Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFFCC5AAD95F11EF800D2280762E951A.roa
File: EFFCC5AAD95F11EF800D2280762E951A.roa (raw, json)
Hash identifier: 3ErX/38cIKzrhjjSin+1CG+BVI6mbjgQ7PT+ag54H74=
Subject key identifier: 88:D1:90:43:32:49:97:44:EB:79:2E:91:6E:D0:43:64:B1:FC:9B:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014061
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFFCC5AAD95F11EF800D2280762E951A.roa
Signing time: Thu 23 Jan 2025 07:59:14 +0000
ROA not before: Thu 23 Jan 2025 07:59:10 +0000
ROA not after: Sat 08 Feb 2025 07:59:10 +0000
asID: 18229
IP address blocks: 154.210.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82017 (0x14061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 07:59:10 2025 GMT
Not After : Feb 8 07:59:10 2025 GMT
Subject: CN=6791f6d2-2c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:00:fb:cc:13:cc:c6:7c:56:23:92:af:66:1e:
90:9d:69:89:96:5c:8e:c3:61:7c:4b:e0:c2:f0:a9:
8b:c5:05:0c:9c:63:e1:66:a1:10:5d:c6:d7:32:6d:
86:0e:c5:b1:98:38:7b:3f:0d:df:c2:69:79:0d:54:
6c:65:1a:e5:c8:a5:15:c6:e4:67:ef:9e:16:d1:90:
d9:d0:04:b7:16:d1:ca:d7:ea:a9:60:d7:6b:3d:50:
eb:d4:55:21:0d:86:08:d2:b3:62:21:6c:a0:78:2a:
05:d1:4d:b9:8b:28:38:1f:f8:37:67:2c:75:b5:b8:
21:c9:ef:16:2c:42:5c:f5:e8:41:04:3b:e1:72:31:
d9:ca:17:b9:f2:fb:ba:ed:da:4d:71:b9:40:88:d7:
04:8d:37:10:82:a5:8a:d3:3c:31:7c:70:f1:fd:b5:
47:69:2d:72:27:a8:a9:b8:5e:93:3b:f1:a2:84:f6:
b4:ab:48:c1:30:bf:df:f5:a4:a4:49:aa:6d:b9:c1:
1f:ed:2e:f2:4b:5d:4d:be:ea:05:a2:3e:5a:fb:29:
e0:b4:8e:50:73:46:3a:d0:95:a4:61:45:6d:00:b4:
66:2c:56:60:06:3d:52:31:df:4d:44:89:96:98:28:
0b:f5:d7:7d:c5:22:4c:5a:e2:46:89:2f:d7:1a:4b:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D1:90:43:32:49:97:44:EB:79:2E:91:6E:D0:43:64:B1:FC:9B:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFFCC5AAD95F11EF800D2280762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4f:ce:a8:1d:13:42:b5:13:e0:8b:b2:6a:c2:f9:ef:0f:aa:
c1:3f:30:0f:0a:d2:9c:6d:0b:24:86:df:cf:bd:10:fc:db:8b:
51:cc:28:bb:d9:8b:05:e8:72:86:76:22:56:b7:c6:57:7f:11:
1b:94:d7:5e:16:a2:96:16:ae:93:d0:5b:98:98:c4:b1:e5:a6:
1e:af:a1:82:7e:a9:14:1a:98:88:1b:bb:89:7c:29:e1:38:0a:
f3:be:cb:77:98:06:e3:73:b5:13:76:a4:e8:7d:72:50:4d:b3:
c8:0d:d7:df:00:d1:0b:50:44:1c:54:c4:38:c1:9d:b5:82:1c:
71:49:26:1e:a5:f4:99:87:b3:72:1a:57:75:c9:64:d5:14:36:
79:29:3a:9d:0b:70:38:db:3f:3c:49:48:f2:bd:f5:17:1f:10:
a3:95:3e:68:b9:d9:96:99:ed:26:15:28:95:36:67:ee:a0:53:
d0:08:1a:bb:8b:97:da:b5:ac:26:82:19:d7:7a:7b:48:ec:d7:
43:08:73:26:16:05:0a:d7:98:40:70:96:33:0f:59:99:db:5f:
e2:fc:8f:c7:17:41:ab:d7:0a:47:28:23:65:4d:ae:d3:80:1b:
56:5f:8b:1a:13:1c:93:45:f6:ed:9d:bd:84:64:54:90:a6:db:
89:19:4c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:42:38 2025 by rpki-client