Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3465EEBD0E11EFBBC0AF93762E951A.roa
File: EC3465EEBD0E11EFBBC0AF93762E951A.roa (raw, json)
Hash identifier: D4CVkOVlmTLu8KVRSM8rAmGtn1dO6ye1OjT/M33Sex4=
Subject key identifier: CA:39:92:B5:67:32:C3:0D:63:7F:69:4E:60:A7:1C:84:4E:F5:DE:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011BC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3465EEBD0E11EFBBC0AF93762E951A.roa
Signing time: Wed 18 Dec 2024 07:08:46 +0000
ROA not before: Wed 18 Dec 2024 07:08:43 +0000
ROA not after: Sat 22 Mar 2025 07:08:43 +0000
asID: 16437
IP address blocks: 154.81.208.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72644 (0x11bc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 18 07:08:43 2024 GMT
Not After : Mar 22 07:08:43 2025 GMT
Subject: CN=676274fe-7dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7d:9c:8e:af:9c:0c:0d:5e:bd:f8:b3:75:34:
69:25:1c:7c:2b:12:38:08:c9:07:78:2d:ab:34:b0:
48:5a:47:ac:64:1b:f2:7e:0f:aa:a0:28:4f:50:26:
0e:0e:3e:a3:0d:66:7a:f6:ad:7b:18:d1:08:b6:0e:
1c:02:bf:78:6f:05:de:be:35:6c:c6:50:bb:7f:96:
51:77:c4:98:47:d3:9f:b9:70:6d:09:80:54:1d:95:
c3:36:b3:83:2c:f9:25:ec:b6:7e:c8:ca:ae:bb:c1:
b5:9d:5e:8b:ae:57:f1:d9:58:71:d8:bc:7e:4a:60:
7f:8a:59:90:77:5a:8a:4a:f3:4f:06:d1:be:10:dc:
75:da:6c:0b:57:0d:6b:da:a4:55:e3:87:1a:f7:0e:
f6:15:39:a8:06:7a:e4:53:15:8d:46:05:5e:05:09:
c6:4b:b6:8a:02:3b:8a:a6:a3:cb:7f:82:3d:ff:0e:
c2:6a:54:f4:e8:b3:fc:78:c4:95:1d:14:65:59:98:
cb:bd:9b:17:cc:75:c1:6b:3b:5a:d3:48:e7:d6:36:
1c:c4:65:45:ca:bf:14:89:bf:b1:db:22:74:ce:b5:
cc:0c:e8:14:29:cb:e4:3e:82:09:04:76:e3:42:91:
89:2a:65:2f:5a:40:aa:14:06:75:07:42:df:99:a1:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:92:B5:67:32:C3:0D:63:7F:69:4E:60:A7:1C:84:4E:F5:DE:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC3465EEBD0E11EFBBC0AF93762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.208.0/21
Signature Algorithm: sha256WithRSAEncryption
d7:05:43:26:4f:06:d1:f2:11:2c:29:f6:db:09:8a:9f:e4:a4:
ac:31:74:6b:c5:10:79:35:29:4f:e9:b9:7a:0b:dc:e5:ad:12:
17:b5:25:27:1f:04:91:c8:71:72:88:5d:4b:06:28:46:a9:13:
af:7b:4f:1d:45:8b:28:b9:79:4a:42:d3:2d:a6:4b:b9:6f:f3:
5e:81:56:e9:a5:1b:f7:07:1e:bc:aa:11:b2:a0:a8:9d:5d:97:
ca:39:6d:58:18:b1:2b:42:4d:88:53:68:9d:c2:1e:b9:c2:1e:
fc:d9:f0:9d:bf:d2:17:61:f6:45:54:25:8b:61:e2:80:1c:26:
7e:5b:50:15:8c:9e:19:60:5e:59:b4:18:bf:9f:f8:e3:49:5c:
f3:9d:a2:4d:7e:9f:19:b0:5b:f8:7f:c2:f0:49:28:b2:fa:02:
3b:59:ce:d6:12:63:94:2e:9e:cf:cd:74:0c:07:28:db:f0:d7:
01:ad:da:ef:86:f2:55:1e:c5:02:03:92:e9:dd:06:3c:0f:20:
0f:c8:a0:d3:a7:61:66:6d:bb:70:e9:f6:2b:18:e5:1f:c2:74:
d5:3a:1f:27:d6:15:f4:dd:62:84:d1:6c:43:de:83:52:e2:64:
dc:69:5a:46:fc:f0:4a:13:88:eb:f2:a3:92:ce:2e:41:ca:e0:
a4:3b:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:39:23 2025 by rpki-client