fc:80:e5:2e:8a:06:02:b2:2e:7d:d3:b3:
47:2c:1f:f8:f3:f5:a2:de:2c:70:38:b5:4d:7d:84:
a4:d4:0e:ec:d3:1a:c3:91:ed:98:3a:3d:fa:d4:dd:
f8:a7:a3:c8:ba:c7:c6:d4:a4:1e:4d:76:48:f4:a8:
4e:a1:04:3d:d3:dd:66:10:03:fb:da:22:da:08:56:
8e:d7:c3:d9:b0:08:df:9a:6e:40:54:e8:c2:fa:88:
bb:ee:83:36:33:9f:13:41:f1:f5:4a:18:e5:c8:27:
17:a1:33:46:8c:85:39:e2:6e:4d:ca:db:c3:1a:a0:
25:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:8D:98:0A:1F:E3:13:5E:F0:F0:DE:AB:62:68:56:9E:57:B3:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/966303F0DA3711EFB984F2AD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.225.0/24
Signature Algorithm: sha256WithRSAEncryption
35:76:0b:3d:be:e7:2c:0b:9d:46:18:2a:83:c2:cd:31:d2:9c:
b3:50:62:05:7b:37:78:f9:62:ca:54:ae:eb:2f:69:83:50:35:
c8:4c:35:e9:8e:85:aa:82:4d:05:3f:77:2e:39:27:81:30:92:
68:47:de:8e:b2:e3:61:c2:25:07:95:d7:d6:db:fc:86:cd:8e:
15:74:3e:cd:20:8b:51:eb:44:b4:3c:e1:d8:2c:5d:e4:06:d4:
3c:26:c1:8a:9b:b7:f4:e0:54:4f:79:e5:e5:1f:82:2c:9d:43:
bc:22:fa:12:c0:5b:a7:ed:43:13:1b:55:dc:8e:5f:22:a1:0d:
78:f7:fe:36:5e:35:a8:df:76:eb:62:63:f8:58:6f:5f:58:b9:
ca:b7:84:3d:2f:96:44:93:09:d8:3c:eb:52:23:6c:4a:43:3a:
2a:82:42:43:85:bd:20:e2:71:9c:57:8a:7e:de:87:0a:98:33:
0c:00:90:07:b7:0f:ae:6b:8f:de:d8:0a:06:80:1d:f8:43:55:
49:c6:24:11:39:d0:58:d4:91:6f:06:52:75:f1:c6:90:b6:18:
d7:64:b5:ba:0b:26:bf:d9:5a:2a:a6:70:88:d0:11:46:90:09:
e4:eb:fd:e2:51:19:18:3c:8e:f3:06:d2:9e:06:fc:5b:31:f8:
1c:2b:5a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:34 2025 by rpki-client