Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2229F16DA3311EF9A221F95762E951A.roa
File: E2229F16DA3311EF9A221F95762E951A.roa (raw, json)
Hash identifier: RPLxBMU1WMMhsQsnXjc2IbYojRA1gKMjIuS7yW8amzg=
Subject key identifier: F2:BA:D9:AA:73:86:C4:91:37:E0:0F:B2:42:6F:B4:6D:56:EE:82:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2229F16DA3311EF9A221F95762E951A.roa
Signing time: Fri 24 Jan 2025 09:16:24 +0000
ROA not before: Fri 24 Jan 2025 09:16:21 +0000
ROA not after: Wed 05 Mar 2025 09:16:21 +0000
asID: 202656
IP address blocks: 154.219.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83154 (0x144d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:16:21 2025 GMT
Not After : Mar 5 09:16:21 2025 GMT
Subject: CN=67935a68-8d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:2f:2c:27:f2:43:92:5f:25:75:b1:98:62:
d8:ba:f7:8d:ea:bc:0b:83:14:98:da:19:60:3b:cc:
88:57:32:92:90:9e:6c:8f:56:cc:c8:c8:89:a3:51:
ef:32:c7:0f:50:04:e8:b9:21:ea:74:b4:e9:66:a8:
26:99:a6:e4:87:f6:e5:0a:f6:b5:39:5e:ee:5d:20:
6f:27:88:fd:be:63:0a:80:08:3a:0a:ac:03:01:7b:
65:dd:4a:88:48:92:b2:6e:10:19:97:02:44:1d:f6:
b4:3a:7a:27:e1:1e:94:25:2e:80:36:0f:be:46:ff:
41:6b:f7:2c:55:8f:07:27:9c:a7:d9:78:bf:88:f7:
fb:06:4e:77:e0:a7:ae:15:e1:dc:0a:f5:df:8d:7f:
19:df:9f:95:8b:e4:44:a6:5d:85:ea:2f:85:04:af:
e7:8b:78:5e:08:d0:98:5f:61:b4:c3:4d:86:ec:42:
a9:20:e9:11:75:89:59:1d:63:48:8f:f7:11:88:7f:
d6:79:7b:19:fb:83:78:7d:8f:26:b1:fe:9b:f5:6f:
a4:1d:65:47:4e:02:b6:e8:5f:e1:7e:fe:4f:60:c6:
5d:85:42:2e:01:a9:87:cd:dc:e4:c6:8a:99:e1:b3:
e8:58:8e:b8:3b:66:6d:a5:13:60:e4:2d:76:b9:b5:
23:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BA:D9:AA:73:86:C4:91:37:E0:0F:B2:42:6F:B4:6D:56:EE:82:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E2229F16DA3311EF9A221F95762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.210.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fc:f1:86:f8:0a:aa:ab:29:23:71:d5:26:bc:93:6c:fd:64:
e1:95:bd:20:27:46:d8:97:1c:d2:43:06:37:8a:b7:1e:f3:7a:
cc:d8:17:58:99:34:4c:9e:04:e6:c2:39:b8:5b:f4:25:51:08:
87:a7:a8:1a:ca:66:3a:b4:ad:0e:cc:2b:39:fd:94:ec:4a:fe:
c8:b1:19:c3:8c:01:17:72:bb:9d:86:f5:d8:cc:74:5b:69:60:
ea:87:4e:49:1d:c6:a7:47:97:24:17:ae:84:cf:08:c2:bb:bb:
91:5e:72:c7:47:33:85:c0:39:74:2b:51:17:c4:2e:f6:62:56:
43:55:d6:a7:65:68:5d:a8:85:3b:8e:6d:6f:58:ed:71:05:f9:
20:77:31:3e:56:7f:f2:61:2f:28:a3:ec:dc:4a:b3:8d:6f:a4:
ac:d6:40:8f:84:16:69:34:fc:47:3b:ec:f1:1c:71:8f:61:37:
28:06:18:0d:d9:3a:1f:c6:62:b0:a2:39:8a:12:20:3a:07:56:
9e:dc:93:b5:a0:6c:ed:fe:83:0b:11:bd:ce:95:c5:5d:5f:3f:
2b:e7:58:a7:70:81:03:b9:25:11:fc:1f:d1:bb:10:7b:62:60:
38:21:17:e1:c5:fd:ac:39:36:c6:35:c3:b8:30:fb:a3:3c:83:
6b:20:36:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:01:36 2025 by rpki-client