Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC119EEDB2911EFA4908497762E951A.roa
File: EFC119EEDB2911EFA4908497762E951A.roa (raw, json)
Hash identifier: a8hETj/2xLv+m8ZK7AobcA04X6Uros27vyVv/HFXgnI=
Subject key identifier: 59:1D:D3:BE:7F:20:64:DC:BE:48:2E:11:4C:A1:DA:C3:AB:0E:9E:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0149E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC119EEDB2911EFA4908497762E951A.roa
Signing time: Sat 25 Jan 2025 14:37:43 +0000
ROA not before: Sat 25 Jan 2025 14:37:40 +0000
ROA not after: Thu 27 Feb 2025 14:37:40 +0000
asID: 395793
IP address blocks: 154.200.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84448 (0x149e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 14:37:40 2025 GMT
Not After : Feb 27 14:37:40 2025 GMT
Subject: CN=6794f737-8e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:16:f9:a4:e0:58:49:91:85:2a:50:8f:c2:
3e:a6:65:fc:dd:c8:ae:1b:7a:c9:18:9a:17:03:4a:
98:76:af:99:60:17:98:39:1d:ce:ba:66:30:89:44:
d2:fe:66:b8:04:f0:8a:9b:5b:04:e8:24:9b:37:1e:
7b:ef:56:7e:c1:54:40:c3:4b:2d:ca:00:a0:58:9c:
f2:22:83:03:1a:d4:c1:86:62:21:80:bd:64:26:be:
cb:7a:03:a0:0f:14:8f:2f:ff:50:76:c9:44:87:f7:
1a:0e:1c:d6:9a:54:f9:c5:db:6b:78:ac:4d:c5:e8:
17:db:6f:5d:bb:44:e1:59:58:58:46:6a:f9:8b:0f:
65:3f:5a:d5:b2:b8:64:13:ba:04:2b:1b:09:1f:82:
fe:ec:1b:2c:eb:ea:f7:f9:72:c4:0e:79:91:9a:31:
0d:c4:32:d8:5d:c3:89:a8:56:33:89:5f:56:8b:bc:
b0:91:51:5c:d9:df:f2:59:2d:4f:9a:e6:bc:cc:20:
c8:ed:f1:0a:83:43:44:9d:97:52:41:c7:e7:55:fc:
6c:fc:43:99:69:e8:c5:f6:df:ab:05:83:07:cd:45:
39:2c:a4:c7:54:86:ae:06:e2:ba:f0:6b:d6:79:9f:
9f:37:ba:5e:bd:55:0d:b3:2f:bd:46:97:af:95:a9:
4f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1D:D3:BE:7F:20:64:DC:BE:48:2E:11:4C:A1:DA:C3:AB:0E:9E:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFC119EEDB2911EFA4908497762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.55.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2e:1c:bc:88:eb:57:2b:03:93:82:2f:92:bf:c3:5a:31:8c:
89:ed:ba:b3:08:3e:1d:2b:07:79:51:07:a3:25:91:ea:1a:b4:
5e:d6:7c:12:8c:db:0c:25:16:f0:a0:2a:67:85:47:ff:66:7f:
66:78:b5:09:a2:50:cd:99:34:88:25:be:69:59:2b:34:da:80:
cd:99:a1:40:30:80:0d:44:5b:59:64:2d:77:77:5c:bb:f0:4a:
2a:05:8a:05:44:2f:c6:0f:d9:e3:11:ed:bd:54:af:8c:2f:d5:
47:b0:17:9e:0e:ab:94:6c:8c:75:16:68:22:3d:ef:8f:7a:24:
22:a3:15:da:f9:95:94:76:69:37:f0:da:a4:fc:fa:c1:30:26:
14:c4:a9:fb:55:71:c4:67:f3:fd:05:1f:00:05:a3:88:b8:4e:
db:a9:6e:cd:d0:17:e5:eb:b4:3c:4d:52:fb:ee:1d:05:cb:14:
50:10:6a:6d:9f:14:ad:4c:ee:c7:05:1d:5f:6d:f3:19:94:05:
13:d1:18:17:82:f6:ec:1d:bb:a8:f6:96:15:c5:08:8d:a8:69:
21:3e:6b:cc:2b:04:d1:da:70:b8:c0:45:e6:3a:db:92:35:a1:
55:3d:93:47:b9:3f:88:41:0b:62:17:74:6d:31:5a:98:ad:19:
80:ee:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:47:08 2025 by rpki-client