Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EECCC9ECDE1311EFAF476E46762E951A.roa
File: EECCC9ECDE1311EFAF476E46762E951A.roa (raw, json)
Hash identifier: gG1SrclPxpNugWmFKeCVEoqT9ozCfNm9Pirx9ZLPt68=
Subject key identifier: 50:F0:9F:22:D3:18:43:D0:05:A4:CE:DF:A1:B8:F3:5A:EC:53:0F:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EECCC9ECDE1311EFAF476E46762E951A.roa
Signing time: Wed 29 Jan 2025 07:37:46 +0000
ROA not before: Wed 29 Jan 2025 07:37:37 +0000
ROA not after: Mon 03 Mar 2025 07:37:37 +0000
asID: 20473
IP address blocks: 154.196.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85289 (0x14d29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 07:37:37 2025 GMT
Not After : Mar 3 07:37:37 2025 GMT
Subject: CN=6799daca-3fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:19:1a:41:74:b5:53:7f:0d:bb:ac:bb:0a:ae:
c5:4c:6a:29:fb:bc:d6:11:c0:71:e6:6b:89:31:77:
8b:86:fc:76:49:ab:ab:b0:86:6e:90:f6:2e:bd:14:
a8:9e:fb:8f:ad:e2:ec:cc:df:16:24:01:c8:5f:bc:
e0:98:5a:1d:93:47:1e:67:f9:9c:6a:76:f9:07:c8:
57:70:36:b5:e2:b6:1a:5d:f7:43:13:57:62:bf:64:
60:54:4a:77:bc:64:7e:fd:24:44:76:d6:d1:af:16:
64:f8:e3:97:e7:de:34:7c:af:ea:0b:7c:b9:77:75:
88:68:11:6d:b8:35:3c:f6:1c:c0:ee:4a:36:1c:15:
a3:9d:1b:4f:7b:71:fd:4c:40:3d:45:a9:b3:fe:5e:
8c:2f:db:04:12:f6:48:f1:6e:ab:e1:f0:cc:c7:27:
49:c6:0f:9c:ef:d4:fc:72:ff:63:2f:92:83:ec:2b:
17:c2:f3:45:9b:0d:2a:1c:90:7a:86:ef:65:4a:f4:
e9:31:cf:e8:80:70:d0:3d:f1:35:72:f2:38:23:0c:
e7:e2:73:1b:5c:bc:ed:cb:6b:86:65:ba:58:41:14:
6b:88:ca:d0:98:a3:39:00:44:d6:78:3c:f0:8c:d4:
ec:a7:b1:56:81:70:05:8e:de:2f:43:9b:55:1c:67:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F0:9F:22:D3:18:43:D0:05:A4:CE:DF:A1:B8:F3:5A:EC:53:0F:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EECCC9ECDE1311EFAF476E46762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:c4:fd:8a:e7:41:7e:01:16:6d:49:aa:0d:65:9f:e1:c2:6c:
4f:71:f9:dc:01:cc:88:6d:6c:15:e0:62:26:63:b7:44:05:f5:
bb:bb:cf:8f:55:02:30:39:d3:5b:ed:e6:b9:fd:94:ef:c4:99:
e8:c3:c6:86:18:df:3e:14:1a:b9:39:13:8d:ec:e2:81:7f:74:
05:b7:7d:73:75:b9:de:da:5b:f2:37:20:4a:39:6b:08:fd:4d:
85:e7:ba:de:56:3a:7b:52:c1:c6:29:86:c7:9a:c3:b1:d3:a4:
b7:09:15:33:0d:5e:a5:55:2d:d7:9c:16:9c:ac:c3:d0:3b:92:
c6:aa:d7:c4:6a:81:1a:00:85:46:05:43:e6:2f:c1:6b:6c:6a:
23:37:7a:0b:9c:79:e1:1f:ff:0f:cc:16:cb:46:d1:0f:d2:07:
3b:29:7e:a1:4f:63:e0:03:5a:d7:f4:fc:7d:07:13:e7:f6:02:
e5:1f:95:46:ab:dd:ab:1a:37:ca:32:68:be:21:b6:13:ed:72:
f9:0f:cb:47:d9:f6:b8:37:31:96:d0:d6:ac:d5:d6:06:63:ca:
ff:80:47:80:98:d9:e2:00:15:e8:72:44:ef:17:d0:92:e1:23:
91:0c:59:b8:cf:2f:22:06:77:21:12:b0:24:b8:6e:ca:17:f7:
dd:f9:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:29 2025 by rpki-client