Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB33D388BEA211EF8B120980762E951A.roa
File: EB33D388BEA211EF8B120980762E951A.roa (raw, json)
Hash identifier: rvI3i/rv25OLXmn98g63ZP1nWeeWxz0+mti7GRQCcIs=
Subject key identifier: 50:9F:7E:71:83:1F:85:0F:B6:C4:96:65:25:27:C3:F4:6A:F5:07:74
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011C46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB33D388BEA211EF8B120980762E951A.roa
Signing time: Fri 20 Dec 2024 07:20:41 +0000
ROA not before: Fri 20 Dec 2024 07:20:37 +0000
ROA not after: Thu 20 Mar 2025 07:20:37 +0000
asID: 47890
IP address blocks: 154.214.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72774 (0x11c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 07:20:37 2024 GMT
Not After : Mar 20 07:20:37 2025 GMT
Subject: CN=67651ac9-329c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:c8:0f:cb:0f:9e:04:de:85:10:2b:c9:09:
f8:dc:66:21:35:42:c7:e9:63:a1:9f:52:4a:3b:e7:
8e:92:bb:ae:19:e2:da:62:43:b8:bd:04:ce:98:7b:
96:99:e3:eb:c6:8a:76:3b:99:48:c3:f2:e3:60:15:
7c:2c:c4:ba:08:59:3b:23:8b:a0:cf:dc:4b:97:5d:
7c:ed:67:85:06:54:78:50:e5:a9:10:1c:ff:0a:c9:
a3:d8:7a:cd:6b:e9:bb:82:19:bc:69:05:b9:31:6f:
a3:8e:ae:9a:58:06:5a:5c:46:0d:b4:89:3c:48:31:
25:fa:d2:d2:db:3e:e9:e0:83:7c:8f:4a:9e:8f:a4:
3e:01:14:d5:4f:7c:d0:72:94:56:06:00:40:02:61:
82:89:fd:57:13:e7:5e:01:8a:bc:53:d0:3a:89:3a:
db:ab:45:d0:c2:2d:87:2c:0a:18:39:34:82:74:ce:
63:44:9e:e7:6f:d0:10:33:56:b4:57:6b:34:22:8c:
a0:7c:cc:e7:bf:5a:04:65:b4:9a:4a:40:33:0c:49:
af:f9:05:ae:61:c3:f2:6f:3d:90:65:44:3c:2a:f7:
80:a5:10:61:40:36:c1:dd:d1:af:07:a9:ab:13:00:
e6:f8:7b:7e:e0:1e:e4:56:19:05:1f:c2:bc:4b:6d:
dc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9F:7E:71:83:1F:85:0F:B6:C4:96:65:25:27:C3:F4:6A:F5:07:74
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB33D388BEA211EF8B120980762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.213.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:de:75:0e:fc:53:ff:b7:60:78:11:a4:a9:72:6b:e2:77:f1:
56:65:ba:35:aa:79:b0:7c:f9:b7:76:24:8d:1d:e6:80:70:1f:
e3:8d:72:98:d5:b8:08:41:76:db:49:d0:db:d3:2a:92:a8:4f:
8e:8a:49:a8:bb:07:a8:59:d4:d1:cc:eb:fd:57:d4:75:ae:88:
af:48:fe:b8:c2:89:b1:f7:fc:bc:35:0c:66:a9:82:2b:a9:fe:
01:83:3d:c7:28:c1:a7:25:a9:99:db:ff:4b:ec:44:07:96:e0:
ba:59:0a:0f:66:aa:6c:9f:a6:8c:29:21:bf:2f:cf:77:d4:9e:
ad:81:3d:b8:d2:1f:ff:f7:87:0c:0a:fb:5c:0b:8e:4e:c5:29:
2a:29:19:e9:1f:15:be:dd:ac:4f:8a:92:a4:e9:c9:0b:97:f7:
a1:78:b7:53:0f:ad:1d:89:c3:fd:0c:74:5c:13:9c:e2:71:8f:
ff:01:fa:44:29:1a:2e:02:1b:12:28:42:5a:9e:d0:f5:e9:3d:
8f:64:63:da:c0:80:d8:6d:11:9f:ea:74:3d:4e:29:bd:cf:ad:
88:a5:37:9b:18:12:87:1c:51:a4:69:d7:89:0d:96:9a:34:9a:
36:ba:da:a5:89:45:03:96:06:c6:a0:1c:66:d2:5a:1f:8e:ef:
01:f2:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:38:54 2025 by rpki-client