Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9B3150C93C11EF896A7CBB762E951A.roa
File: EB9B3150C93C11EF896A7CBB762E951A.roa (raw, json)
Hash identifier: BKL6zRts1r3/+Lp/08cwaZ7uhPkX0S40Uzo9RLi3s98=
Subject key identifier: 33:7A:92:49:8D:F8:D1:7E:95:10:94:41:64:FA:F3:0F:D8:72:A6:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013409
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9B3150C93C11EF896A7CBB762E951A.roa
Signing time: Thu 02 Jan 2025 19:08:16 +0000
ROA not before: Thu 02 Jan 2025 19:08:12 +0000
ROA not after: Sat 13 Dec 2025 19:08:12 +0000
asID: 984
IP address blocks: 154.223.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78857 (0x13409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 19:08:12 2025 GMT
Not After : Dec 13 19:08:12 2025 GMT
Subject: CN=6776e420-b6af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:4d:e8:9a:16:2d:6f:d2:76:bb:a2:25:9b:
ab:75:e2:0c:06:b9:82:a5:f8:f1:e3:52:b4:27:d5:
2f:6f:2a:f4:a4:cd:1a:b1:15:5f:01:cc:a3:70:6b:
ad:e9:af:c9:58:4c:48:8d:04:b5:ba:1a:75:b5:c8:
04:39:6b:38:b2:2f:5e:d7:4b:31:73:7b:84:25:74:
c8:69:8c:d5:13:ed:e1:0f:77:ea:c3:a4:3c:0a:10:
fd:b1:3b:75:41:bc:a0:f8:d9:67:da:40:00:62:da:
c0:15:05:b5:1e:8e:25:06:cc:fe:01:8b:bb:b5:a6:
15:f6:84:70:02:27:a0:7f:38:fa:cc:07:aa:6d:64:
3d:32:64:a4:7d:5c:e2:b1:a4:86:27:75:90:5c:1b:
7d:b2:90:d8:ec:a2:86:22:fd:8b:60:04:87:a4:06:
1b:7e:98:e3:4f:ff:92:02:de:fa:62:f8:0a:ca:04:
6c:68:e8:29:a7:d5:8c:12:35:cb:c0:e4:40:35:b0:
08:2d:ea:d7:a2:8a:3b:b4:33:b3:2a:84:35:cb:4e:
cf:6e:66:70:ab:f1:70:b6:18:08:29:a0:80:e3:0d:
04:9b:6e:34:46:98:59:30:6d:49:be:63:92:f4:2f:
09:ae:2f:35:3e:a5:a9:5a:7e:74:7c:72:37:bd:e8:
44:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:92:49:8D:F8:D1:7E:95:10:94:41:64:FA:F3:0F:D8:72:A6:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB9B3150C93C11EF896A7CBB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:5b:96:6d:c5:d3:21:ea:15:2a:f0:ec:c3:f3:6c:23:85:56:
df:fb:41:aa:86:0b:df:eb:b7:20:05:e8:9e:19:4b:49:b2:94:
69:1c:09:22:f1:29:97:f6:65:38:6f:26:e4:03:1b:67:ed:fc:
64:47:0b:81:fb:e2:4e:d2:84:ad:c9:40:28:87:bb:72:6a:38:
f8:40:d1:09:b0:73:fb:e7:35:61:cb:04:41:3d:f4:05:19:db:
68:51:a7:18:d7:b9:47:07:ed:f7:db:be:fe:17:24:f6:69:f7:
24:85:4d:2d:69:b1:ab:9d:81:15:3f:5c:29:65:7d:6e:d8:61:
3b:bf:31:47:99:74:3b:7b:97:90:04:a9:6a:4e:78:19:0f:db:
d0:90:af:43:70:5f:3f:e8:c2:46:c2:fc:06:a3:7e:b9:17:50:
ec:c0:42:c5:2b:b0:09:40:31:aa:df:ea:c3:ae:fa:02:a3:2a:
e3:51:a7:cf:82:15:08:2b:28:9f:08:fa:45:75:7e:fd:ef:4a:
61:93:2f:15:99:55:07:55:cc:f3:23:b6:fe:11:c9:06:93:a9:
a7:11:6c:7a:4e:0d:10:a7:62:1e:ec:a1:f1:39:c8:d5:f1:3a:
94:f7:c4:7b:ee:9e:c2:2c:05:b8:73:6c:9a:c7:45:c4:e2:91:
4f:86:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:52 2025 by rpki-client