Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A81E7D6DA3B11EF81F1BE49762E951A.roa
File: 9A81E7D6DA3B11EF81F1BE49762E951A.roa (raw, json)
Hash identifier: yMaCTZciomx4FGFNcbPCU4mUBQdV8FpbUAz0ondy6DY=
Subject key identifier: C2:A7:4B:3C:E1:05:FB:E5:61:72:BB:1C:1F:4E:9F:2F:2C:DB:C1:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01455D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A81E7D6DA3B11EF81F1BE49762E951A.roa
Signing time: Fri 24 Jan 2025 10:11:40 +0000
ROA not before: Fri 24 Jan 2025 10:11:36 +0000
ROA not after: Wed 05 Mar 2025 10:11:36 +0000
asID: 202656
IP address blocks: 154.219.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83293 (0x1455d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:11:36 2025 GMT
Not After : Mar 5 10:11:36 2025 GMT
Subject: CN=6793675c-8e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:96:93:e9:fe:9e:94:49:d5:1d:21:ab:d1:33:
f6:a9:02:f7:be:ee:27:39:4f:a7:9b:a7:f8:31:aa:
d1:45:73:8c:27:51:27:1b:88:80:d8:b7:31:d3:2f:
fb:f8:09:65:86:70:88:14:58:12:28:55:36:75:04:
19:b2:35:47:a6:ae:c0:73:51:f9:48:9f:86:43:f7:
8d:49:b7:37:f3:58:2a:68:22:34:4d:28:ef:03:0d:
c3:b2:d9:51:da:1a:43:2e:f3:5f:00:a9:26:c9:f9:
87:fc:33:25:8c:ec:80:71:4c:65:c4:dc:43:92:85:
30:43:10:e0:98:9b:30:43:90:b8:67:29:a2:5d:29:
5d:29:c8:9a:2a:b5:04:6a:02:1a:41:12:b6:a9:d0:
a9:49:1b:bd:07:d0:f5:d0:c2:a4:3f:2f:21:14:b6:
ae:f2:4e:af:a8:53:19:e6:9e:23:ea:ac:1b:12:3d:
24:3f:88:c1:02:17:fc:51:58:c9:2c:8e:59:78:be:
4b:c8:78:1b:21:c2:8f:94:0a:04:1d:4a:c6:52:fb:
6e:df:bd:00:ba:11:1b:58:c1:a2:5d:41:53:87:de:
97:15:d1:9c:f4:9e:31:9f:f4:e6:69:74:56:8d:4b:
18:c4:94:92:d8:a3:21:11:e1:2a:a7:68:51:80:e1:
7c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:4B:3C:E1:05:FB:E5:61:72:BB:1C:1F:4E:9F:2F:2C:DB:C1:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A81E7D6DA3B11EF81F1BE49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.241.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:37:f6:50:3b:00:d7:30:98:ad:2c:a5:e6:bb:d2:64:1f:e9:
b7:c9:04:a7:7a:e9:c4:b3:37:d3:a4:01:86:64:ac:9b:da:57:
71:a6:ab:ce:59:da:09:7a:4a:9b:09:61:f2:14:a9:6d:0c:8b:
93:fa:ca:55:06:9e:90:02:5b:bc:a0:7f:fe:66:83:33:d9:d7:
e9:06:df:b6:ce:f5:55:3e:96:2c:b6:ae:e8:58:c1:35:9b:c0:
cb:98:ea:5a:8f:43:2a:db:59:63:5d:b3:bb:4b:98:25:05:63:
e2:c7:31:6e:54:43:9e:55:9c:3a:ca:c1:b5:b1:c5:b8:17:51:
0c:bc:15:5e:3d:dc:ce:f6:40:b4:7c:28:fc:b1:b1:b0:1a:2a:
57:5d:d0:9c:14:bf:29:8f:66:d1:eb:1f:1f:1f:a0:68:30:12:
9d:22:90:ac:ff:90:0d:12:e9:3c:84:aa:c0:a0:32:2e:c8:2f:
e5:d2:97:0a:18:39:90:f8:98:73:d6:13:ee:aa:49:a9:6e:2b:
2b:8c:3e:0f:8d:85:3e:2a:11:2c:c6:29:4d:b7:69:90:5b:5a:
9c:b0:44:0e:59:aa:e8:94:f4:e3:c2:25:86:80:86:c7:4f:15:
f3:ec:f1:ce:e9:a3:a1:44:6a:6f:05:d6:fe:91:90:d2:16:c0:
07:d2:05:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:54:43 2025 by rpki-client