Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB678FC2FFE111EF975A7EB2762E951A.roa
File: EB678FC2FFE111EF975A7EB2762E951A.roa (raw, json)
Hash identifier: bkOEBjXXG0wPN2NTIQgCZSUjYbjOM3rulhwvBbIwBNI=
Subject key identifier: 4F:50:05:73:0D:56:01:FF:49:ED:77:25:D8:F0:2C:4D:DF:21:E6:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01740F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB678FC2FFE111EF975A7EB2762E951A.roa
Signing time: Thu 13 Mar 2025 08:05:25 +0000
ROA not before: Thu 13 Mar 2025 08:05:21 +0000
ROA not after: Sat 07 Mar 2026 08:05:21 +0000
asID: 135600
IP address blocks: 154.211.160.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95247 (0x1740f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 13 08:05:21 2025 GMT
Not After : Mar 7 08:05:21 2026 GMT
Subject: CN=67d291c5-5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:36:7d:d3:5e:fc:65:c3:91:6a:97:e7:fe:
e8:c7:d9:25:91:39:ff:98:fc:42:2e:7d:78:46:fb:
2d:38:35:d1:f1:40:bc:6a:7a:f8:e6:aa:10:73:c8:
a0:0c:9e:98:4d:99:e9:75:13:3f:25:c9:33:d9:d6:
8f:b4:9c:6e:f3:93:3e:24:0f:59:b5:c3:a4:84:4b:
82:af:8a:57:ca:4b:8c:2d:f8:da:74:47:0b:80:71:
42:fb:0c:98:56:84:6d:4f:ce:65:5d:fb:af:83:11:
3b:27:0c:9b:a2:0d:4f:7d:2a:32:da:7b:9f:84:ea:
c7:d1:f7:85:c0:f4:1a:2c:b7:08:9a:af:3d:54:78:
63:78:01:a3:5b:9d:07:63:5f:79:ae:f3:a2:5f:46:
de:34:ae:38:97:2f:3b:61:d4:9a:ff:8b:cb:9e:1c:
a7:c4:1d:93:1b:fd:86:80:5a:fa:9f:10:a0:7b:3e:
88:3a:8f:51:18:d0:80:2f:26:f3:04:8b:4e:6f:3c:
2a:31:68:20:71:fe:16:c2:21:7b:31:b6:fc:eb:50:
74:f0:f6:6f:a5:71:93:de:6c:9f:69:12:f7:64:45:
d2:a9:55:ef:0d:3c:9f:21:62:02:84:e8:4d:06:4c:
32:5a:8e:96:81:c1:59:ff:f2:93:0a:fc:ff:85:59:
17:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:05:73:0D:56:01:FF:49:ED:77:25:D8:F0:2C:4D:DF:21:E6:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB678FC2FFE111EF975A7EB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.160.0/21
Signature Algorithm: sha256WithRSAEncryption
bd:9d:5c:a0:05:36:9e:56:0c:8d:53:ab:b0:04:ff:a9:1b:0e:
21:b1:86:23:9b:b4:00:82:c3:98:5e:a1:49:49:05:e1:3d:2f:
2d:b1:fb:a4:88:96:c7:64:81:66:ad:20:cd:03:7d:f7:28:c6:
ea:c8:9e:b8:ea:9a:08:d1:f7:08:37:06:1b:fd:bf:40:e6:d3:
8e:fe:b7:74:3b:0f:bf:d7:30:c7:b3:dc:99:d2:54:ed:2f:ce:
7d:f5:fe:1d:fa:ec:ac:60:b7:a6:56:3c:7c:83:77:c8:eb:bb:
9c:8a:9c:3d:21:b9:ae:66:48:3f:ac:57:24:d2:de:d9:96:a9:
66:ba:61:ee:7c:51:6b:93:9c:66:13:58:61:17:39:50:8b:61:
e2:a5:a3:df:55:92:5e:c5:3f:6c:d1:58:e9:6d:6d:7d:25:19:
29:04:88:03:a1:f1:45:c1:d5:40:88:e7:bf:3d:09:25:c6:60:
05:cb:e4:96:4c:d7:71:9b:66:30:03:ce:7a:fd:db:6d:d3:fe:
ee:42:05:16:20:5c:d2:75:57:a7:d5:10:d9:49:b5:e3:0b:e5:
53:3b:dc:f0:f3:b3:c7:06:1b:9e:07:a0:06:55:ea:50:18:57:
b1:1c:d5:f6:d7:f9:c3:82:bf:56:70:8c:c1:5c:0e:b2:6b:f8:
86:6b:d7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:55 2025 by rpki-client