Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC495940CAD311EF90268E57762E951A.roa
File: EC495940CAD311EF90268E57762E951A.roa (raw, json)
Hash identifier: TJHiSlps6HWk4oEfCjUQev+IorFgrBVYKsp00F1VIWE=
Subject key identifier: 21:48:34:C7:20:59:5D:EE:A4:9F:12:DF:FC:B6:F2:C7:14:AC:6E:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013525
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC495940CAD311EF90268E57762E951A.roa
Signing time: Sat 04 Jan 2025 19:41:42 +0000
ROA not before: Sun 05 Jan 2025 19:41:39 +0000
ROA not after: Sat 08 Feb 2025 19:41:39 +0000
asID: 203020
IP address blocks: 154.217.88.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79141 (0x13525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:41:39 2025 GMT
Not After : Feb 8 19:41:39 2025 GMT
Subject: CN=67798ef6-2bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6a:28:43:32:cc:36:83:42:5b:a6:63:81:10:
bc:6d:fb:10:33:83:0f:0f:c0:ab:62:a2:85:47:a8:
a3:bb:25:ce:63:d6:16:fe:44:3f:97:b9:01:2e:40:
46:01:82:d2:29:00:bf:ec:00:96:45:bf:db:ee:f8:
89:c5:d8:48:59:83:1c:13:71:66:ca:97:6f:4b:77:
37:2a:7e:97:b1:d7:fc:85:f1:e4:b4:9c:b0:6c:ca:
b4:20:23:ff:c4:4c:28:d9:d7:4a:4d:9c:8a:6b:ad:
0b:56:b0:b8:51:dd:72:bc:52:98:ad:05:9b:6b:15:
95:09:c3:f2:70:b9:20:6b:31:6e:a3:e3:15:a0:aa:
c9:50:f2:bc:05:d7:c1:a0:d2:4e:bf:ca:f9:56:c7:
3e:a1:37:a0:58:e7:c4:39:00:ca:99:b8:44:37:51:
29:81:4e:fe:a7:98:1d:ce:2a:07:c8:da:bb:60:b2:
89:35:74:f1:7c:73:66:3d:a8:ce:b7:4b:64:8c:4c:
b4:f0:c3:de:76:4c:fe:db:bb:88:17:19:65:1b:84:
b9:df:5f:f4:05:33:21:48:54:fe:88:af:20:98:82:
ea:0b:d4:06:01:c8:21:46:64:1c:03:4b:fa:57:c0:
6a:0b:29:c2:31:78:79:18:17:74:c6:ec:17:6e:b2:
c7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:48:34:C7:20:59:5D:EE:A4:9F:12:DF:FC:B6:F2:C7:14:AC:6E:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC495940CAD311EF90268E57762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.88.0/21
Signature Algorithm: sha256WithRSAEncryption
c3:9f:21:b0:6f:e0:3b:a1:31:32:ea:b4:ba:51:88:d3:27:e5:
0c:4e:85:b4:a3:08:57:bd:d9:fe:68:f5:4d:ea:3b:94:20:82:
37:c1:82:33:b0:e5:d7:6c:e3:57:f7:80:24:2b:d9:60:5d:7a:
ad:96:28:f3:2b:8d:d2:3a:ec:98:07:ef:ce:d9:70:cb:df:51:
3f:98:3b:e4:cf:fa:f5:4f:98:f2:08:7f:92:b9:5a:d4:f0:0f:
04:88:0f:6e:b8:45:ef:e4:f7:4e:47:b1:e8:22:59:9e:f7:ac:
9d:63:b4:89:89:9f:43:53:23:fb:a5:9c:6b:4d:6e:f8:2c:23:
78:47:18:f7:3b:f7:65:54:82:aa:28:b3:5b:c7:eb:0a:fd:8c:
e6:16:6e:f6:f3:c6:81:c2:f7:81:0d:f1:55:d4:63:b5:88:de:
6f:8a:94:f9:04:50:a0:fd:66:5d:a0:c5:f0:cb:0c:fa:bc:c7:
83:d5:62:53:12:4c:ca:e4:f5:ed:1f:1e:5d:59:39:32:78:d8:
04:de:ac:64:a9:62:ee:84:d7:03:77:98:67:01:1b:7f:38:ba:
e1:01:a5:99:2e:1b:77:54:b8:66:e9:3d:85:48:95:29:da:e5:
b3:ed:29:d4:29:19:eb:8b:01:df:d6:72:5f:ef:5a:26:d9:05:
d4:47:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:45:32 2025 by rpki-client