Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAF5E7E4C42911EF93833089762E951A.roa
File: EAF5E7E4C42911EF93833089762E951A.roa (raw, json)
Hash identifier: VDPV1oZgndigKOC8SWyQ/kLODRUqso0fWmpvyF+R4PM=
Subject key identifier: 98:7C:E0:2D:C6:28:83:CF:BB:9B:25:2B:E2:99:BA:19:17:08:E3:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAF5E7E4C42911EF93833089762E951A.roa
Signing time: Fri 27 Dec 2024 08:09:39 +0000
ROA not before: Fri 27 Dec 2024 08:09:35 +0000
ROA not after: Sun 12 Dec 2027 08:09:35 +0000
asID: 17561
IP address blocks: 154.202.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76309 (0x12a15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:09:35 2024 GMT
Not After : Dec 12 08:09:35 2027 GMT
Subject: CN=676e60c3-b581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:21:18:fa:02:d2:bf:f5:7c:3a:0e:d7:87:
91:ae:b7:01:97:32:4e:72:1e:58:39:3e:24:bc:60:
55:14:d1:ff:b5:80:0e:5f:86:73:b6:33:5a:9e:fd:
d6:ed:d9:e8:89:9e:cb:d7:66:65:53:0f:2f:9f:17:
51:a6:0f:6d:4d:ef:a0:0d:05:e2:f0:17:a9:b2:d2:
06:29:fa:d1:d6:35:75:6c:7b:20:91:e7:58:cf:05:
b4:2d:b7:52:61:ef:9b:b3:33:57:b7:c9:ab:ac:fd:
78:c1:e4:7f:97:39:fc:f5:01:c2:22:07:c1:81:18:
35:ea:77:f6:a9:52:ca:35:98:75:7d:8f:86:96:a9:
04:8a:b1:b0:53:cc:e7:cc:e0:00:dc:3d:f1:3e:c1:
ea:90:3c:67:de:2d:ed:4d:7b:9f:b3:25:73:69:01:
1b:a9:67:40:ae:27:07:2c:49:ce:74:e9:44:ca:85:
82:7f:ce:85:c0:fb:69:3c:4d:c5:bd:d9:24:7c:fa:
3a:c8:af:43:1e:5f:c4:d2:b5:da:a3:83:6d:2d:a0:
bd:0e:07:73:61:90:86:2b:76:2a:3a:6f:a5:1e:50:
3c:67:d9:7b:a3:ac:41:99:03:35:a2:f5:57:24:d4:
30:ea:49:5c:58:1f:2d:f2:01:25:72:ea:3b:d5:b7:
86:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:7C:E0:2D:C6:28:83:CF:BB:9B:25:2B:E2:99:BA:19:17:08:E3:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EAF5E7E4C42911EF93833089762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:31:1f:f8:47:72:08:8e:87:63:62:c5:c5:90:fe:bf:ba:d1:
8b:02:04:91:96:51:80:cd:ea:59:b7:65:68:0c:45:e4:1a:d9:
d3:39:94:94:7f:09:44:a7:6a:7f:ec:f4:3c:a2:55:86:6b:b6:
4d:7a:5f:2b:47:4c:19:3a:68:99:6b:86:70:84:bf:27:96:09:
ab:bb:19:64:b1:8f:e2:e6:ed:26:e4:c1:8f:20:21:0b:e2:f1:
00:a3:eb:2b:fc:da:bb:8b:97:1b:97:4c:82:55:06:59:d4:57:
d0:03:cb:4e:26:64:39:9e:2e:c8:d3:10:1f:f2:82:76:11:5a:
3f:c8:8d:88:53:c7:b6:9d:cd:d1:1b:db:81:0c:dd:a9:50:c8:
8a:a7:41:a1:62:f2:90:87:ec:2a:f6:f1:8d:f8:0c:8a:97:65:
9d:d1:04:3d:88:9b:c3:aa:0e:74:9e:42:c8:fc:99:65:30:c3:
55:e5:06:ca:4f:ad:5b:40:f1:c9:18:d2:16:25:a7:8a:b5:6c:
50:1e:cc:00:2a:e9:a9:37:34:22:4f:93:0b:33:a9:db:41:63:
62:3f:08:ca:8f:50:2a:0a:22:ba:c6:db:33:96:4c:d0:34:5a:
b9:7d:39:37:64:cb:b2:49:a6:4a:dd:0d:14:29:00:f8:ac:d0:
f7:e1:34:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:36 2025 by rpki-client