Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB76B32D97811EFBE6E3BA8762E951A.roa
File: EEB76B32D97811EFBE6E3BA8762E951A.roa (raw, json)
Hash identifier: xuvJDpqDsXtcNwVtGVNTgf9xZc6xhmXJkseDV/4On6w=
Subject key identifier: 52:FC:97:89:A2:30:FA:77:86:9E:91:4C:A2:8C:CA:15:F6:01:C2:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014164
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB76B32D97811EFBE6E3BA8762E951A.roa
Signing time: Thu 23 Jan 2025 10:58:10 +0000
ROA not before: Thu 23 Jan 2025 10:58:06 +0000
ROA not after: Wed 28 May 2025 10:58:06 +0000
asID: 62240
IP address blocks: 154.195.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82276 (0x14164)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 23 10:58:06 2025 GMT
Not After : May 28 10:58:06 2025 GMT
Subject: CN=679220c1-501a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:02:cf:82:08:0b:e3:32:11:c5:fc:c6:db:
a6:6f:d2:30:33:01:e1:72:1d:0d:ab:30:69:69:1a:
a3:f3:9a:d4:9b:01:8a:67:5f:94:36:aa:bd:2e:b5:
58:c1:05:13:02:05:73:56:0f:90:52:d8:83:6e:67:
ad:12:8a:c7:91:8c:c1:24:d7:b3:92:a7:fe:b9:76:
4b:62:4a:35:ec:15:26:6a:b1:fb:ce:3d:53:25:cc:
ff:9d:76:34:98:40:8d:c9:58:c0:b0:81:42:f8:a0:
4b:b1:36:58:78:08:14:6c:c9:5f:00:42:b4:96:42:
91:51:67:a0:ad:6f:bb:95:d8:9b:82:0e:e2:bd:d7:
31:ee:69:85:b4:af:3f:fa:d7:2b:b2:a2:59:d8:ae:
36:de:f7:89:f3:5f:fc:ff:44:77:fc:be:b1:dc:a8:
ff:9d:20:85:17:fc:7c:32:6b:51:10:b6:8c:5d:a2:
42:4e:75:cc:33:ae:18:c1:49:49:72:2f:b1:ed:6d:
39:e2:ac:33:3c:d7:bc:e1:9c:c5:e4:5f:31:72:98:
0d:58:60:6c:a5:6e:92:ac:12:a5:83:a1:9a:b1:79:
18:71:6b:8d:ad:48:d5:1a:32:23:c7:e0:cc:4b:04:
c3:f8:99:87:6a:0d:17:13:3e:ff:f4:6c:58:20:52:
9d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FC:97:89:A2:30:FA:77:86:9E:91:4C:A2:8C:CA:15:F6:01:C2:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEB76B32D97811EFBE6E3BA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.117.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7e:f4:b3:81:eb:ad:d7:83:63:46:9b:fc:87:96:4b:2e:ad:
ea:66:be:c4:e4:9b:d0:2a:96:a5:47:95:a6:e2:6a:0f:1f:f9:
24:c2:f6:c6:75:3d:f5:07:68:f7:43:7d:e8:f4:d1:f7:35:4c:
41:04:4c:b2:61:0d:9f:95:f6:9a:46:25:99:a3:b0:25:f3:b8:
40:71:1f:39:2e:95:84:75:e6:39:55:9b:ac:bd:10:04:07:f7:
1c:36:c4:a6:bb:c2:62:bb:b4:e1:b4:ec:fe:06:fe:72:dc:db:
80:c8:fc:2f:7c:71:ac:38:42:59:16:95:e2:1c:b5:61:4c:e8:
aa:c3:5d:0c:7e:fe:2f:5d:6b:19:46:cb:19:ec:22:36:2a:51:
5b:25:18:4a:d8:40:2d:de:62:4f:eb:c3:78:46:8d:5d:1f:3e:
b9:d5:0c:bc:a2:a9:c7:17:dd:f7:73:0d:3f:0c:62:0f:25:76:
26:da:d3:d8:2b:65:d7:b8:fc:8f:86:87:80:5d:ec:05:b9:cd:
e8:75:4d:fc:5f:87:89:26:33:79:08:82:39:ec:70:bf:ef:fa:
c1:44:8d:1b:10:29:61:ca:d2:6b:8e:17:90:7d:61:f8:68:ce:
e9:b1:bf:96:74:bf:fb:28:ec:e1:21:45:38:84:5f:a9:a5:fc:
d7:70:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:32:29 2025 by rpki-client