Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB0F105EBEB711EFA4DCF780762E951A.roa
File: BB0F105EBEB711EFA4DCF780762E951A.roa (raw, json)
Hash identifier: xIfVQsW+7K37Y/DjYFXk6GJGkUn/P6BOY3nzFNYz5n4=
Subject key identifier: 43:FF:7D:18:D0:14:FB:86:9C:65:E4:9A:BB:40:C3:1F:70:42:D6:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB0F105EBEB711EFA4DCF780762E951A.roa
Signing time: Fri 20 Dec 2024 09:49:40 +0000
ROA not before: Fri 20 Dec 2024 09:49:36 +0000
ROA not after: Sun 02 Feb 2025 09:49:36 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72912 (0x11cd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:49:36 2024 GMT
Not After : Feb 2 09:49:36 2025 GMT
Subject: CN=67653db4-a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:48:d5:68:13:3e:0a:4e:15:7c:b5:18:76:02:
85:f3:4c:af:2a:c6:eb:96:72:15:ea:89:6c:16:82:
5a:45:d4:4c:79:9e:76:01:32:97:92:1e:78:0d:9b:
b7:cc:01:0d:51:2a:2f:70:b9:d4:c9:1e:1b:86:cb:
eb:99:20:8d:2e:aa:52:da:5f:fc:09:34:57:43:b5:
a5:0c:ee:b2:16:89:24:a2:c4:d0:c9:12:f0:c8:c1:
4d:c9:87:f3:51:9b:77:7e:e9:d0:6a:98:a2:b8:9f:
75:54:a6:2b:49:24:ef:45:6c:f3:5d:74:57:d9:c5:
4d:17:c2:2c:d2:b8:14:c1:e4:a9:50:02:a8:e7:de:
7d:9e:1e:e2:d5:f5:3c:81:e7:9e:1e:a9:fc:8e:dd:
19:58:2d:44:b8:88:a9:45:00:ea:db:46:70:ca:6a:
1f:01:d5:45:f6:af:bf:14:ab:d4:9d:4a:74:16:d3:
6b:b8:b7:83:0f:51:0a:85:d3:2b:43:72:d8:d7:88:
66:0a:e1:24:56:8d:6c:b8:52:24:28:97:01:ad:be:
51:cf:5c:72:ff:81:6a:58:ce:03:e3:16:4d:0f:68:
8c:d4:b6:d1:55:62:0f:2a:7a:b5:b0:2c:4f:a0:a1:
33:8f:55:f4:3a:ae:eb:c4:bc:1c:80:b6:72:8d:97:
b4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FF:7D:18:D0:14:FB:86:9C:65:E4:9A:BB:40:C3:1F:70:42:D6:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB0F105EBEB711EFA4DCF780762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b0:a0:dd:02:2e:13:74:1d:07:fe:07:fe:c6:4b:41:e4:17:
b0:38:9d:0a:9a:a6:25:a7:86:ec:ed:9f:72:58:ce:41:3c:66:
bc:1e:90:d1:cb:12:77:3e:13:d1:9c:76:3e:39:a1:81:65:0e:
d5:68:f6:cb:5a:aa:8a:7a:f5:6b:06:bc:02:9b:1a:86:14:9a:
a4:82:f6:d3:e5:64:bd:de:34:93:74:f0:3f:00:50:1e:91:b8:
02:1a:47:36:29:0b:91:64:6e:e5:c2:9d:c5:8e:54:96:21:7d:
f3:0e:99:84:b9:6d:71:de:db:e4:32:49:bc:44:39:02:97:87:
b9:5c:6f:56:57:54:c4:fb:12:a7:32:8b:e5:de:87:28:9d:30:
43:62:82:8c:4d:e4:91:2c:d0:44:62:95:8e:64:29:3e:b9:b6:
67:e4:8d:21:d9:be:6a:b7:0b:e2:ab:2b:a7:fc:39:7f:41:c3:
0f:ca:88:cd:cc:5d:37:2f:e7:24:f6:b1:02:60:b8:73:38:a2:
53:42:e4:85:16:78:e1:1d:21:d5:bc:49:5c:99:20:4d:69:63:
ab:26:2b:c0:7a:4f:01:fa:0a:30:f0:73:02:a7:2b:85:2c:b3:
92:e9:7d:ca:4d:47:26:59:e1:d1:e3:9b:7f:5f:f4:72:15:ff:
a5:de:6d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:42 2025 by rpki-client