Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA234982C42A11EFBAF6CA8F762E951A.roa
File: EA234982C42A11EFBAF6CA8F762E951A.roa (raw, json)
Hash identifier: AWr08MefM1lPEWCeWbIsURWecxw2sYTtt7FbqSS1igc=
Subject key identifier: 24:7E:A4:4C:3E:62:C6:E8:BA:8D:E0:7D:1C:B6:05:99:B0:11:6B:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA234982C42A11EFBAF6CA8F762E951A.roa
Signing time: Fri 27 Dec 2024 08:16:47 +0000
ROA not before: Fri 27 Dec 2024 08:16:43 +0000
ROA not after: Sun 12 Dec 2027 08:16:43 +0000
asID: 17561
IP address blocks: 154.202.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76319 (0x12a1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:16:43 2024 GMT
Not After : Dec 12 08:16:43 2027 GMT
Subject: CN=676e626f-621b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:0f:7f:46:76:8c:7b:5c:6c:b4:c3:50:89:
e6:70:29:4a:4c:1a:a2:7c:c9:ac:4f:0b:9b:c0:2e:
d5:b0:7d:63:98:5f:a3:ea:88:0b:eb:b6:7a:58:19:
c7:23:62:d3:12:b6:ec:cc:da:c4:f0:b2:6b:b4:d8:
cb:64:6f:18:18:00:bc:96:8e:0f:c5:87:52:08:b6:
8d:bc:f5:41:aa:63:71:ff:51:e4:e6:d4:0b:e7:86:
a5:4b:c4:3c:8b:6f:34:b7:72:95:97:ed:1f:08:5e:
e9:5e:23:23:e3:21:31:31:0f:42:88:35:f2:0a:31:
0e:30:96:a5:d1:d4:d5:f3:32:3e:5e:0d:de:68:a7:
08:14:87:77:72:3b:bd:16:d0:29:1a:ac:ed:10:1e:
2b:83:95:d1:16:ea:6f:60:cf:73:c9:46:6f:ca:bb:
94:04:98:b5:52:cd:0e:77:08:7c:ae:b2:f0:26:de:
2a:26:ed:7a:6a:34:2e:81:8e:5c:b3:88:a1:13:e3:
7e:e6:6b:20:a0:d8:ab:ca:35:5a:6b:ec:59:f3:8a:
7b:70:63:e2:59:ce:d4:ee:f3:d6:e4:2c:a8:8f:46:
c0:f2:b6:88:ab:e2:c4:f9:32:e3:04:7f:d9:d2:28:
e4:ee:02:56:fd:fd:0e:51:61:1c:cc:f2:86:fb:b2:
ef:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:7E:A4:4C:3E:62:C6:E8:BA:8D:E0:7D:1C:B6:05:99:B0:11:6B:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA234982C42A11EFBAF6CA8F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c5:37:61:20:04:c4:61:f8:86:07:4c:c4:74:d5:78:fa:f2:
02:78:82:e2:a8:dc:02:b0:8c:fe:e6:57:cd:7a:8a:47:62:c7:
d2:4c:a3:aa:4c:d9:65:6c:ec:cc:69:7d:ad:15:cb:2b:dd:ff:
ee:34:73:c4:27:a1:c9:6f:90:a3:08:e4:79:22:8c:8c:9e:2c:
a7:92:f4:0d:59:20:72:b3:0e:db:25:fd:60:b7:67:83:8c:f3:
ca:24:81:69:ef:79:a3:78:48:78:be:eb:54:6f:2a:6d:24:78:
58:af:50:1e:af:f0:0f:87:54:0a:36:96:2d:0a:25:4b:b8:20:
21:84:2e:86:7b:8f:9e:cd:bf:c8:ef:52:f3:a8:03:5b:b1:7f:
4a:a9:eb:c0:89:09:d7:7e:c0:f1:18:76:04:af:95:50:23:a0:
00:16:0a:57:3f:e9:31:23:97:e0:98:80:10:b9:48:16:59:f8:
81:08:63:f4:f5:5b:50:2b:7a:a5:91:d6:d0:2f:63:b0:e1:7a:
d4:6d:6d:1f:ce:ec:0d:50:ce:ea:df:13:91:5b:61:28:fa:84:
e8:5a:7a:3b:dc:36:73:7e:a6:5b:31:f4:5f:b1:1f:03:a0:2a:
13:b6:60:b5:bd:8f:de:71:48:28:76:7f:a3:43:c9:c0:e8:22:
84:ea:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:03 2025 by rpki-client