Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC60F2CAD5A11EFA34F21B5762E951A.roa
File: EBC60F2CAD5A11EFA34F21B5762E951A.roa (raw, json)
Hash identifier: fZjSmlraR1Y790nwWaCv+LHxCkeVRd5IsIjPnIGWfHM=
Subject key identifier: 42:25:7F:1B:FD:90:1F:74:B6:C0:90:BA:F9:8E:7D:41:94:C7:0C:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114E5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC60F2CAD5A11EFA34F21B5762E951A.roa
Signing time: Thu 28 Nov 2024 07:32:29 +0000
ROA not before: Thu 28 Nov 2024 07:32:25 +0000
ROA not after: Tue 11 Feb 2025 07:32:25 +0000
asID: 22773
IP address blocks: 154.194.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70885 (0x114e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 07:32:25 2024 GMT
Not After : Feb 11 07:32:25 2025 GMT
Subject: CN=67481c8c-a86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:aa:c0:79:97:22:7e:54:28:fa:49:61:52:d7:
c7:15:c6:50:77:27:87:14:be:f7:72:1e:20:f5:df:
ca:b9:08:ac:5f:63:2b:22:df:3d:81:39:81:d4:6d:
93:87:3d:a5:1d:0a:13:0d:a5:68:7a:14:59:3d:2e:
e0:06:47:95:ea:64:44:33:07:f8:39:e9:b8:cb:fc:
c5:ea:46:2e:c6:52:fe:4c:5d:23:0c:c5:ea:6b:ec:
55:94:0c:11:3e:50:c3:21:49:e0:49:17:8b:25:03:
9d:05:c5:68:cc:60:f6:a6:86:07:d8:65:12:93:a7:
ee:d0:1b:12:f2:91:0d:cc:21:52:79:57:0d:ab:60:
0a:10:de:b6:96:4b:1e:d6:33:10:59:60:c7:e8:5e:
ff:00:51:2c:5c:f0:98:48:d5:47:c2:dc:9d:94:f8:
6b:56:54:4f:7e:b1:0e:db:89:f8:1b:93:d0:0d:c0:
2c:5c:b2:55:34:3c:a4:76:63:6e:01:c0:c4:37:db:
23:d7:9c:b0:3c:93:df:bb:18:0c:df:87:9a:4c:df:
b3:0f:6c:41:83:ef:f0:bf:10:d2:93:3d:ae:2d:a1:
49:cf:d1:a3:9f:af:d9:1c:20:f3:13:96:b2:90:64:
8a:bb:49:e5:0e:76:9f:73:04:63:d2:be:45:35:79:
6e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:25:7F:1B:FD:90:1F:74:B6:C0:90:BA:F9:8E:7D:41:94:C7:0C:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EBC60F2CAD5A11EFA34F21B5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.16.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:2f:67:b3:6f:14:8c:38:57:dd:36:56:f0:de:b0:af:29:af:
b8:9d:f4:c5:40:1d:55:ef:55:f6:95:f4:10:fe:d4:37:b3:ee:
b8:6b:6c:a6:6b:08:a9:d0:ff:42:2c:7e:43:aa:f6:00:d6:71:
95:49:94:5d:15:44:de:68:74:33:72:d7:9d:22:72:a4:61:55:
71:ad:86:c6:43:c9:e5:0d:64:08:7d:86:e8:ab:1d:b2:77:37:
84:9a:20:fa:8b:af:9e:cc:7f:a7:ec:14:70:d7:78:54:1f:8a:
f1:12:dd:72:34:cd:13:ab:58:9b:b6:79:96:2c:c9:eb:1a:54:
a4:02:dd:0a:7b:d8:b6:64:05:14:98:28:b1:bd:12:29:2d:ec:
26:df:52:45:12:f8:03:27:91:bf:47:c9:63:60:c6:f1:21:a6:
c9:7b:dd:9b:44:5b:bd:8b:15:aa:d6:7a:05:64:9d:ec:26:04:
0b:04:91:43:e3:c7:8a:b5:ce:98:f8:64:98:52:c9:fe:7f:ef:
5a:75:7b:af:8c:9c:ff:1c:c1:2e:9d:de:b6:35:b5:16:ac:2f:
f6:e6:25:fb:61:93:b3:c1:40:df:f1:2c:85:89:78:53:61:68:
97:a6:c8:c9:dc:63:60:9d:28:2b:30:80:39:ad:30:b4:43:30:
d1:3c:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:20 2025 by rpki-client