Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A170B87ADA3F11EFAABFC463762E951A.roa
File: A170B87ADA3F11EFAABFC463762E951A.roa (raw, json)
Hash identifier: Juxb7DiyHe1+n5cgsKJ9+LtGn0+AFUW2dX5EvbfEEKQ=
Subject key identifier: A8:D5:F6:F7:B7:F9:4E:6A:FF:2E:A7:E3:4E:B6:3B:84:06:99:DE:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A170B87ADA3F11EFAABFC463762E951A.roa
Signing time: Fri 24 Jan 2025 10:40:30 +0000
ROA not before: Fri 24 Jan 2025 10:40:26 +0000
ROA not after: Wed 05 Mar 2025 10:40:26 +0000
asID: 202656
IP address blocks: 154.219.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83368 (0x145a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:40:26 2025 GMT
Not After : Mar 5 10:40:26 2025 GMT
Subject: CN=67936e1e-6d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:63:d7:01:55:84:79:92:a5:cf:ec:d4:79:
51:0f:db:97:d8:60:7c:6b:a1:ba:f6:ff:45:0b:69:
29:01:6b:6b:ad:d6:57:2d:70:71:14:b8:b3:03:b8:
d8:f5:62:f2:d0:00:89:e5:f4:ee:7a:16:e3:20:a7:
65:26:8b:93:f1:a4:f3:30:b6:91:c4:cb:35:1e:e9:
33:fa:01:7c:fb:af:3c:f2:d9:59:dd:42:7f:a5:08:
fa:0d:3f:7e:42:a8:d0:96:bb:0a:c9:c2:10:d0:a1:
4d:fd:08:9d:2d:f0:74:37:10:88:61:2e:04:2b:8e:
ec:66:b4:46:6d:54:93:bf:f2:6c:6c:5b:c4:cd:2f:
90:b5:34:9a:c3:07:94:08:4e:f9:ea:d3:d9:66:d5:
e2:7d:cc:b7:40:19:83:6a:b9:63:9a:df:1d:19:5c:
0e:a3:ae:59:d9:8d:8c:b0:78:04:b6:d3:bb:cd:f0:
b3:27:09:27:dd:ef:a1:20:8c:45:47:41:6a:0c:9f:
01:b8:7b:81:ad:4e:8e:da:66:91:10:fa:94:55:14:
da:6f:35:36:d5:77:ee:d7:e4:ab:f7:96:22:a9:dc:
d8:f7:67:bf:10:fb:a8:e5:b8:bc:09:a2:3a:7b:61:
e7:a2:36:e2:11:13:7d:3a:41:64:19:2f:50:fe:3b:
21:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D5:F6:F7:B7:F9:4E:6A:FF:2E:A7:E3:4E:B6:3B:84:06:99:DE:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A170B87ADA3F11EFAABFC463762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:04:87:8b:cf:90:4d:0d:97:b4:21:02:a2:c2:40:79:6b:64:
37:7d:80:44:93:15:44:a7:b8:1a:93:b1:4f:32:68:6b:69:bd:
a1:c2:1a:a0:9e:b0:07:31:ae:49:e4:9a:36:e3:43:46:e0:fb:
58:b4:6f:b7:67:ab:5f:b6:b4:83:0e:6d:fa:f3:fa:2c:c7:9d:
3d:aa:c2:42:29:06:ea:ac:64:8d:3c:25:67:e7:ec:f2:8f:ae:
51:e7:51:4d:12:5f:bd:58:64:41:3c:5b:51:32:8c:08:0d:44:
78:b6:2f:85:5a:be:dd:2b:76:37:62:8b:60:ac:46:c1:63:1c:
04:8a:e0:70:b6:3a:17:aa:b6:c8:bc:bb:86:39:0a:5e:26:cb:
2a:e0:20:d3:4b:cf:e0:e9:1b:dd:3c:3f:e8:70:9c:c7:3a:97:
1f:e1:e9:8c:e2:ab:3b:ce:5a:4e:b8:d7:aa:4b:59:fa:94:7e:
18:ec:d1:ac:17:51:04:30:e6:ae:fb:fc:67:36:04:05:11:12:
1b:65:3e:91:a7:9d:cf:0e:11:1f:84:44:c9:29:08:3e:c8:e5:
ee:de:f6:5e:59:95:a9:cb:7c:0a:aa:5c:b7:4d:ce:1f:1b:df:
8f:65:ac:2c:b8:a8:5d:ae:58:30:4f:a8:90:ae:58:0c:b5:aa:
2e:12:85:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:29:32 2025 by rpki-client