Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FFDAA16DA3511EF83E382A0762E951A.roa
File: 9FFDAA16DA3511EF83E382A0762E951A.roa (raw, json)
Hash identifier: fZauYBqPhmJYGZXZZGMVbBQeJkK4IQhxsRkebSIgg4U=
Subject key identifier: 1D:0E:85:80:74:28:BF:9E:1D:09:AB:66:3C:CA:B6:A2:DC:CA:52:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FFDAA16DA3511EF83E382A0762E951A.roa
Signing time: Fri 24 Jan 2025 09:28:52 +0000
ROA not before: Fri 24 Jan 2025 09:28:49 +0000
ROA not after: Wed 05 Mar 2025 09:28:49 +0000
asID: 202656
IP address blocks: 154.219.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83183 (0x144ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:28:49 2025 GMT
Not After : Mar 5 09:28:49 2025 GMT
Subject: CN=67935d54-ba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c5:26:33:5a:a7:c0:77:af:43:24:de:8f:9b:
51:e4:4b:c6:d4:bf:0f:0c:bb:ad:60:f9:8d:ce:3b:
44:7c:56:1f:77:54:e6:c3:bf:e2:c9:72:1e:46:8b:
30:ce:84:90:90:f4:f7:2a:92:02:f7:6c:da:46:5e:
92:63:ed:23:63:50:30:4d:4c:64:e6:68:1c:41:ad:
92:a1:a0:27:10:a4:6f:79:a4:86:57:1f:86:af:4c:
74:38:47:ef:4f:4a:f5:70:e1:47:65:5f:f1:50:f2:
05:09:57:d3:06:6d:55:4d:16:28:86:d4:37:da:07:
42:f3:cf:a3:b9:4c:a9:d3:99:eb:4c:63:15:20:5d:
41:26:94:6f:b9:69:3d:c3:2f:54:ec:85:3c:06:c9:
23:85:cf:3b:4c:ab:71:fe:2a:1d:29:3a:a6:4e:11:
29:96:6b:37:54:91:74:1f:c6:38:f2:98:0f:c0:58:
f6:46:61:ca:3d:5a:44:96:b6:42:42:73:35:fd:51:
86:d9:68:da:1d:1d:3a:10:47:42:cf:c6:43:27:55:
a5:29:f0:35:19:ee:4d:31:93:89:71:bf:ec:8c:ec:
fe:7d:7b:de:18:96:23:2f:45:07:53:90:a3:d5:24:
b4:4e:f9:24:98:57:14:46:59:dc:c4:87:df:3d:60:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0E:85:80:74:28:BF:9E:1D:09:AB:66:3C:CA:B6:A2:DC:CA:52:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FFDAA16DA3511EF83E382A0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:26:da:be:c1:3f:af:9c:50:50:bb:02:f6:b8:5c:5b:62:e7:
aa:85:ca:45:54:16:07:88:1c:9a:bf:c9:3a:fe:9b:82:df:8c:
f0:ab:1f:0f:ca:71:9e:68:3f:37:97:eb:f5:08:50:d3:8b:96:
ab:2f:54:64:30:40:22:a7:3b:39:d3:7a:d7:e2:96:bd:57:bf:
e8:0a:62:8f:90:b0:2c:ee:2b:be:2d:95:bd:4c:db:bc:4f:59:
75:26:c3:8e:73:f8:ea:b5:cc:ed:ce:8d:9f:af:3a:21:8d:8d:
43:96:e2:90:dc:28:59:75:e5:8d:64:b0:9a:2b:ed:9a:51:a9:
0d:70:71:10:62:3c:5c:fa:5e:59:a6:8d:83:29:05:72:28:c0:
bf:d8:d0:a0:6c:fe:a8:4a:19:58:fe:fb:76:4e:b7:df:51:e7:
85:69:05:a9:ef:4d:40:fa:11:04:cc:1d:76:ac:e1:8d:ca:16:
cc:59:b3:ce:eb:55:9d:39:76:18:df:96:d3:30:c7:c9:ab:01:
25:c4:72:5b:af:30:43:45:10:bd:df:2c:44:45:33:57:7e:95:
89:a6:6c:fb:5f:07:fd:d5:75:9f:b2:37:b5:2a:75:e0:da:77:
a2:5a:d7:ba:02:2e:21:ac:0f:ab:93:11:26:3b:37:ad:a0:e9:
00:04:1e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:46 2025 by rpki-client