Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9C205A6DA3111EF9C461689762E951A.roa
File: E9C205A6DA3111EF9C461689762E951A.roa (raw, json)
Hash identifier: WafPFRT5Ez6Bz5WFEPAM8a6dDUA9+OaNn2/NoW9iTCY=
Subject key identifier: B0:FE:CF:91:1E:67:B3:9C:DD:88:53:53:06:10:D1:98:71:BD:B1:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0144AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9C205A6DA3111EF9C461689762E951A.roa
Signing time: Fri 24 Jan 2025 09:02:18 +0000
ROA not before: Fri 24 Jan 2025 09:02:14 +0000
ROA not after: Wed 05 Mar 2025 09:02:14 +0000
asID: 202656
IP address blocks: 154.219.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83119 (0x144af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:02:14 2025 GMT
Not After : Mar 5 09:02:14 2025 GMT
Subject: CN=6793571a-d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:52:0b:70:86:bf:b0:b0:d8:5d:49:06:b2:d8:
43:bf:2f:18:4f:05:c9:c4:a4:c7:96:6f:a6:d0:96:
d0:44:c9:2e:d8:59:9b:9d:41:43:f9:8a:e4:b7:2b:
e8:97:f9:a1:fe:4d:00:8e:0f:67:4e:f6:44:ba:49:
71:15:7b:bd:7b:f2:50:6c:c0:d2:76:fa:4b:46:84:
1f:dc:da:1c:e4:5f:cc:58:0e:a2:47:81:62:0b:a3:
bb:7c:78:36:b0:de:b1:1d:21:ce:51:e3:ab:84:a8:
fe:9f:d4:cd:16:bf:89:67:ac:a6:6f:b4:ff:84:5b:
6a:55:ed:21:98:9a:45:ca:e7:f3:2d:62:2e:c6:25:
8b:51:9f:52:64:75:f2:68:9a:19:aa:6e:57:e6:e2:
ed:09:03:69:25:37:08:cc:8f:f2:a0:a3:5c:9b:49:
55:b4:62:71:67:16:f4:6c:91:28:78:3b:be:95:57:
75:fd:92:4e:d3:a4:06:89:57:71:fb:75:a1:fb:4c:
47:6a:bb:ef:82:2d:70:d5:90:77:c7:62:36:ac:2d:
a8:4d:50:d2:22:c9:a2:e2:73:16:61:22:b5:a2:dc:
45:91:cf:f0:d4:d7:33:df:69:b8:8c:62:f6:10:b8:
17:93:b3:39:39:cb:18:b6:89:21:84:e5:99:c0:ed:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:FE:CF:91:1E:67:B3:9C:DD:88:53:53:06:10:D1:98:71:BD:B1:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9C205A6DA3111EF9C461689762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e2:40:b5:4d:64:e4:40:bb:44:29:79:17:57:04:a1:af:ad:
bb:42:ba:08:23:2d:25:32:b4:dd:7c:e8:4c:58:2b:31:85:96:
3e:e8:0f:f6:b8:53:48:a8:d5:c5:e3:36:08:f4:dd:59:8e:0a:
22:86:52:df:e7:fe:df:1e:10:55:d4:69:b7:f8:6c:ef:5b:bf:
68:30:47:c8:9f:88:66:d7:38:c2:93:8c:a8:5d:9f:56:c0:59:
b5:c0:de:ae:18:c6:4f:08:64:9c:83:2f:74:71:e1:d3:f4:89:
5b:81:6d:f1:64:af:ce:b1:63:23:ef:e1:9e:91:c5:9a:39:60:
3d:67:7f:86:85:d6:7d:5b:e9:8e:3c:2f:45:9e:06:88:b6:20:
89:e3:10:d0:40:a7:05:93:d2:b5:ad:46:bd:07:e2:88:9b:dc:
37:29:f4:37:bf:9e:1f:00:b5:35:c0:80:35:76:4e:05:af:57:
49:11:2a:58:65:86:88:48:46:42:ff:83:0f:f7:da:32:ea:5c:
6f:df:c9:61:f7:09:30:cf:fe:dd:b9:37:b4:f8:15:e4:f8:dc:
a9:44:0e:8e:72:7f:95:2c:aa:24:4e:51:a8:e0:9a:2a:5b:fe:
b7:9c:10:5b:65:17:e4:48:ec:d3:b2:d8:4a:03:ec:44:01:90:
8a:e0:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:59:58 2025 by rpki-client