Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F986F1ADA3111EF8E495585762E951A.roa
File: 9F986F1ADA3111EF8E495585762E951A.roa (raw, json)
Hash identifier: 5xzxipffF6/To4cWQDvp2CPNyDHv+CBIhhuJTDcQlTI=
Subject key identifier: 22:2E:2A:CE:C0:9F:5B:72:A7:C0:20:FF:E5:2F:A1:34:5E:EE:07:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F986F1ADA3111EF8E495585762E951A.roa
Signing time: Fri 24 Jan 2025 09:00:14 +0000
ROA not before: Fri 24 Jan 2025 09:00:10 +0000
ROA not after: Wed 05 Mar 2025 09:00:10 +0000
asID: 202656
IP address blocks: 154.219.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83117 (0x144ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:00:10 2025 GMT
Not After : Mar 5 09:00:10 2025 GMT
Subject: CN=6793569e-edd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:76:a3:18:b5:96:e3:18:3f:0a:e6:1d:57:00:
31:3a:ea:d1:4d:7c:de:bc:82:02:71:40:01:88:2a:
2a:ba:6f:b9:61:98:c4:20:15:13:6a:8c:6b:c0:38:
dc:86:c5:0b:05:d1:e0:92:16:15:02:86:80:34:3d:
20:ea:4f:5b:b2:d0:78:bb:99:fe:92:02:b5:5e:40:
2e:aa:b1:49:53:b1:81:64:89:5f:03:02:9c:2a:ba:
15:52:26:3a:86:fc:70:91:8f:ef:5b:86:20:fb:fc:
c8:94:bf:8e:95:dd:63:4d:4a:01:bd:af:64:7c:b8:
e6:72:f6:63:7f:ff:d8:46:80:2c:79:b4:65:f5:a0:
96:fe:ba:1f:83:d5:94:a5:03:7a:bc:ca:73:3c:47:
f8:21:80:c2:5d:56:16:9c:07:6e:74:ee:f0:4d:48:
65:91:77:70:c1:22:5d:b7:45:df:ca:d2:5e:d7:54:
ec:06:57:47:80:d5:50:26:7f:5c:62:57:fd:b5:23:
42:73:20:cc:bc:f8:e1:df:00:05:4b:7a:4a:19:8d:
b3:55:34:fb:6b:24:0a:01:0c:bb:cf:ec:e8:a2:15:
02:3e:13:7d:eb:68:51:da:be:d4:31:88:e4:92:22:
7d:cf:56:da:4b:b6:75:25:a8:d3:20:64:ce:7c:ad:
ac:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:2A:CE:C0:9F:5B:72:A7:C0:20:FF:E5:2F:A1:34:5E:EE:07:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F986F1ADA3111EF8E495585762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:ee:43:4b:6e:e5:5e:2f:4a:44:31:9a:c6:0c:8a:08:79:3f:
68:06:83:5f:dc:fc:17:5c:ae:cd:2a:fb:0f:cb:03:3a:72:db:
6e:fa:1d:69:2a:69:2a:a3:3b:e5:8f:2d:0a:27:e6:55:4a:86:
4c:ca:5c:9d:32:96:21:bc:94:b9:0e:e5:31:8b:4a:c2:14:55:
bd:03:b1:bb:f3:e5:8c:2b:c8:be:84:3e:6d:fc:61:43:69:f2:
23:78:35:fd:25:2b:8d:e4:4f:74:45:fa:c0:3c:00:e4:e2:77:
23:56:99:06:8f:36:72:2c:1f:34:b0:9c:4f:f7:c9:e6:a1:6d:
2f:b6:ce:64:2c:95:66:80:8a:bb:6b:e5:76:70:8e:b2:5d:6b:
9a:fc:99:c5:67:70:04:59:4c:8e:4b:f6:ea:8f:ee:11:b6:d7:
fe:7f:87:f7:07:72:c9:37:83:45:75:36:d4:af:1d:b3:01:95:
41:46:60:2a:ac:c9:fe:dd:76:e3:4d:56:a5:79:8f:d5:f9:25:
33:2c:e8:a0:ed:b0:47:69:d8:22:10:85:93:2e:70:f8:59:3c:
1e:c8:bf:7a:aa:c7:23:39:d9:f9:2c:85:6d:5e:a7:ee:d4:dc:
1b:fd:d8:11:c5:64:a5:b9:5d:ea:9e:1d:ee:7b:a3:ce:64:2c:
fe:13:e4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:26 2025 by rpki-client