Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01939F04E2D011EF8C5D5FAA762E951A.roa
File: 01939F04E2D011EF8C5D5FAA762E951A.roa (raw, json)
Hash identifier: 6jT2WfIgSR0lCokh+BmnPwp4vjdqD3ePQ0zVehUwvco=
Subject key identifier: BB:55:F5:E7:A0:06:EC:F9:80:36:7E:CD:46:18:E7:BA:37:05:F4:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01509A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01939F04E2D011EF8C5D5FAA762E951A.roa
Signing time: Tue 04 Feb 2025 08:14:08 +0000
ROA not before: Tue 04 Feb 2025 08:14:04 +0000
ROA not after: Wed 30 Apr 2025 08:14:04 +0000
asID: 18229
IP address blocks: 154.210.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86170 (0x1509a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 08:14:04 2025 GMT
Not After : Apr 30 08:14:04 2025 GMT
Subject: CN=67a1cc50-8a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:f3:ac:58:b8:49:d8:01:e2:c1:ea:32:80:
a4:0d:8a:46:40:17:cf:c8:0f:b3:35:9c:8d:3c:cc:
67:4e:c3:e3:0a:8e:ef:ad:95:9c:a1:4e:6c:32:c9:
8f:21:c4:1b:78:9c:cd:eb:e2:6d:af:a7:3b:74:3b:
a6:c7:9a:bd:6b:27:76:c8:fb:29:c9:84:0d:05:8a:
1b:e7:88:0d:cf:58:f3:9b:b1:30:4c:e2:96:e8:9e:
c1:9d:d6:31:3b:a0:af:1b:9e:bf:7a:fd:4b:59:48:
e2:10:a1:f4:da:fe:51:c4:a6:fa:f3:35:23:37:98:
ac:ac:19:e0:fc:76:4d:29:08:66:a3:4d:f8:f1:a4:
5d:03:c5:e7:ed:42:c5:28:de:4c:7e:b8:15:99:bf:
44:25:8e:cd:cb:c1:f9:e7:9a:dc:59:09:cb:d4:49:
91:fd:95:6c:32:6b:ff:9b:bb:3a:27:f1:d8:80:2a:
d0:80:ef:d5:2d:f2:c7:b8:7b:aa:b0:b8:a4:13:eb:
40:78:0d:a0:95:21:f1:73:8c:83:75:4c:57:aa:ee:
2a:cf:a7:38:23:37:d9:02:f0:76:6b:34:cb:df:6e:
91:04:ef:ee:fa:2c:fa:e9:f2:86:13:e6:28:20:1b:
07:b5:a5:ae:5e:29:da:6b:c5:6f:bd:4f:cf:3c:9a:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:F5:E7:A0:06:EC:F9:80:36:7E:CD:46:18:E7:BA:37:05:F4:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/01939F04E2D011EF8C5D5FAA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:b9:37:17:a9:2e:43:b7:5f:0d:2c:1b:c8:02:96:77:d6:b1:
69:68:4f:ba:16:a8:e9:92:26:74:d6:15:4c:d3:79:25:91:e0:
8b:7f:90:88:d3:eb:13:2a:34:25:42:55:a3:6e:c9:66:a2:88:
12:25:8d:da:dd:98:58:21:8a:ee:25:b1:8c:cb:7c:98:4e:3a:
16:88:1e:55:d7:8e:99:00:5c:94:03:1f:2e:2f:2c:de:62:f5:
ab:33:8a:7f:92:83:6e:99:61:f6:98:1c:46:44:1c:e9:7a:07:
30:2b:53:aa:03:17:05:6e:37:39:3c:4e:a5:28:dc:d6:62:72:
e4:5b:5c:a0:9e:74:f7:46:78:42:d9:44:4e:21:32:02:fb:87:
a2:33:20:a1:1b:4b:a9:15:4c:92:13:d5:13:bf:95:49:cd:f3:
06:6e:5b:3c:38:d7:ad:59:b4:ae:3e:41:da:0f:b4:04:f7:ea:
6b:ce:b8:6a:11:c1:ea:22:f2:d7:5e:43:e4:e4:f4:40:36:4a:
d1:74:c2:62:81:c9:97:d1:80:6e:e3:d1:9f:a8:b5:d0:9a:3c:
4f:33:54:af:63:84:0a:00:52:cb:08:e4:3a:d7:62:40:4b:c1:
92:11:73:6b:52:c4:b1:4a:23:94:15:a4:09:7e:ba:6c:74:24:
1a:71:80:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:24 2025 by rpki-client