Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E48CB088DA2F11EF8E9C287B762E951A.roa
File: E48CB088DA2F11EF8E9C287B762E951A.roa (raw, json)
Hash identifier: fT+HwtoqA0NN/i70QR5TTN2yhDtznxlLEFuJ99184W4=
Subject key identifier: 03:4C:1F:7C:2D:13:C8:9D:4A:84:62:AD:0E:C0:9F:AF:A9:97:F5:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01448F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E48CB088DA2F11EF8E9C287B762E951A.roa
Signing time: Fri 24 Jan 2025 08:47:50 +0000
ROA not before: Fri 24 Jan 2025 08:47:47 +0000
ROA not after: Wed 05 Mar 2025 08:47:47 +0000
asID: 202656
IP address blocks: 154.219.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83087 (0x1448f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:47:47 2025 GMT
Not After : Mar 5 08:47:47 2025 GMT
Subject: CN=679353b6-be0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:9f:c4:27:0c:cf:e7:ad:81:c2:9c:e5:93:
e5:4a:83:c6:3d:a2:e8:66:98:66:b9:cd:fd:6a:35:
27:1a:98:67:99:dd:b5:ba:13:d7:e3:93:71:68:d4:
fd:f3:8e:6c:48:25:f0:f1:01:c4:9c:b8:37:ad:88:
13:14:e0:3b:d3:6e:ad:e1:a0:94:d7:4b:1c:a4:49:
30:7f:ec:26:29:37:5c:98:95:ed:92:44:5d:88:d2:
6a:9b:6a:2c:51:ca:ff:2e:79:8f:1c:74:a3:8a:db:
95:42:c2:7a:e2:a0:cd:c4:5c:06:04:b2:cd:40:1c:
74:28:7a:61:8f:a0:a3:c4:10:9c:fa:9a:89:45:d0:
46:80:c1:9c:a6:6e:c8:c1:dd:a9:64:66:0a:68:da:
73:55:12:8b:43:2d:52:d1:3f:00:f0:db:87:7c:b9:
dc:91:77:e1:ca:4c:af:d7:b2:d7:2f:df:63:8e:36:
43:ab:a6:ce:1d:b0:ee:dc:a7:84:4d:b8:df:77:4b:
20:ab:55:47:04:f5:c5:eb:63:2d:20:85:6f:1d:f8:
45:d9:6d:99:a5:c2:fb:29:09:9f:c1:e1:d4:0e:b1:
90:16:3c:81:76:75:3c:9b:e6:65:48:17:69:8d:9a:
31:da:b5:22:cf:0b:86:13:c1:28:a3:90:c1:11:50:
eb:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:4C:1F:7C:2D:13:C8:9D:4A:84:62:AD:0E:C0:9F:AF:A9:97:F5:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E48CB088DA2F11EF8E9C287B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.194.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:ed:42:db:75:39:b4:31:8d:d7:20:8c:6b:83:19:23:9f:ec:
a8:ad:b2:d6:e2:7a:8a:04:1a:c9:1f:52:31:c9:de:17:b9:da:
25:9d:00:d1:cf:d6:be:0d:18:28:0f:32:67:90:d2:14:42:c0:
85:ab:a9:65:08:eb:1f:42:dd:e1:66:19:ea:17:ba:22:74:07:
22:4b:3c:d5:56:af:95:f8:3e:26:ee:94:2b:88:6f:69:62:1b:
ec:15:e2:46:d1:ae:72:eb:c6:92:c2:1d:84:ea:99:8f:4e:fa:
22:0c:91:9c:f3:3b:dd:20:49:92:72:72:fd:29:d6:7d:2e:97:
d2:8d:fa:7f:44:b8:e7:01:89:c9:ae:ac:b1:39:be:dc:42:57:
61:ea:f8:51:1e:d8:0f:1e:b0:69:a1:45:85:52:75:76:87:3d:
16:61:8b:2b:9e:60:62:3a:82:69:48:ac:0c:f0:4a:9a:7b:19:
be:b3:46:76:45:f7:6f:0c:c4:c7:0b:62:c6:5d:90:76:d3:f0:
5a:f6:0b:0e:a3:15:5f:8b:c1:7c:72:50:ff:f4:27:35:fd:f3:
55:cd:d5:81:ab:04:f0:8f:66:9c:f4:c5:da:a7:0f:4d:a9:04:
01:e1:16:64:e1:c4:ef:eb:27:70:32:de:52:a1:29:74:49:4a:
11:75:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:20 2025 by rpki-client