Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB18450D8E811EF993E2D59762E951A.roa
File: EEB18450D8E811EF993E2D59762E951A.roa (raw, json)
Hash identifier: PJKAIC/JGWjAQVft98jLgLdO+Gd1FR9s6z73LamDaRI=
Subject key identifier: E9:77:14:EC:DB:1C:C6:63:14:9D:31:95:8F:F8:D2:66:CB:29:0B:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014020
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB18450D8E811EF993E2D59762E951A.roa
Signing time: Wed 22 Jan 2025 17:47:22 +0000
ROA not before: Wed 22 Jan 2025 17:47:18 +0000
ROA not after: Sat 15 Mar 2025 17:47:18 +0000
asID: 138915
IP address blocks: 154.206.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81952 (0x14020)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 17:47:18 2025 GMT
Not After : Mar 15 17:47:18 2025 GMT
Subject: CN=67912f2a-ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:47:6d:b4:55:9b:aa:0b:2e:20:7c:25:7d:
e4:28:6f:ef:89:76:3c:49:0b:01:f4:f7:b8:e1:31:
1b:58:04:de:0c:94:bb:b1:c7:62:7a:4b:1e:23:4e:
f0:9c:3b:41:81:56:38:04:ff:f5:5a:cc:d4:36:9b:
34:ea:8d:35:8e:cf:75:ca:17:cd:8a:72:d2:be:7b:
7a:68:65:a5:fe:a7:7b:19:db:66:2f:f7:be:6b:99:
ec:26:93:e0:26:62:61:8a:5d:f3:bf:36:c4:2a:76:
96:b1:b0:5f:c7:af:97:43:3e:2b:76:e2:37:47:a5:
9f:20:0e:14:82:ed:93:5c:75:f5:80:89:d5:a4:99:
9f:88:08:c7:56:ac:c6:02:0f:e5:aa:f8:8b:2d:71:
01:e0:ca:20:32:52:13:ea:84:ff:fe:69:31:29:ae:
d0:de:be:e1:b4:4f:03:d6:e1:b6:5b:b0:03:1b:d0:
01:95:b6:34:bf:93:7a:52:2f:e4:f9:11:dc:81:5f:
31:e7:8a:22:85:55:cc:38:08:a7:db:0a:f6:46:48:
2f:a8:a0:00:f5:07:9a:a2:6e:dc:35:9b:90:13:46:
f1:60:8b:80:57:83:eb:dd:62:ac:a5:1c:93:e0:f2:
cb:77:15:aa:21:32:6b:19:de:b9:81:38:fe:92:5e:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:77:14:EC:DB:1C:C6:63:14:9D:31:95:8F:F8:D2:66:CB:29:0B:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB18450D8E811EF993E2D59762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
92:ff:8f:cc:72:30:af:51:05:2e:a3:b0:af:a3:b0:41:ff:1c:
39:62:54:2f:1a:c1:61:30:d9:9d:8e:b8:30:22:c8:18:29:0c:
32:03:e5:24:65:65:9d:0c:9a:45:40:3d:67:18:df:23:e5:e8:
d3:78:dc:96:60:d8:3d:98:c5:20:6b:46:fc:b8:f4:bf:23:e3:
b9:49:f6:de:89:ab:d4:6a:5d:73:6e:81:d8:b0:c6:ee:e6:85:
3b:3f:b2:c0:fb:63:61:50:78:49:32:f2:dd:51:fe:5f:85:8d:
84:16:9a:d0:77:73:ae:ae:38:52:73:47:91:e7:db:1e:75:9b:
3e:94:20:84:4f:ac:96:31:c4:3e:71:75:fc:f2:f6:71:62:94:
7a:d7:7a:db:9b:95:70:35:22:6e:35:6f:c8:d7:b7:43:0d:b8:
b9:f9:a5:ce:e2:ce:3b:d1:9f:97:71:05:4b:ff:92:7e:e5:c9:
ef:cf:ef:53:c0:25:e3:08:31:8d:6a:cb:a7:90:07:28:e6:f7:
e8:b1:47:c0:56:26:d8:46:e4:78:59:02:63:61:30:c0:47:ef:
02:b8:95:f8:96:46:ee:67:d9:6d:7e:37:9d:83:14:81:06:5a:
bb:cc:e9:91:7f:c5:6c:72:cd:a4:21:cf:fc:9a:a3:9a:f0:d3:
34:49:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:44:12 2025 by rpki-client