Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B030CAA2BEA711EF8CBE789E762E951A.roa
File: B030CAA2BEA711EF8CBE789E762E951A.roa (raw, json)
Hash identifier: IbsjLj5lP3aILGmBKv+fpUts8PbBWtFgqfqkD1Qm7Dk=
Subject key identifier: E1:95:D6:DA:DC:C5:95:B2:E2:D0:DB:BB:DB:D5:D2:2B:F7:38:9F:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B030CAA2BEA711EF8CBE789E762E951A.roa
Signing time: Fri 20 Dec 2024 07:54:50 +0000
ROA not before: Fri 20 Dec 2024 07:54:46 +0000
ROA not after: Thu 20 Mar 2025 07:54:46 +0000
asID: 2914
IP address blocks: 154.214.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72806 (0x11c66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:54:46 2024 GMT
Not After : Mar 20 07:54:46 2025 GMT
Subject: CN=676522ca-b6ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:41:5c:46:c7:29:b5:52:e7:7a:62:c8:9e:14:
5b:2c:76:e9:17:8e:f9:67:88:c4:3f:4a:73:5b:91:
9e:2e:7b:dc:92:c1:c2:3a:40:52:b2:8f:f4:90:54:
0e:7b:41:8c:95:59:83:09:9a:94:26:9c:12:61:ac:
e3:27:10:4d:32:fa:14:d8:9c:ee:3f:10:fe:25:b8:
97:d8:d4:af:63:3a:de:18:6c:77:48:09:e4:a9:7f:
36:5a:49:3f:57:f3:02:55:64:85:66:54:94:1a:49:
0d:fa:6f:fd:96:55:ba:e4:7b:7e:67:c6:94:3d:42:
c6:50:98:e8:8a:03:35:e7:bd:16:9d:6c:e6:1c:d2:
4e:e9:ba:f0:36:d2:26:70:87:05:33:28:04:71:a5:
9c:87:f2:25:5c:94:c8:26:95:5d:19:6b:1c:ee:b4:
a2:fb:6d:41:8b:fd:b6:69:07:ef:d5:2d:7c:45:b6:
99:1b:da:3a:e4:43:da:b0:9f:17:45:f0:28:67:f5:
ff:47:b7:83:c0:d8:a7:4d:f8:4c:41:5c:74:82:1c:
ee:4c:d7:d4:42:6a:d9:30:ac:7a:6d:c2:22:e0:78:
e7:9f:ca:24:c9:41:7c:ab:5e:c6:9a:ae:17:74:09:
f6:46:a2:73:8f:4e:ce:52:16:bd:e6:4b:54:84:d4:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:95:D6:DA:DC:C5:95:B2:E2:D0:DB:BB:DB:D5:D2:2B:F7:38:9F:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B030CAA2BEA711EF8CBE789E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.219.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:9f:1d:ab:ac:a2:41:f1:67:dd:50:ea:c8:67:ec:c9:13:f7:
f8:e1:84:e3:67:f8:9e:26:9c:3e:f4:2e:dc:07:cf:53:a6:b6:
82:91:60:36:11:8e:71:5d:80:f4:ae:1e:a5:0c:4d:14:07:fe:
92:17:61:3c:ac:ee:66:f1:af:f4:a4:6d:34:d5:9f:90:5f:2f:
46:38:5f:45:d8:13:9b:60:97:4a:93:6c:55:9b:6e:9e:f7:cd:
f2:8e:66:f5:85:ac:5c:e0:13:c4:fd:91:b5:84:20:13:58:d8:
4c:b2:78:49:b5:ed:28:c9:10:8b:7b:84:e2:0f:08:cb:07:5b:
f3:d3:8d:74:df:4a:c7:55:f6:0d:18:d2:16:0e:7e:c8:d3:81:
d6:5e:7f:25:aa:12:37:11:a9:1d:15:f3:5c:a1:54:97:96:5a:
62:fb:78:99:76:68:f7:33:72:42:c4:ae:f0:21:a6:7c:c0:7b:
a1:15:b8:3f:ca:87:8a:51:70:0f:60:8b:00:3d:b6:d1:d5:a2:
1a:05:ab:0d:4c:cf:ca:e9:38:b0:15:3c:3f:6d:da:e3:8d:e0:
bc:6e:c4:ba:05:67:af:6d:f3:5b:24:42:29:77:44:eb:44:fa:
b2:88:c2:05:6f:3a:d2:31:ed:99:19:ed:b3:96:95:9e:ad:0e:
33:75:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:49:43 2025 by rpki-client