Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC0C39A8F45811EF9A654176762E951A.roa
File: EC0C39A8F45811EF9A654176762E951A.roa (raw, json)
Hash identifier: 6FRhBgbhs44a1lfm/lBdxGJyoVjKTe35FeX+eZkl+08=
Subject key identifier: 60:A6:37:EF:F6:C0:E2:A2:9A:62:CF:4A:8B:7B:C7:6D:80:B3:0D:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC0C39A8F45811EF9A654176762E951A.roa
Signing time: Wed 26 Feb 2025 15:47:03 +0000
ROA not before: Wed 26 Feb 2025 15:46:55 +0000
ROA not after: Sat 19 Feb 2028 15:46:55 +0000
asID: 17561
IP address blocks: 154.82.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91376 (0x164f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:46:55 2025 GMT
Not After : Feb 19 15:46:55 2028 GMT
Subject: CN=67bf3777-091e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:47:f3:65:f3:32:c3:7d:b2:28:f1:47:6e:af:
24:4c:fe:29:e0:5e:30:1a:05:97:cd:d9:95:fd:95:
8a:52:ad:6d:77:de:c5:62:c2:df:c2:41:13:98:f0:
5e:5b:34:c9:c7:85:3d:cc:fd:5b:16:0d:ac:a5:33:
03:d9:b5:b7:48:0e:1f:4a:03:12:20:e1:52:50:69:
33:56:ee:35:28:d8:6e:51:f0:f6:83:6b:2a:b4:f4:
df:41:b8:29:a8:91:11:cd:0c:35:32:0d:67:57:65:
93:64:11:eb:ec:82:87:bf:cd:ec:56:0f:83:59:3d:
ec:93:c7:1e:02:78:36:74:34:82:32:ca:bb:06:09:
0f:46:5f:be:84:92:9f:f2:47:50:d0:67:a6:05:75:
c1:b8:a3:1b:05:46:45:76:b1:5a:85:72:98:95:0e:
60:bd:c0:52:4b:da:0e:01:2b:db:88:c8:61:b7:38:
48:b7:a4:b0:75:a9:12:6d:99:a1:af:d1:db:f7:95:
cd:52:65:d6:ac:8c:7b:aa:ba:24:22:b6:53:7a:7b:
69:3c:bd:69:4f:59:39:ee:83:ff:05:56:78:75:43:
37:55:0f:0b:f8:ad:e8:a6:cc:6a:03:9d:21:e5:62:
77:47:a9:cd:c1:19:a6:1e:16:10:ee:57:ce:9c:7a:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A6:37:EF:F6:C0:E2:A2:9A:62:CF:4A:8B:7B:C7:6D:80:B3:0D:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC0C39A8F45811EF9A654176762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.242.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e0:f8:cd:dc:22:81:ca:d7:e2:b6:e1:9b:5f:42:42:60:03:
f6:7e:1d:69:97:a6:1c:97:b2:65:7d:3c:95:c9:6e:be:86:79:
32:97:24:e6:ee:9d:0b:95:d8:1d:50:52:79:97:76:2c:9f:64:
d3:47:68:7d:1b:f9:5d:1e:e5:db:0d:2e:07:f6:37:fc:1c:65:
57:8d:45:48:74:7d:15:cf:c8:8d:ad:f6:0e:14:a3:b9:51:ad:
15:0a:0a:cb:91:d8:67:1c:33:1e:72:fd:9c:31:ad:04:0c:93:
ff:d1:7c:a6:de:28:b3:b1:2c:3b:38:c8:19:62:95:9d:33:d4:
b8:62:fe:a1:84:7d:30:9b:08:2d:c9:f9:0a:8d:b5:75:36:fe:
24:b8:f5:9f:2e:ba:91:48:a5:aa:16:41:45:9b:53:ab:6b:a5:
b0:04:08:6a:67:bb:fb:76:26:27:e7:0b:ac:3b:14:0b:b0:f5:
04:3c:cf:78:a9:e7:3e:94:27:47:96:7e:f9:8b:a7:b3:7e:bc:
9b:f6:f3:e9:be:03:f9:9a:29:e7:77:ec:82:48:9c:d0:69:42:
ca:55:5f:2e:c9:3f:a1:d1:19:8f:a2:d0:66:52:a2:5f:d8:e9:
8f:92:d3:91:fe:f8:fb:40:67:d9:10:9f:9f:92:0c:81:61:65:
07:24:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:52 2025 by rpki-client