Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5335CB6DBE811EFBF5D099D762E951A.roa
File: E5335CB6DBE811EFBF5D099D762E951A.roa (raw, json)
Hash identifier: rrYmixx9h+zIpLCvWvEdcK8myhUur2z8xkMHpUrBahI=
Subject key identifier: AB:74:E6:8C:0D:F6:6B:5F:9C:42:90:04:D5:7B:09:1C:E6:11:C8:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5335CB6DBE811EFBF5D099D762E951A.roa
Signing time: Sun 26 Jan 2025 13:24:40 +0000
ROA not before: Sun 26 Jan 2025 13:24:36 +0000
ROA not after: Wed 05 Mar 2025 13:24:36 +0000
asID: 48031
IP address blocks: 154.218.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84636 (0x14a9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:24:36 2025 GMT
Not After : Mar 5 13:24:36 2025 GMT
Subject: CN=67963798-e365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:22:19:58:6a:52:7b:81:68:a6:8e:47:3d:08:
41:ad:a7:9a:43:e2:ce:e3:0b:59:94:00:d4:b8:56:
72:c4:cf:61:5e:bc:c7:3a:2a:a2:65:65:2d:23:80:
70:74:b6:4b:51:ae:ab:56:6a:52:de:86:0c:35:7a:
bd:d7:9d:6f:3c:93:50:f4:64:c2:97:02:93:fa:ae:
1f:a6:83:a8:d3:50:52:55:b1:13:33:d0:a7:00:ee:
40:a5:94:8a:97:11:b3:ee:6c:a2:98:e2:0c:e8:93:
60:b5:2a:72:0c:c7:d7:92:0b:49:c5:d5:b0:b2:bd:
29:a2:51:18:37:12:26:15:f1:90:64:db:90:e7:c1:
c0:07:e7:88:81:2b:90:22:4b:75:54:71:1a:10:41:
36:0e:4e:a4:57:b3:e7:42:7d:1f:34:4e:50:e7:ea:
9f:f3:54:38:9d:37:10:48:3c:bf:8c:e8:e3:ed:af:
56:b2:da:c4:c8:1a:19:2e:42:d0:cb:bd:0e:a2:9e:
19:56:cc:c5:46:1b:13:90:07:b4:15:e2:82:30:9c:
f6:3e:65:52:6e:9c:c5:b7:17:11:fe:43:cb:12:9c:
84:48:fe:72:1e:96:20:3e:83:58:96:bd:d1:e0:46:
66:61:e9:1d:ab:f7:63:72:11:ca:c3:d5:53:ec:bd:
0d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:E6:8C:0D:F6:6B:5F:9C:42:90:04:D5:7B:09:1C:E6:11:C8:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5335CB6DBE811EFBF5D099D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:0a:47:31:7a:0c:89:33:ca:17:3c:06:46:18:b1:9a:9b:d3:
17:4d:3d:37:e2:62:b2:17:47:50:4a:f6:91:ef:54:45:02:d2:
79:8e:6b:7b:01:53:a5:22:7e:48:5b:8c:be:c6:b8:eb:d1:b1:
e0:3c:7c:c5:d8:38:68:c2:d8:0c:9b:eb:ca:4a:0f:81:1b:65:
fa:2e:9c:ef:fc:8d:88:f2:03:d5:e8:37:36:e3:54:ab:74:09:
74:44:80:a1:c3:80:ab:27:a9:38:61:8d:69:5d:92:f6:96:54:
73:09:72:a6:16:c9:42:64:98:c1:5a:80:ca:d5:3a:87:1a:55:
7d:a0:3a:b8:68:30:42:c6:91:42:8f:e8:02:e3:c6:76:69:bb:
ec:54:13:87:f8:2e:d6:a6:26:d9:e4:02:09:8a:e8:da:28:c2:
5e:1f:8d:fb:00:5b:4a:c3:53:6b:9c:7b:15:56:38:24:19:af:
99:57:dd:39:58:75:5e:65:57:c1:f0:1b:46:43:a6:aa:fd:88:
16:ef:b2:67:cf:a1:8b:b0:1b:6a:a5:f8:83:66:5e:f8:17:b3:
14:a2:34:f1:84:b7:e5:54:b0:89:10:9f:a1:65:ba:42:81:ee:
eb:a3:51:51:c8:95:d0:61:13:7e:95:53:5d:08:04:a6:21:25:
1c:ca:39:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:58:52 2025 by rpki-client