Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA21323ED2E711EF974812A8762E951A.roa
File: EA21323ED2E711EF974812A8762E951A.roa (raw, json)
Hash identifier: y5JriIOWT3qw76OA6T32BcPMk30Q3VwfQtmqsXE/ksg=
Subject key identifier: 27:7F:E4:EE:10:80:DE:52:D6:F9:EA:BD:24:FF:5E:A3:BE:0C:01:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA21323ED2E711EF974812A8762E951A.roa
Signing time: Wed 15 Jan 2025 02:24:58 +0000
ROA not before: Wed 15 Jan 2025 02:24:54 +0000
ROA not after: Sat 03 Jan 2026 02:24:54 +0000
asID: 984
IP address blocks: 154.223.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80800 (0x13ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:24:54 2025 GMT
Not After : Jan 3 02:24:54 2026 GMT
Subject: CN=67871c7a-115f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:93:36:9b:ee:00:48:d0:53:c5:c3:ed:f2:
81:3c:7d:dc:65:78:98:29:c1:38:4b:af:54:a6:41:
ba:e8:71:d6:ff:28:eb:b6:3d:4c:de:32:f0:7b:ac:
7c:9b:1c:ae:99:dd:39:7b:28:11:24:db:c4:62:35:
9f:e9:02:5e:1a:d8:8f:a8:82:69:6b:51:35:3c:88:
df:c7:04:ee:cd:e4:f7:0b:bd:4c:7c:e4:87:88:81:
f2:ed:18:ed:46:23:f0:09:e3:d2:65:b1:ed:b7:3f:
88:e4:91:8f:7e:b2:7f:35:20:eb:1d:12:94:b4:ef:
b4:90:ca:91:30:e0:2b:d6:21:bf:bb:3a:d5:35:c7:
0a:1c:85:f1:4e:3b:d3:66:d7:fc:4b:9f:9a:30:9b:
55:c2:88:14:23:a2:36:36:0a:18:00:87:55:5f:12:
2a:d1:de:9e:8d:2f:66:b0:65:2d:1f:19:6c:45:27:
4c:da:54:63:d3:60:7a:35:ab:96:11:12:89:bf:74:
98:1e:86:c1:6d:07:37:86:5c:50:c0:21:d3:98:8e:
4b:31:57:c8:cf:2a:9c:75:c8:42:b0:50:50:6a:33:
8e:f9:5e:06:fc:f8:e9:a9:28:c1:3b:a4:ed:a0:8a:
78:1d:70:b1:62:cf:98:e7:20:85:6d:d2:c1:f0:e5:
e4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7F:E4:EE:10:80:DE:52:D6:F9:EA:BD:24:FF:5E:A3:BE:0C:01:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA21323ED2E711EF974812A8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.245.0/24
Signature Algorithm: sha256WithRSAEncryption
88:15:87:78:88:d8:05:66:38:83:92:a9:70:8f:e4:28:96:be:
da:3c:81:e9:cc:35:ac:ba:bd:e3:d7:35:fa:01:a9:92:c5:d5:
ce:fd:30:f3:8b:ab:dd:c9:b4:92:fb:5b:80:3a:0b:c7:37:f3:
5c:94:95:f5:e5:1c:74:e0:19:52:23:04:a1:90:f7:84:55:83:
f6:f2:3b:be:c9:ea:f8:19:db:3c:29:fb:fa:3e:e3:d3:2e:c6:
2e:55:c7:3d:44:88:fa:64:00:f9:18:3a:20:32:4f:89:60:10:
f7:4d:61:92:f5:e3:b0:55:0c:6e:42:f7:79:4d:b7:e3:ba:91:
15:b0:e9:f5:49:35:ba:b4:2d:df:66:99:32:f1:2c:7f:dd:4e:
13:43:fa:47:c6:7a:f0:aa:b7:68:c9:19:49:16:88:8f:4e:52:
78:1d:0a:73:50:9c:df:13:85:f7:30:5f:d0:b7:bd:b0:82:05:
21:74:d6:a3:ff:39:81:c9:55:6c:f4:4e:91:16:9a:6d:08:4b:
88:8e:10:33:4c:25:40:54:81:c8:f4:62:17:18:c7:29:2e:7c:
85:7c:2c:57:85:67:11:0f:fd:b4:0a:57:61:a7:69:b7:66:95:
49:f7:c6:8f:78:53:89:a1:3e:d0:34:87:05:bb:86:2e:8a:13:
71:09:9c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:34:32 2025 by rpki-client