Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE8302C8DEE811EFB5B48573762E951A.roa
File: EE8302C8DEE811EFB5B48573762E951A.roa (raw, json)
Hash identifier: wPqeLJjyIIJ0VFI3Y5NzG/zmmdCLVPt8wWOHmDfn5Ns=
Subject key identifier: C1:22:F5:DE:51:D0:B3:20:E9:03:7C:7B:27:86:49:57:08:DB:2E:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE8302C8DEE811EFB5B48573762E951A.roa
Signing time: Thu 30 Jan 2025 09:02:29 +0000
ROA not before: Thu 30 Jan 2025 09:02:25 +0000
ROA not after: Fri 07 Feb 2025 09:02:25 +0000
asID: 63199
IP address blocks: 154.207.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85418 (0x14daa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 30 09:02:25 2025 GMT
Not After : Feb 7 09:02:25 2025 GMT
Subject: CN=679b4025-4626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:9d:86:d0:c3:d0:af:19:d5:38:24:3b:44:
2c:6a:02:3c:3a:f9:08:2f:7f:cd:9e:16:d6:6c:4e:
21:51:d4:95:70:5d:84:bc:42:12:56:38:ba:55:de:
5e:91:50:bc:f6:bb:bb:fa:30:c1:d1:f6:29:d5:b3:
30:ac:83:7a:8f:8c:12:a2:dd:72:6f:46:44:18:8e:
bb:29:aa:32:e0:69:83:d0:42:92:2c:d1:95:ee:c9:
c4:bc:bb:1a:f6:7d:17:55:ae:bd:12:c7:f4:98:1a:
ba:4b:fc:26:56:29:1e:ba:cf:dc:a4:3d:ab:7b:76:
4c:9a:47:d6:38:26:92:ee:ba:9a:d3:56:d1:41:99:
40:57:1b:63:3e:0f:b0:49:a3:15:78:d5:98:ff:9a:
d8:c6:de:0f:87:31:45:f4:23:47:d8:2b:db:e6:17:
af:df:76:e6:99:aa:6f:ef:3c:5b:27:22:ce:bc:09:
90:5f:ef:08:be:3a:f6:74:96:0f:95:e5:0d:8a:3c:
42:35:f9:2b:af:67:d3:92:02:90:69:98:b1:8f:52:
22:3d:d7:2c:80:7c:8e:12:3a:d4:5f:55:25:57:2f:
72:4a:cc:8b:f5:ee:66:9d:09:7d:b0:1b:8c:dd:91:
1c:df:46:8e:e8:24:32:8f:51:74:f7:c3:e0:d9:d4:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:22:F5:DE:51:D0:B3:20:E9:03:7C:7B:27:86:49:57:08:DB:2E:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE8302C8DEE811EFB5B48573762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.93.0/24
Signature Algorithm: sha256WithRSAEncryption
18:84:10:8d:b8:6a:62:14:25:32:29:0d:83:9b:25:47:48:9f:
7a:cd:2e:62:02:62:87:bb:9a:71:4e:53:1f:bb:db:b5:06:35:
df:da:ae:49:58:99:e6:6b:1b:c6:0a:89:b1:98:4a:b3:cc:01:
87:1e:26:a3:8e:86:5c:18:c4:97:82:63:66:fb:49:28:3c:f3:
ec:d8:8c:cf:5a:68:e2:8a:cd:96:4d:9a:4b:42:89:aa:a9:2c:
65:c0:a6:09:dd:0c:3c:23:20:ad:8b:81:e0:f0:f7:3b:6f:39:
50:2e:51:87:05:ed:3d:cc:ab:8a:5e:07:cb:0d:b0:41:8e:86:
8f:39:3b:e6:a5:3e:0b:3a:b0:5f:fd:5d:6a:b4:9e:6a:c2:b7:
79:b9:6d:b1:b0:12:37:b6:1c:42:86:f7:70:ca:4f:67:25:6f:
be:ad:95:30:85:ea:ac:f2:cc:1e:18:e7:1c:31:3a:f4:5a:ba:
9a:b0:dd:25:f1:13:c6:21:ba:f9:1b:0c:f5:e2:a7:44:39:04:
88:14:0d:21:29:2d:52:4c:5d:50:07:ab:80:64:37:21:44:52:
dd:95:79:ff:f3:3f:55:59:af:67:30:41:04:61:b4:d9:db:c0:
76:e4:c8:02:33:d5:22:31:eb:fd:8b:d7:0d:82:d7:dd:b4:4a:
2b:c4:96:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:37:08 2025 by rpki-client