Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA963426D4B311EF938C75BD762E951A.roa
File: EA963426D4B311EF938C75BD762E951A.roa (raw, json)
Hash identifier: ph5G2uRMJMO/hn1dxoGXl3jx5vGbj2tPeboTos4fd7U=
Subject key identifier: 80:FA:B1:C5:14:0F:92:5D:4A:08:C6:EE:53:B7:28:99:D9:8B:20:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA963426D4B311EF938C75BD762E951A.roa
Signing time: Fri 17 Jan 2025 09:17:47 +0000
ROA not before: Fri 17 Jan 2025 09:17:43 +0000
ROA not after: Mon 17 Mar 2025 09:17:43 +0000
asID: 17561
IP address blocks: 154.213.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80977 (0x13c51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 09:17:43 2025 GMT
Not After : Mar 17 09:17:43 2025 GMT
Subject: CN=678a203b-f5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:95:46:96:27:16:9e:7d:c0:9a:b3:a5:88:
97:fb:e0:f7:a8:b5:8d:1e:ae:8b:b8:bb:d6:74:4a:
5e:fc:5f:6e:e3:b4:17:25:ce:1f:d8:19:2e:58:cd:
d0:e4:02:8f:9a:7f:01:e8:45:9e:bf:61:fa:16:c0:
66:7c:1d:d2:41:75:ea:0e:c7:f7:b7:57:f0:d0:40:
d8:e6:9a:67:ee:3d:2c:ed:be:23:2f:b1:9e:f9:31:
ec:2f:8f:f4:4d:29:69:47:b2:94:42:4c:61:8e:5c:
47:da:9d:46:e8:04:f7:04:b2:e0:a4:df:e7:06:16:
5c:58:53:56:5a:8f:c0:b4:e6:ea:bd:6a:84:d4:c6:
78:4b:a8:08:17:16:d7:a8:13:f4:fb:28:4a:b2:26:
8e:9f:a4:04:d7:49:5e:2b:44:40:e8:08:e2:9a:63:
a3:eb:94:a9:56:9a:77:3d:f5:66:a3:5e:44:87:15:
3e:96:d9:cf:66:f9:d2:d7:82:b1:0f:c1:50:0a:c2:
18:0a:8c:f5:f8:62:b7:a2:f4:5f:e2:c8:fb:b0:25:
9f:2d:dd:e6:57:50:aa:2d:e9:9a:cf:9c:20:8e:b9:
b8:1e:4f:07:3d:9f:b3:c4:1b:9c:a1:c8:f4:a3:e3:
fc:dd:69:60:47:cc:a2:af:9f:cb:bd:02:7d:1d:ff:
ef:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:B1:C5:14:0F:92:5D:4A:08:C6:EE:53:B7:28:99:D9:8B:20:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA963426D4B311EF938C75BD762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.187.0/24
Signature Algorithm: sha256WithRSAEncryption
26:cd:31:1d:1a:86:85:a9:c4:eb:13:51:48:92:36:75:a8:b9:
f6:5e:59:c5:6c:e0:ba:d5:c1:d1:11:06:a9:85:84:5b:d4:5b:
b6:a7:5f:a8:92:ac:f0:a4:1b:79:15:a5:1f:29:07:12:63:f1:
9d:8f:85:74:8b:0c:9e:44:09:c9:5a:ae:31:be:b7:27:ab:57:
66:af:18:99:a9:75:c8:ab:bd:32:50:51:78:56:03:4e:ec:44:
79:54:4d:25:b0:92:79:98:aa:98:6e:17:ed:fc:80:c5:aa:59:
2c:44:c8:ac:43:a4:f3:9a:d9:8e:ee:29:bd:60:5d:a6:15:9c:
a2:ea:13:4a:1b:ac:2e:15:d9:0e:34:65:97:fd:f5:18:71:68:
42:26:b1:00:ff:c5:a7:a2:ba:f5:11:4c:26:33:6d:ea:91:30:
cb:5e:19:db:47:a8:99:44:2d:16:df:fb:a8:0d:5a:88:3d:5d:
70:a8:fd:cc:b8:6a:5d:7b:4d:e1:0a:0c:dc:ec:4d:39:d2:87:
9a:81:4b:05:00:cc:05:df:9c:ab:0b:c2:a6:c9:cc:bc:39:ef:
ff:1e:41:c7:3d:a0:48:53:23:fd:92:b9:e1:b2:df:d1:c1:af:
c9:59:3c:44:1f:b4:4f:51:2f:c6:1b:e2:96:fa:b1:fb:de:8c:
8a:85:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:53 2025 by rpki-client