Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A37BD8DA3511EF99B713A1762E951A.roa
File: E8A37BD8DA3511EF99B713A1762E951A.roa (raw, json)
Hash identifier: Sag7ep8uCqWQYs6XyXsca9Tke8HUxPXxRzikthw3J+w=
Subject key identifier: B1:51:63:A6:6C:3D:3A:29:F1:04:FA:06:BA:BC:AA:7F:48:73:97:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A37BD8DA3511EF99B713A1762E951A.roa
Signing time: Fri 24 Jan 2025 09:30:54 +0000
ROA not before: Fri 24 Jan 2025 09:30:51 +0000
ROA not after: Wed 05 Mar 2025 09:30:51 +0000
asID: 202656
IP address blocks: 154.219.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83187 (0x144f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:30:51 2025 GMT
Not After : Mar 5 09:30:51 2025 GMT
Subject: CN=67935dce-518d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:e7:cb:b7:c0:50:4e:a9:a4:68:a9:6a:ff:
3b:42:e3:d3:6d:11:af:45:ff:80:68:12:78:58:82:
50:0f:8e:eb:19:93:1e:54:70:2c:13:e0:aa:f7:ff:
79:15:05:87:de:40:0a:f3:aa:70:79:82:e0:67:2c:
8e:84:27:fa:6f:47:29:3a:11:04:43:32:b5:c3:14:
cd:12:e5:55:29:2b:97:63:6a:9a:d5:fc:57:78:8c:
61:3f:a9:65:2b:37:47:7b:86:17:c5:d8:bd:b1:68:
fc:58:37:27:84:a4:e6:3a:ca:a7:38:81:65:f9:ee:
e3:36:0e:ca:ed:aa:e0:89:a8:c0:3c:96:16:19:c8:
56:7f:39:aa:48:82:42:cd:cc:45:b8:b0:34:39:39:
cc:7f:53:c6:81:e3:1c:b6:65:a1:d9:4f:b4:fb:56:
6c:65:08:60:c8:64:0c:97:66:74:ac:89:8c:30:53:
a1:a9:ac:f9:33:ef:10:42:31:59:25:59:d0:48:a2:
48:36:65:92:d7:6e:d3:f5:98:4d:83:e6:6e:78:22:
bc:1b:13:82:6e:11:4f:27:8c:2e:a2:1c:72:e5:59:
b4:c9:30:f5:a2:29:a5:04:a3:e3:29:5f:b9:3b:bd:
77:cc:17:e8:77:af:4c:1e:8c:d4:75:b7:1a:2f:1c:
0b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:51:63:A6:6C:3D:3A:29:F1:04:FA:06:BA:BC:AA:7F:48:73:97:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A37BD8DA3511EF99B713A1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.218.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:fe:ff:79:bf:50:9a:87:f1:5d:68:7e:d8:d2:62:77:12:b7:
e8:dc:a3:4e:ec:35:89:75:fc:d7:49:ee:87:06:70:8c:ee:47:
05:cc:07:71:99:11:4c:fb:54:c9:9f:6b:c5:3b:a0:c8:9b:dc:
c0:d7:ac:18:c4:a9:8e:92:69:60:72:42:41:f4:85:7e:da:d6:
9d:f2:dd:93:50:98:19:fc:56:8e:cb:5f:bd:06:bb:b1:2c:e4:
ad:d4:58:2c:a7:42:69:83:da:7e:f3:a8:6b:2e:6e:4f:c5:97:
f8:0e:28:46:b1:34:24:67:d4:0c:b5:2f:57:a0:8a:f0:16:77:
dd:c3:09:06:cf:29:15:3b:34:5a:18:50:23:52:c1:17:47:91:
ee:2a:5b:a8:d9:b6:91:ae:1c:8a:82:3c:5b:ac:8e:d0:6a:04:
e4:ef:3c:33:eb:41:01:0d:32:9b:38:86:02:e3:7c:bb:7e:63:
1b:3b:c6:89:ec:d4:d6:d7:c9:51:da:b6:49:18:a4:22:c9:47:
39:29:e6:83:28:42:c4:b3:ab:c1:bd:a0:e7:84:cd:e1:ad:41:
78:5e:fe:5c:05:c6:b0:3f:cc:9b:c5:36:02:62:7c:a1:5f:03:
34:4d:92:58:ec:82:c5:b0:6c:e6:44:f0:bd:de:ba:15:89:74:
9c:ad:22:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:59:44 2025 by rpki-client