Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB35D02AC3DE11EF9693189A762E951A.roa
File: EB35D02AC3DE11EF9693189A762E951A.roa (raw, json)
Hash identifier: gVWtxye5CYMmH3zEWUjH7a3Zt8UI6hludT/y2Gv2DD8=
Subject key identifier: C8:D5:74:65:83:F4:99:04:5E:63:E4:87:45:57:68:F9:72:45:AA:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0128CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB35D02AC3DE11EF9693189A762E951A.roa
Signing time: Thu 26 Dec 2024 23:12:47 +0000
ROA not before: Thu 26 Dec 2024 23:12:43 +0000
ROA not after: Sun 12 Dec 2027 23:12:43 +0000
asID: 17561
IP address blocks: 154.86.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75980 (0x128cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 23:12:43 2024 GMT
Not After : Dec 12 23:12:43 2027 GMT
Subject: CN=676de2ef-5897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:f0:94:b6:da:ee:31:a4:7c:07:2a:c5:eb:
33:86:d4:06:cd:c2:c3:e8:9f:01:9c:bc:68:0b:d5:
8b:09:ba:98:27:92:32:ce:20:57:4a:b5:7e:07:c9:
09:85:e0:1b:3c:d1:6d:50:ab:3c:2a:9e:1f:0d:35:
71:f2:88:fb:a8:1c:48:29:19:bb:d6:8e:69:33:b3:
2d:dd:84:6f:78:a4:c8:cd:13:f6:88:f5:74:04:02:
3c:61:df:ef:b3:e4:b8:df:98:be:fd:dd:9e:c4:b1:
57:cd:b4:4a:70:c2:2a:5c:eb:de:bf:67:10:dd:d3:
8c:fa:8e:67:02:22:a8:29:11:cc:5c:27:39:d9:c3:
9c:40:ee:b5:e9:b9:46:ba:bd:cb:ef:d7:01:27:cb:
62:20:24:54:d8:2b:02:9a:02:da:54:45:92:7e:a0:
65:96:50:3a:12:49:8d:f2:a6:7f:10:6a:97:29:0b:
78:d5:45:ed:59:12:5d:f0:ac:52:7c:c6:3a:eb:66:
c4:39:e3:c2:ce:73:14:4b:af:e9:2d:7d:47:7f:a0:
aa:42:6d:c8:04:39:15:af:33:46:f8:e6:54:04:2d:
8d:56:e0:46:7d:4c:38:61:63:ca:eb:4c:4f:d1:3f:
25:9f:aa:3d:23:ef:2b:e7:54:ff:d6:4a:cf:b8:d6:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D5:74:65:83:F4:99:04:5E:63:E4:87:45:57:68:F9:72:45:AA:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB35D02AC3DE11EF9693189A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.120.0/24
Signature Algorithm: sha256WithRSAEncryption
06:87:2c:24:10:d4:7b:1b:c7:ed:07:0e:42:7e:b0:6e:0f:5d:
4a:a4:ae:e6:77:fc:c9:9e:b7:ec:4c:bd:72:bc:14:bc:f1:e2:
90:a2:57:5c:1b:67:f2:18:50:a8:de:54:b5:65:c1:4b:53:4e:
01:8d:bb:c3:67:94:d3:26:bf:93:73:63:4f:eb:96:cd:af:14:
74:9f:fc:54:f3:ff:21:bc:79:19:09:45:19:1b:c5:12:e4:72:
6e:b1:9e:d4:bd:90:f6:0e:5e:30:2e:41:bd:99:e0:94:f5:3f:
8a:b8:db:21:ef:40:33:7a:b2:02:ea:95:40:57:a9:26:32:bd:
44:a8:3b:2c:84:4b:b8:ae:14:91:5e:34:64:f3:54:be:9d:b2:
af:a8:fc:9e:fd:80:54:4d:c5:82:e2:20:69:3d:c7:e7:ac:69:
2b:6a:4b:68:73:5c:37:47:e5:e9:ff:42:19:ab:cb:14:68:26:
6b:de:dd:31:32:fd:69:7b:9f:84:2d:6e:ad:a9:7e:19:a7:a6:
d5:e5:70:43:96:26:02:10:1b:ff:4e:9b:df:71:ef:1d:46:c9:
9f:7c:43:95:8d:d9:e2:61:60:63:66:1e:a3:9a:fd:ca:4e:88:
9f:62:bc:5a:b0:9d:6a:99:05:07:3b:4e:a3:8a:f7:fb:bd:9f:
0b:cb:3d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:49 2025 by rpki-client