Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE86028ADA3411EFAF4BAD9B762E951A.roa
File: CE86028ADA3411EFAF4BAD9B762E951A.roa (raw, json)
Hash identifier: Gd5oC63zBgQAPvVc8+hoJ8d205MN4AFnYX6PkWI8v4s=
Subject key identifier: 8D:C0:F0:41:AA:3F:EB:D4:4D:7A:F7:D1:0C:7D:DB:9A:D7:C1:C1:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE86028ADA3411EFAF4BAD9B762E951A.roa
Signing time: Fri 24 Jan 2025 09:23:01 +0000
ROA not before: Fri 24 Jan 2025 09:22:57 +0000
ROA not after: Wed 05 Mar 2025 09:22:57 +0000
asID: 202656
IP address blocks: 154.219.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83171 (0x144e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:22:57 2025 GMT
Not After : Mar 5 09:22:57 2025 GMT
Subject: CN=67935bf5-4abd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:63:8c:10:d1:1e:46:62:1b:de:d7:30:8a:b4:
cd:a7:22:ae:ed:2e:4a:f0:98:81:dc:d4:57:74:1e:
78:33:89:32:1f:ee:d5:ea:98:6e:6b:c4:c7:22:f4:
05:13:fb:1c:81:48:bd:da:ba:ab:a5:c0:0b:4b:2b:
05:33:f6:52:4b:48:61:47:ff:82:22:28:fd:1d:08:
ce:e9:83:97:39:ff:21:4c:10:1f:e4:48:04:bb:72:
16:05:a1:1d:52:f5:f9:df:92:5d:f5:7b:19:cb:33:
95:be:6f:1c:a6:41:5b:cc:d0:b1:71:b6:69:9f:24:
68:1c:d5:79:bf:9e:b5:88:57:f5:3c:a2:be:8c:8b:
bd:31:4b:57:88:52:dd:8f:5f:44:03:0c:59:bc:82:
34:a0:30:40:99:9b:d8:d1:25:70:53:36:5f:9d:bd:
fd:ca:cf:43:01:e1:49:9e:5f:77:a4:11:dc:bf:97:
b7:7c:ff:d7:75:3e:03:34:ed:70:98:86:a7:b2:f4:
15:6e:37:c4:90:ad:a1:7c:36:b6:ae:4a:9d:f8:11:
6a:71:86:56:d4:5b:b2:85:f0:b1:94:66:d3:ac:61:
be:d9:9b:e8:56:e1:13:ab:2f:02:74:75:6b:37:29:
4d:80:d3:51:70:ec:7d:eb:13:fc:ec:20:ff:54:ea:
e3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C0:F0:41:AA:3F:EB:D4:4D:7A:F7:D1:0C:7D:DB:9A:D7:C1:C1:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE86028ADA3411EFAF4BAD9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.214.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ac:5c:aa:76:e3:86:15:cb:d4:ac:f5:9c:ca:a3:6e:45:8f:
d9:bb:bb:70:d2:7d:02:d8:d6:7b:46:a1:07:a5:e1:32:d8:4b:
01:f5:35:95:3d:b5:95:dd:00:23:d0:16:27:ae:46:aa:3e:9e:
68:b3:df:c8:2a:19:d4:d2:e3:db:cc:d3:c4:d7:3e:f0:34:06:
5c:4f:88:b0:68:4a:e4:7b:d3:db:b9:ca:3f:1e:d3:d8:84:e4:
76:33:e4:61:fe:7a:a5:6f:ae:27:42:0b:2a:ef:3b:e2:73:35:
b6:d0:39:cc:70:f7:60:f7:24:16:58:b0:be:6d:f3:37:77:b2:
69:aa:87:63:bc:a8:de:f4:33:e6:5d:bd:8a:cd:49:fd:17:ae:
9c:5d:c1:83:05:ab:cc:30:f3:26:03:83:55:c3:17:b9:f8:5d:
dd:95:ca:7c:45:86:fc:fc:21:13:8b:b8:73:e3:a9:4e:7d:09:
7b:fc:fa:88:46:fb:ca:fb:c2:b5:67:44:1b:b9:6b:13:0c:ae:
d8:f8:2e:3a:a0:92:bf:e8:11:6d:54:f1:d7:d3:e9:92:2c:34:
8e:7b:a3:d4:59:a8:cf:83:8e:aa:a3:53:ce:e1:93:cb:d8:8a:
34:a7:60:d8:cc:bd:a8:be:6f:0d:37:ee:eb:5c:ff:dd:a8:f1:
b8:ec:f5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:37:32 2025 by rpki-client