Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAECAD98D0BB11EF893BBE63762E951A.roa
File: EAECAD98D0BB11EF893BBE63762E951A.roa (raw, json)
Hash identifier: RFTuRLrFUiarDlYMAwmlVbJVPfGJq+tLImg18zx2J2I=
Subject key identifier: CA:79:8C:84:70:2A:EC:54:55:BF:C4:A3:4B:C8:61:90:0D:B5:74:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAECAD98D0BB11EF893BBE63762E951A.roa
Signing time: Sun 12 Jan 2025 08:04:59 +0000
ROA not before: Sun 12 Jan 2025 08:04:55 +0000
ROA not after: Fri 14 Feb 2025 08:04:55 +0000
asID: 142032
IP address blocks: 154.222.16.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80558 (0x13aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 08:04:55 2025 GMT
Not After : Feb 14 08:04:55 2025 GMT
Subject: CN=678377ab-b4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:ec:90:7d:5e:b4:dc:21:fe:39:85:67:f7:
2a:04:72:a3:8e:6a:7b:2d:80:ff:14:b5:dc:e7:50:
a3:33:c9:60:89:a1:04:c1:4b:4d:81:76:97:ad:cc:
b6:55:59:6c:5d:52:11:c6:e3:34:86:c8:b8:29:74:
54:43:8b:7a:a6:83:c1:ae:cc:70:c2:42:10:08:60:
3e:fc:58:72:c4:68:59:38:4f:ad:40:ff:dd:08:8b:
95:75:7f:28:54:86:ca:71:f0:8d:8f:33:a1:04:64:
8d:c2:d5:e3:df:97:e3:ff:65:6e:b7:dc:71:a7:c6:
83:5a:ef:35:5d:d7:80:c7:de:03:52:5d:d6:01:b4:
5e:2e:a7:83:66:98:dc:b6:2d:fc:8c:f7:50:0d:8f:
f4:4f:e5:b2:fd:03:50:1a:0e:9a:4e:62:ad:3b:07:
3b:13:8b:38:71:bd:a0:8e:08:65:1c:c1:61:e2:af:
c7:ad:72:24:e8:16:5c:05:d8:04:f2:1e:18:3e:7f:
10:26:cb:d4:71:15:2f:c9:12:2f:4c:1a:ee:a3:40:
d4:c4:ee:06:5c:69:29:f4:4e:a2:c9:d9:b0:57:40:
de:22:9e:86:04:54:86:8b:d7:a6:b1:88:63:86:a5:
c5:67:fc:e8:d1:a1:e0:2b:e3:5a:57:4c:71:3c:92:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:8C:84:70:2A:EC:54:55:BF:C4:A3:4B:C8:61:90:0D:B5:74:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAECAD98D0BB11EF893BBE63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/21
Signature Algorithm: sha256WithRSAEncryption
78:9f:da:fd:f3:e6:e0:56:11:a6:74:92:13:c1:77:47:37:d2:
8e:37:0a:89:63:95:ec:6e:b6:ea:47:d4:66:6d:90:6e:8e:ea:
56:e9:fc:d0:fa:17:de:0f:b1:12:be:97:59:bd:1e:2f:99:ac:
b8:ac:a2:3f:fb:72:3e:19:27:f9:17:0e:06:8a:86:2c:84:85:
6f:55:64:f1:f7:de:6e:f0:fa:b4:46:ae:f7:50:dc:8b:7a:37:
64:71:19:f6:a2:4f:8d:2e:cf:d6:f2:cd:d2:fb:95:69:b1:21:
86:0f:c6:97:62:3d:3b:67:7d:54:20:fc:2e:cb:5a:76:f6:f4:
f5:3a:bd:5c:a0:0a:d8:2d:56:d7:cb:7a:b6:68:f1:ef:1b:cd:
b8:93:1b:dd:84:17:13:fd:50:b6:e6:55:b1:e5:a4:a1:35:eb:
f7:ee:a1:c1:d6:42:b1:2a:ab:15:38:f6:96:8a:d3:f6:16:a6:
7e:99:00:8d:ba:6b:a0:cc:46:50:12:51:1d:ec:96:e0:a7:6e:
f4:5c:1c:82:bc:6f:67:0e:1f:d5:54:0c:71:c8:8f:8e:f1:d2:
2c:c9:3d:cc:51:a6:99:b6:94:51:a4:58:53:fc:1a:76:5d:7a:
d5:8e:04:6a:25:88:83:bc:74:1f:ab:25:33:2f:f8:fb:62:ac:
63:f2:d0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:44:55 2025 by rpki-client