Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87064FEC54611EFADE79C8E762E951A.roa
File: E87064FEC54611EFADE79C8E762E951A.roa (raw, json)
Hash identifier: QORvwp9+F1o2IFN1Ziq2SQ5F1ThRfucLsDd09vzUiws=
Subject key identifier: 7B:90:54:E8:3A:FF:DE:9C:D0:AD:8B:1D:9A:8E:C6:A8:5A:2C:C8:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012CB3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87064FEC54611EFADE79C8E762E951A.roa
Signing time: Sat 28 Dec 2024 18:09:41 +0000
ROA not before: Sat 28 Dec 2024 18:09:37 +0000
ROA not after: Sun 12 Dec 2027 18:09:37 +0000
asID: 17561
IP address blocks: 154.208.190.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76979 (0x12cb3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 28 18:09:37 2024 GMT
Not After : Dec 12 18:09:37 2027 GMT
Subject: CN=67703ee5-7917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:76:07:18:98:2e:54:1c:e3:c6:90:85:2a:
c3:34:90:24:a8:a5:a2:0b:e2:f0:7c:ed:47:56:0f:
2f:70:26:65:ef:52:b2:3b:3f:ea:c9:bf:47:0a:98:
10:d1:07:d9:3b:8b:66:ea:de:24:5c:6a:b9:54:08:
b6:d1:a0:bd:dc:2c:35:4d:eb:99:8c:43:48:ac:7f:
6b:dd:76:8d:68:f2:95:bb:8d:f7:be:c3:4c:1b:23:
57:b1:18:a0:c6:70:da:98:55:b5:a2:2c:50:de:b5:
65:69:45:35:a6:e8:61:39:05:29:cf:fa:a9:22:fe:
3d:57:87:9f:34:2f:f7:6b:5e:eb:43:0f:64:7c:08:
08:7b:ad:81:99:f1:44:bc:44:b7:e4:13:d0:21:f0:
b1:c7:c8:29:ca:9a:74:63:a5:34:36:3c:6f:2c:99:
2e:46:90:f1:a9:2d:7f:a5:66:9a:57:c5:8e:62:09:
91:bd:1e:62:e4:c0:8c:d0:4b:f5:b0:7c:12:4c:49:
16:e0:31:45:c4:d1:97:ef:c6:34:23:36:49:68:f5:
e0:b9:49:23:0f:e5:51:42:8c:a6:37:ee:a2:49:7c:
c5:ed:c3:b4:73:c0:f8:77:ef:29:f7:11:8e:f0:c7:
e0:40:ca:56:7c:6d:60:e7:b2:78:36:b2:1e:84:85:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:54:E8:3A:FF:DE:9C:D0:AD:8B:1D:9A:8E:C6:A8:5A:2C:C8:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E87064FEC54611EFADE79C8E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.190.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c1:37:f0:f6:1a:26:71:72:6e:af:52:86:3c:67:89:29:1d:
42:23:3b:c1:81:ee:03:20:d2:96:0a:27:92:45:b9:d3:ee:35:
76:c9:7d:ce:9b:3e:bf:2d:2f:28:1d:07:13:d8:86:99:93:74:
11:c3:76:8a:c7:de:bc:08:9a:12:a0:17:37:6f:a0:c3:b9:40:
bf:db:65:01:3d:8b:bb:cc:7c:bb:8f:3c:ef:85:d0:60:ea:c1:
7d:6c:2f:ca:b6:cf:80:00:32:99:16:1e:3d:c7:ad:25:65:da:
8f:c8:30:92:0a:c6:16:5e:86:4a:42:fc:d4:e5:08:e9:03:c5:
ba:51:33:df:12:01:d6:a4:d5:bc:7b:1d:bc:d8:14:29:93:43:
d5:be:2d:34:cb:3e:7a:95:54:3e:31:5b:04:2c:2d:6a:99:47:
76:c1:d2:fb:e8:82:e9:fb:90:a0:34:65:54:16:c7:27:a1:36:
16:fd:bc:85:f4:dd:e4:03:bc:db:8b:61:15:40:a3:3a:cf:f7:
0f:4b:bd:5e:2c:eb:e6:1f:ba:33:d9:09:c2:07:a8:a8:46:11:
b6:e4:6f:f0:6b:f6:63:07:9a:85:9a:10:e4:ba:de:69:bc:df:
25:5b:4a:f2:37:a9:34:da:24:32:45:cb:38:0c:38:d9:26:e5:
bd:b2:6e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:39:23 2025 by rpki-client