Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9AC86C094411F088AED15E762E951A.roa
File: EB9AC86C094411F088AED15E762E951A.roa (raw, json)
Hash identifier: AgZpNLR+n2uo07QqzkbJMpX4r2zcb73UI+exvrkdkp4=
Subject key identifier: E4:83:DF:FC:67:8B:46:26:04:8B:AF:C7:2B:12:E8:B8:8E:1C:C8:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9AC86C094411F088AED15E762E951A.roa
Signing time: Tue 25 Mar 2025 06:46:46 +0000
ROA not before: Tue 25 Mar 2025 06:46:42 +0000
ROA not after: Thu 01 May 2025 06:46:42 +0000
asID: 398704
IP address blocks: 154.200.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95723 (0x175eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 06:46:42 2025 GMT
Not After : May 1 06:46:42 2025 GMT
Subject: CN=67e25156-250c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:29:a6:d5:ba:81:59:17:3c:a1:9c:22:ae:ef:
3b:2e:35:91:87:f2:e0:36:3e:9b:b6:94:5b:47:83:
20:94:99:5d:78:eb:be:ab:89:21:43:5a:09:ea:68:
52:4b:c9:09:0d:35:1d:f8:bd:f4:fc:8f:53:0c:e6:
20:4e:19:ac:51:bc:28:4b:18:05:ee:ef:00:6d:9d:
1f:58:1f:cc:f7:c6:f7:97:dc:5a:8b:a2:2b:8d:84:
4f:e1:a5:fe:2e:09:63:47:b6:34:be:9d:30:fe:f1:
fb:47:3e:76:29:92:0b:43:e6:27:fe:83:27:5a:71:
ec:4d:30:ca:4d:72:a7:db:1c:a5:d2:39:13:02:ae:
00:f8:84:80:41:88:5a:a5:cb:17:b7:e1:72:60:d1:
9d:6a:a9:f6:ff:b3:30:fd:eb:80:f3:7c:01:07:d9:
d9:02:61:d8:f0:ae:21:5e:2f:9e:7e:1f:88:c2:8a:
42:67:61:5f:47:3a:ae:a9:2d:a8:0b:83:f2:f0:15:
87:12:f4:6a:c5:f3:db:7b:e1:d9:ec:73:7f:ba:98:
fd:0f:3a:1a:9d:59:df:6f:03:8e:d5:57:53:62:01:
c3:60:b0:ce:3a:24:9b:8c:43:ec:4d:a7:3b:f1:b3:
b6:23:55:34:d5:ff:44:b0:69:09:94:bb:e9:ba:2d:
b7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:83:DF:FC:67:8B:46:26:04:8B:AF:C7:2B:12:E8:B8:8E:1C:C8:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9AC86C094411F088AED15E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.146.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3b:d7:9a:ae:75:c6:36:df:c1:4e:55:fe:91:99:66:91:15:
2b:2e:53:87:3c:8c:a6:1e:3e:ff:43:dc:25:de:51:d9:43:1e:
52:c5:d5:af:6d:40:70:51:90:17:bc:c3:e0:f2:b1:ad:03:0f:
7f:3b:6e:48:0d:30:23:b7:df:56:bb:14:96:21:10:4f:6e:25:
20:a5:89:9e:4d:55:27:29:bb:d2:2f:88:05:55:ad:15:dc:29:
5e:0a:5b:e1:a3:a8:12:59:81:8d:e0:72:e1:c2:f7:9c:71:6f:
a8:1b:25:f5:f7:60:5b:f7:cd:c3:da:ee:46:79:0c:91:18:54:
db:82:2a:98:9d:44:ed:a9:7a:ed:1a:1d:3b:b9:af:5b:4e:c2:
88:a8:d2:dd:7c:e7:b3:75:48:15:82:f0:4f:d6:98:10:b1:9b:
04:4c:e9:79:cd:e1:ae:7b:cb:b8:a6:e6:38:cf:d2:0f:9f:a6:
d0:68:56:1f:e4:18:8c:3d:4d:19:79:36:6f:08:a0:78:a6:a8:
1f:37:07:6e:94:5e:8c:aa:7f:25:3d:03:cf:75:b7:24:35:b1:
95:4e:4c:40:ac:82:7c:b8:64:10:fd:d9:e2:97:cb:79:d8:3b:
30:69:27:0c:30:5b:e8:73:2b:f8:f9:a2:2b:4e:89:9a:71:ea:
4e:5c:c7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:22 2025 by rpki-client