Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE413144DA3811EF912A85B3762E951A.roa
File: AE413144DA3811EF912A85B3762E951A.roa (raw, json)
Hash identifier: +j8oeVkGJpVgMCfrcbRpBI0PdzlnpLE+ivKYMSFUC9Y=
Subject key identifier: 3D:BB:35:61:BB:CB:4D:25:CB:7E:4B:FD:BB:94:C4:AD:C8:6E:03:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014526
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE413144DA3811EF912A85B3762E951A.roa
Signing time: Fri 24 Jan 2025 09:50:45 +0000
ROA not before: Fri 24 Jan 2025 09:50:41 +0000
ROA not after: Wed 05 Mar 2025 09:50:41 +0000
asID: 202656
IP address blocks: 154.219.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83238 (0x14526)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:50:41 2025 GMT
Not After : Mar 5 09:50:41 2025 GMT
Subject: CN=67936275-398d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:8d:9c:e7:3b:80:b5:49:9e:77:0b:c5:43:
37:7c:fc:87:cd:6c:59:1f:d0:a0:61:ae:d5:b4:77:
0d:9d:76:e6:ae:8e:12:50:ae:bd:e5:ef:d6:d5:fc:
69:02:93:f7:a8:df:e8:f1:71:b9:e6:f5:2f:7b:fe:
af:99:48:38:2b:19:9d:66:95:5c:1c:01:1d:ca:13:
25:d9:e2:57:5d:ef:64:5a:9c:a6:7c:b3:2c:e2:75:
26:ab:63:af:47:7a:1b:c3:36:b1:37:5d:68:42:10:
a0:91:e4:00:2b:ca:75:29:62:58:b1:c8:29:98:51:
cb:28:8b:e8:07:9e:a2:38:c8:c9:21:4a:10:e3:14:
4e:38:2d:69:52:dc:18:07:aa:da:9d:c0:47:98:fa:
0e:b8:cc:54:00:d2:2a:40:3f:4a:c8:0b:c0:fb:06:
ef:a3:34:93:ff:95:66:fd:8e:03:30:b6:53:a6:7a:
3a:e0:b9:ce:65:c8:ae:dd:23:bc:7d:c4:9a:7a:34:
09:b8:be:f7:78:e0:55:fa:66:78:5a:f9:2f:74:9c:
8e:3d:97:97:98:23:4d:43:2d:51:c4:e4:07:8e:fb:
41:65:ad:e7:81:4b:db:d7:55:6b:d5:bd:8f:6e:c5:
78:36:d0:09:39:3a:98:fa:b9:4c:a1:19:de:71:43:
4e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BB:35:61:BB:CB:4D:25:CB:7E:4B:FD:BB:94:C4:AD:C8:6E:03:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE413144DA3811EF912A85B3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:20:ac:20:a4:ca:ff:97:da:b9:dc:f0:d6:2e:bb:60:a6:57:
6e:47:6d:73:c2:01:fc:ea:4e:9e:b4:2f:ea:bf:ec:87:19:56:
80:30:a6:64:12:d8:51:cb:f7:df:2e:04:58:f9:a7:a1:46:a9:
e5:d2:fd:46:41:cd:f1:7f:26:74:9b:98:a0:db:55:1d:43:c9:
b6:83:21:82:00:c4:41:3c:1f:ae:e3:34:be:d0:ff:71:e7:b2:
9a:f2:1d:65:0f:33:23:0a:e4:fb:d3:1b:6d:aa:24:e4:e3:1f:
18:fb:a5:5b:ea:82:77:bb:30:e9:7c:e0:bf:c1:be:be:3f:6a:
6e:7d:88:b9:ed:09:a2:9f:72:92:d3:b1:c8:44:e8:18:af:7b:
c5:94:fb:fb:ca:b4:c8:cc:17:7a:10:e6:3d:7e:21:a3:a7:3c:
89:3f:9e:78:38:5d:ce:b8:ea:71:20:1d:9f:84:8e:ba:41:86:
a5:a2:c4:c7:72:ec:17:82:02:5a:73:47:87:70:b2:fe:77:e2:
30:1e:53:58:0a:a8:62:19:e5:b8:88:d8:1d:f6:53:f6:fb:ca:
1e:54:d1:25:44:5e:b4:e3:f5:37:65:06:88:3a:6a:2a:10:33:
65:61:b2:64:99:65:1e:77:84:b8:31:46:91:40:fc:6c:85:7f:
ec:4e:ae:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:26 2025 by rpki-client