Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA33C23CF8C611EFB478BD40762E951A.roa
File: EA33C23CF8C611EFB478BD40762E951A.roa (raw, json)
Hash identifier: cJndIVXwQAD2MzoMslLpIjxsnoQsSy9YNHRLmMjN8l8=
Subject key identifier: F5:F9:DE:C8:A0:E2:97:FA:52:17:E0:F5:C1:A9:41:B4:9E:D6:DC:85
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017176
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA33C23CF8C611EFB478BD40762E951A.roa
Signing time: Tue 04 Mar 2025 07:04:29 +0000
ROA not before: Tue 04 Mar 2025 07:04:25 +0000
ROA not after: Mon 07 Apr 2025 07:04:25 +0000
asID: 36680
IP address blocks: 154.81.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94582 (0x17176)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 4 07:04:25 2025 GMT
Not After : Apr 7 07:04:25 2025 GMT
Subject: CN=67c6a5fd-2fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7a:56:f3:24:df:5c:8e:1d:f3:b0:42:1f:b4:
29:f3:7f:25:1d:ec:99:42:0c:5f:24:40:5e:38:f3:
03:7e:46:c1:f8:b0:0c:85:f3:58:40:49:d6:75:a1:
d0:bc:14:16:50:77:16:53:ad:ea:07:72:01:40:b1:
7d:be:b8:3f:b2:86:f0:d9:e2:81:9f:0b:66:50:e1:
bf:7c:bc:e2:11:c2:8d:8e:f1:b9:0f:56:6a:d8:e2:
f7:4b:99:82:0c:b8:98:4d:78:0e:a0:2c:ff:7a:3d:
2d:16:61:cc:27:f6:26:63:ff:36:80:9e:a0:03:2d:
91:d6:96:23:3c:25:70:e7:db:12:d0:20:54:87:d8:
ea:6f:2a:3d:2f:33:65:54:d5:9b:0c:bc:2a:26:40:
26:d4:1f:8a:a5:6c:72:51:5a:37:29:de:75:c8:07:
64:5f:7b:5f:be:33:31:69:b0:32:b5:d3:de:6f:36:
2d:8e:d9:4e:2c:01:99:52:4c:5e:cc:b7:9b:5d:99:
4e:7e:a9:5a:af:3a:d7:6f:09:93:f3:63:92:1a:6e:
6b:a4:dc:76:ae:28:16:72:ec:e7:be:14:44:b2:7c:
47:9b:84:7e:32:f9:50:2b:40:2c:15:e6:9b:07:c1:
12:f6:2b:d1:d7:b7:ec:a4:05:63:06:e0:f1:67:01:
b2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:DE:C8:A0:E2:97:FA:52:17:E0:F5:C1:A9:41:B4:9E:D6:DC:85
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA33C23CF8C611EFB478BD40762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.156.0/24
Signature Algorithm: sha256WithRSAEncryption
43:11:8a:d2:c4:cf:2f:57:d7:a1:63:e1:7c:3e:4d:d0:a2:dc:
a3:0b:38:ba:d5:c4:ab:48:4b:ad:f7:87:fb:8e:c6:f7:8f:a4:
f7:e8:05:ed:a4:9e:ae:6c:d7:c5:33:33:ec:58:98:8c:c3:a2:
15:cf:db:86:c0:49:17:da:ca:41:a2:53:37:83:e9:eb:86:46:
d1:db:44:75:54:0f:80:e2:f6:52:fb:cf:bb:e6:e6:b6:48:bb:
22:58:d7:00:c5:88:97:e7:a8:1d:3b:cf:06:21:f3:b4:cc:57:
3c:f8:0b:c5:93:06:8a:94:38:7b:92:c5:9f:31:2b:33:23:46:
59:98:31:ef:8a:46:ba:b6:76:b9:55:d2:a8:1f:c6:f4:94:b1:
8c:10:5a:18:49:f2:2a:a1:16:bf:8c:c1:88:bc:d8:42:da:73:
30:c0:10:5f:2d:7e:c3:b1:2b:6d:95:43:89:e8:28:53:95:d9:
ef:85:ac:96:80:82:19:4d:2e:4a:74:bd:b9:f4:2a:b1:a9:59:
5e:e1:40:be:00:d6:ec:29:53:5b:d8:39:4b:50:41:20:92:9f:
e4:65:8e:9b:30:60:a0:72:fd:81:03:00:ac:72:a9:63:82:a9:
13:ec:a0:17:86:6b:93:13:99:72:f0:6f:c8:d5:3a:2a:c4:0c:
94:c1:3a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:24:42 2025 by rpki-client