Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB99391CDCA611EF8A7B729E762E951A.roa
File: FB99391CDCA611EF8A7B729E762E951A.roa (raw, json)
Hash identifier: Ql1aOpcNh4MbGWmkyRgFcnOmemsXn64zp8+LCJn+ZAw=
Subject key identifier: 29:82:5E:D3:B4:B2:99:77:48:CC:79:F8:5C:1E:F1:F4:FA:24:13:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB99391CDCA611EF8A7B729E762E951A.roa
Signing time: Mon 27 Jan 2025 12:05:22 +0000
ROA not before: Mon 27 Jan 2025 12:05:18 +0000
ROA not after: Sat 08 Feb 2025 12:05:18 +0000
asID: 212238
IP address blocks: 154.202.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84979 (0x14bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 12:05:18 2025 GMT
Not After : Feb 8 12:05:18 2025 GMT
Subject: CN=67977681-e043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:14:eb:db:9a:8d:30:1b:2d:2c:ff:ea:40:
c2:13:22:6f:7c:4f:d2:c3:6e:97:82:01:da:0f:5f:
9d:ca:1d:ac:a7:9d:6d:12:08:7f:3c:56:c7:95:af:
09:c0:fb:d4:5c:be:c1:30:16:e3:f1:ae:2b:10:13:
05:27:2b:e9:ed:69:35:bb:7e:f4:05:dd:8a:a8:9c:
24:3d:b3:65:75:4d:4c:2d:60:d4:0f:5d:ed:96:c5:
06:c9:62:a0:37:b1:4c:ec:4d:87:cd:97:be:29:67:
b5:d4:fb:b5:39:e4:65:94:d1:cd:6e:38:9b:ec:e5:
85:9b:91:2a:ab:8b:12:24:48:b7:eb:11:8e:dc:94:
8e:68:42:54:f9:7f:1e:23:fb:4a:08:eb:07:55:3b:
b1:3d:46:3c:e2:e7:1a:83:f1:30:3f:19:59:c3:da:
2f:ec:d6:5b:5b:0d:72:0a:8a:13:36:f7:e9:e3:77:
d0:00:66:32:ad:3a:2b:6f:16:13:aa:e8:ed:41:c8:
7f:f0:75:93:4b:8c:cb:e4:93:72:cd:3d:9b:a6:9a:
94:45:0b:5e:9c:1a:0b:ba:bd:ba:13:15:6d:c5:ee:
c8:6e:9e:16:7c:dd:5b:3e:0f:51:a7:84:b7:00:3a:
00:b4:b2:78:49:94:fb:5a:d5:30:51:5f:03:88:33:
9a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:82:5E:D3:B4:B2:99:77:48:CC:79:F8:5C:1E:F1:F4:FA:24:13:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FB99391CDCA611EF8A7B729E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.31.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3e:8e:1a:a8:47:2f:6c:fc:8d:3f:7b:50:56:3b:bc:b2:9f:
29:d4:97:93:b0:14:af:d0:b9:d7:f0:10:e8:d4:3c:b6:1a:2e:
a4:e8:19:55:30:64:8a:6f:38:db:a1:b4:d5:6c:54:9d:cb:5d:
4b:e4:2d:ce:f8:fa:1d:bd:fe:4d:ce:cf:84:50:8f:00:49:69:
98:3a:12:86:f2:9f:03:5e:db:15:56:66:84:93:b2:4c:01:4c:
a2:97:a7:c0:30:f4:1d:62:e1:b3:a6:76:17:1f:ff:a7:49:95:
a9:79:e6:87:f5:7d:44:3b:b6:bd:9b:3d:81:24:c7:b2:86:04:
69:0f:98:1e:86:27:9c:82:1f:5b:11:2f:7e:b7:94:bb:1e:c6:
80:2e:c7:d6:06:e1:06:51:10:33:1b:47:1d:b7:4d:b7:71:73:
22:a4:a2:9b:e3:cc:9b:77:9a:32:25:00:8d:0e:b7:08:68:62:
16:e0:01:c4:ca:7b:79:ef:6b:c8:f2:a8:f9:6d:cc:c1:79:87:
ed:22:ee:af:ad:ec:f4:57:9a:91:e7:25:b5:1d:a0:dc:b7:28:
fb:c5:b6:d0:af:41:d5:3e:11:af:f5:9c:a3:ff:89:22:b0:96:
3d:62:37:7e:66:9d:91:66:4d:c5:df:c4:14:fc:af:eb:3c:ff:
23:f0:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:09:08 2025 by rpki-client