Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE123D9A058011F084BD805D762E951A.roa
File: EE123D9A058011F084BD805D762E951A.roa (raw, json)
Hash identifier: D8BlVIwocWeTh6hr630z/xuBXH3CRkM/2vKMJqVL6Cc=
Subject key identifier: 7F:EC:C4:A7:A5:93:48:43:B8:A4:C0:FD:A9:44:3F:69:45:06:A1:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017541
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE123D9A058011F084BD805D762E951A.roa
Signing time: Thu 20 Mar 2025 11:46:16 +0000
ROA not before: Thu 20 Mar 2025 11:46:12 +0000
ROA not after: Fri 31 Oct 2025 11:46:12 +0000
asID: 55020
IP address blocks: 154.211.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95553 (0x17541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 11:46:12 2025 GMT
Not After : Oct 31 11:46:12 2025 GMT
Subject: CN=67dc0008-f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:97:8e:83:59:e1:a4:b5:32:ca:4a:5c:86:0a:
9f:0b:29:62:42:ba:20:fc:72:1d:52:36:3d:ab:90:
25:d2:72:94:0b:ac:ba:c0:e9:e5:50:32:f2:a3:69:
6b:7d:d9:2b:2e:32:da:93:d9:4c:0a:93:07:be:31:
59:4a:65:1e:88:50:a4:be:4b:14:a4:96:ad:8b:5e:
7b:0b:65:2a:a5:c3:8f:0d:c1:86:f6:a2:10:2d:8a:
58:f1:3d:78:4b:cf:9e:cf:80:91:50:d2:1e:e5:14:
76:41:ae:d3:64:b6:7a:ff:d9:38:2c:5e:34:2e:3b:
cd:48:e0:52:d3:d0:2d:ed:41:08:a5:ea:7e:1e:70:
fb:37:79:b7:ec:d7:fb:62:6f:9a:2a:39:db:49:72:
01:fe:b7:fb:77:a0:51:0a:98:14:fc:ba:e3:6f:a1:
1b:bd:8d:75:d4:94:cb:e3:9b:da:17:d9:b1:50:57:
00:d3:55:26:9f:2c:ce:a9:fd:ee:02:c6:d1:91:66:
34:f1:d5:c0:3b:4e:21:bc:7f:e3:21:cc:19:7f:96:
dd:8e:43:87:05:54:c8:8b:f8:9e:8a:e6:5b:d6:30:
a7:52:99:3d:5f:59:17:3e:a1:92:71:90:7b:84:b6:
e7:80:c7:b2:db:76:1f:2d:48:2c:9c:dc:aa:e0:c0:
68:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:EC:C4:A7:A5:93:48:43:B8:A4:C0:FD:A9:44:3F:69:45:06:A1:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE123D9A058011F084BD805D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:5a:fe:fc:31:71:3f:ee:63:92:b8:74:66:af:c5:20:44:16:
ca:c1:12:61:80:d0:40:36:09:b3:9d:a5:d8:ee:62:5f:b9:62:
98:0f:db:c7:e2:cc:74:f7:ef:22:f5:78:9a:65:03:db:52:ab:
50:01:65:5f:dc:55:19:25:cb:21:8f:5f:ce:52:41:fa:32:38:
44:16:e8:42:cc:e9:01:d9:d0:07:c4:00:91:ba:cb:2e:52:ea:
09:83:01:73:80:52:ce:25:74:d9:f7:fb:47:5e:01:0b:7d:fc:
00:e9:74:cc:bc:03:e7:f2:66:2d:15:61:92:68:ad:f0:3a:85:
c4:01:33:38:53:03:6c:e9:5a:28:7d:ef:92:76:74:87:79:01:
e0:77:a7:be:f7:bf:3b:64:2b:45:ae:a1:a5:72:97:1d:7b:e6:
00:93:1a:5c:f5:d8:34:5e:4f:26:3b:fd:00:c9:1a:2e:ed:1b:
85:1d:d3:f5:d0:a5:9f:e1:43:af:b3:f4:a5:c0:dd:cb:e1:1c:
a3:c0:d8:bd:d2:48:66:5f:40:13:4d:bc:db:14:e3:0c:4c:eb:
93:b9:c1:a4:3b:35:37:4c:e0:5d:25:ec:ac:5f:7e:5d:03:ba:
c3:34:bc:95:ad:9f:78:3f:74:46:df:50:7a:9c:1e:06:fb:f0:
3c:ea:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:31 2025 by rpki-client