Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/AE10BD027B3D11EFA19A5950762E951A.roa
File: AE10BD027B3D11EFA19A5950762E951A.roa (raw, json)
Hash identifier: pBZPZsU0a4Hyx7jC1O2ChKZlKrJuIUtFfo6uMv2dY6Q=
Subject key identifier: 8A:C0:3E:D5:CC:D8:D8:B0:41:5A:CC:CC:65:34:E7:45:24:84:7F:75
Certificate issuer: /CN=F363EA80AF/serialNumber=C67C6231120941235581D5942565ABF7419DCECC
Certificate serial: 0246
Authority key identifier: C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/AE10BD027B3D11EFA19A5950762E951A.roa
Signing time: Wed 25 Sep 2024 12:57:12 +0000
ROA not before: Wed 25 Sep 2024 12:57:08 +0000
ROA not after: Mon 25 Sep 2034 12:57:08 +0000
asID: 19711
IP address blocks: 154.119.96.0/22 maxlen: 22
154.119.100.0/22 maxlen: 22
154.119.100.0/24 maxlen: 24
154.119.101.0/24 maxlen: 24
154.119.102.0/24 maxlen: 24
154.119.103.0/24 maxlen: 24
154.119.104.0/24 maxlen: 24
154.119.105.0/24 maxlen: 24
154.119.106.0/24 maxlen: 24
154.119.107.0/24 maxlen: 24
154.119.108.0/24 maxlen: 24
154.119.109.0/24 maxlen: 24
154.119.110.0/24 maxlen: 24
154.119.111.0/24 maxlen: 24
154.119.112.0/24 maxlen: 24
154.119.113.0/24 maxlen: 24
154.119.114.0/24 maxlen: 24
154.119.115.0/24 maxlen: 24
154.119.116.0/24 maxlen: 24
154.119.117.0/24 maxlen: 24
154.119.118.0/24 maxlen: 24
154.119.119.0/24 maxlen: 24
154.119.120.0/24 maxlen: 24
154.119.121.0/24 maxlen: 24
154.119.122.0/24 maxlen: 24
154.119.123.0/24 maxlen: 24
154.119.124.0/24 maxlen: 24
154.119.125.0/24 maxlen: 24
154.119.126.0/24 maxlen: 24
154.119.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 582 (0x246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363EA80AF
Validity
Not Before: Sep 25 12:57:08 2024 GMT
Not After : Sep 25 12:57:08 2034 GMT
Subject: CN=66f408a8-5784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:b4:d0:92:ff:60:63:f4:1b:1a:76:bf:ce:
e4:43:a7:dd:c4:c9:21:49:3e:a0:66:1a:ca:8f:25:
55:d0:2f:51:0e:64:8e:2c:ba:62:c3:20:8c:cb:04:
35:96:7e:50:28:b8:70:04:ec:ac:8d:88:ab:4a:44:
bd:f0:4e:67:5c:17:71:d2:7f:63:ac:50:83:d9:7d:
49:31:ce:48:57:de:55:8b:d8:a9:40:4c:49:5f:d3:
71:eb:92:80:41:63:09:de:64:7a:36:b0:d6:89:9c:
b0:45:35:12:e5:7a:ca:b7:25:9a:d9:71:e5:f9:a1:
cd:99:ac:70:76:c8:69:f0:56:6d:73:e7:22:2c:e3:
f6:40:92:75:32:b5:0c:f5:65:8e:c8:91:10:32:c8:
bc:a4:6c:42:6f:22:df:d9:ce:5a:91:b5:5a:f1:3a:
85:c4:73:07:1b:19:6b:29:2f:7f:e8:0f:f7:b2:b4:
dc:f7:5a:16:59:06:b3:07:ca:ec:34:18:c7:28:80:
c7:70:bc:1d:b5:60:a9:55:eb:fc:05:3d:15:00:7e:
dc:eb:f2:34:59:09:54:63:44:37:42:a1:d5:56:3f:
5b:e1:4f:3e:19:3a:c5:eb:a9:bd:f0:f9:7c:12:57:
5b:16:72:58:06:ca:81:18:10:c0:d3:0c:a4:0b:6a:
34:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C0:3E:D5:CC:D8:D8:B0:41:5A:CC:CC:65:34:E7:45:24:84:7F:75
X509v3 Authority Key Identifier:
keyid:C6:7C:62:31:12:09:41:23:55:81:D5:94:25:65:AB:F7:41:9D:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/xnxiMRIJQSNVgdWUJWWr90Gdzsw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xnxiMRIJQSNVgdWUJWWr90Gdzsw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/23D54B28DDDA11ED86532E0D306D8C1D/AE10BD027B3D11EFA19A5950762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.119.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:76:c7:88:16:77:0c:ca:62:f9:07:55:10:b3:8e:8e:f6:eb:
33:ed:83:7f:2d:93:1d:45:4c:5f:eb:6e:81:fc:1b:fa:c2:bf:
7d:d5:1e:03:0c:f9:4c:b4:ce:54:24:b8:a8:3e:d4:4c:4e:3e:
7d:8a:07:16:dd:06:8a:83:46:43:c1:c0:e4:29:18:45:5d:cf:
de:0d:52:5e:b6:d8:ce:f2:24:b9:b9:88:93:3a:33:39:f1:9b:
21:24:56:92:f2:e3:fe:61:43:0a:28:10:57:eb:60:b8:95:8f:
39:00:68:e5:73:a6:2b:22:93:7c:5e:cd:91:03:b8:a7:2f:27:
49:eb:ba:92:20:39:f9:34:a2:25:1b:31:49:03:05:18:16:5d:
74:15:99:e5:0b:4f:bd:24:d0:ac:29:fa:46:9a:ab:4b:02:ed:
e9:6d:7d:92:05:f9:b0:c6:fa:0d:c7:3f:36:46:43:5c:1e:94:
8d:d4:06:39:42:3c:10:c7:78:b2:7c:b3:a1:86:34:90:11:0e:
7e:69:01:cf:23:91:38:ad:a2:36:1f:4e:26:88:38:13:e8:8e:
8a:4a:5a:a7:53:c1:c7:06:17:6b:73:bd:80:c8:30:d9:21:fc:
95:d0:db:96:91:a8:9b:cc:fd:07:36:45:fb:5b:8f:89:ab:b5:
69:fd:3e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:58:46 2025 by rpki-client