Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBDA862C92311EFA0EB419D762E951A.roa
File: EFBDA862C92311EFA0EB419D762E951A.roa (raw, json)
Hash identifier: BZ5MohYZCjZFmEQhQHzobSS9oZ6fzGlvM7CrrBO21OQ=
Subject key identifier: F1:48:4E:2A:99:7F:DC:E7:4B:85:FC:0F:E4:C3:A3:65:D8:23:3F:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013343
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBDA862C92311EFA0EB419D762E951A.roa
Signing time: Thu 02 Jan 2025 16:09:25 +0000
ROA not before: Thu 02 Jan 2025 16:09:22 +0000
ROA not after: Mon 13 Dec 2027 16:09:22 +0000
asID: 17561
IP address blocks: 154.222.104.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78659 (0x13343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 16:09:22 2025 GMT
Not After : Dec 13 16:09:22 2027 GMT
Subject: CN=6776ba35-c79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:be:bd:56:2d:1f:a7:55:a2:7c:8e:7d:0a:
f6:58:f7:0d:1f:a5:3c:9d:b9:ed:a2:68:ce:7f:7a:
4c:e8:a7:8e:d4:fe:b9:da:5f:a8:df:56:ca:82:1a:
46:f8:ba:d5:7b:41:44:94:64:1d:28:14:a8:07:6b:
69:c6:9f:b0:7a:b7:c0:83:ed:f9:4b:43:31:ca:4b:
8f:46:4f:9b:98:41:d4:94:20:ab:ab:84:27:ec:c9:
9b:1e:10:5c:43:bd:f0:c2:82:fd:61:34:e6:fe:81:
5a:6b:18:16:3b:ca:da:bc:a4:77:4a:27:34:64:68:
95:9d:4c:f0:b3:a9:f8:e4:2c:ab:34:a5:8c:32:36:
ad:8d:7a:03:f7:b4:69:ab:c2:2d:cb:44:e2:ee:c5:
b1:0a:d9:cc:9b:25:4e:f0:6c:56:6f:28:a2:12:6a:
26:3f:48:29:cc:cc:97:3c:ae:48:05:8f:ca:e9:b1:
ec:1c:67:f9:07:be:32:08:54:0d:0c:4b:6d:af:8a:
84:d5:24:8e:80:be:78:98:dd:e6:1e:ca:e4:65:d1:
ea:a6:9a:b9:13:ed:cd:45:15:33:be:8d:b0:de:f5:
e0:c8:a9:65:b8:b7:6f:16:8d:c4:1c:c4:78:d4:2e:
74:f7:cb:fc:5e:4b:f9:32:ef:7d:66:99:ee:4b:ff:
99:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:48:4E:2A:99:7F:DC:E7:4B:85:FC:0F:E4:C3:A3:65:D8:23:3F:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFBDA862C92311EFA0EB419D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:cf:5b:46:28:1b:55:41:9c:aa:0a:3d:5c:b6:3f:43:b8:8a:
65:60:72:de:70:5a:17:a6:f6:63:32:09:ed:b3:c7:d8:8a:4d:
00:54:28:49:02:93:49:6d:1c:24:4a:54:95:d1:11:c7:17:4e:
67:74:8b:81:29:57:41:6d:65:c5:7e:b7:13:a7:af:e9:7c:50:
d6:5c:ef:50:6c:c2:3b:00:2c:9d:b5:21:1a:c9:e9:63:93:66:
7b:a5:41:d5:60:06:50:f8:27:05:9a:a1:6e:b0:b3:cc:57:e9:
b0:f2:90:85:cf:50:2c:13:4b:a6:e8:97:af:7f:20:96:07:9e:
0c:83:19:69:57:c4:34:d3:d5:7c:28:88:d8:5e:77:2c:bb:16:
73:f1:3b:2f:97:3f:3c:4a:67:1b:17:23:c6:47:68:b9:58:43:
48:de:03:5d:af:63:dd:aa:60:c6:11:60:de:bf:15:3f:cf:c8:
89:5d:38:f8:0c:5e:c7:c3:1c:98:11:0a:61:05:6c:77:d2:1d:
f5:74:3f:60:8a:aa:c3:d0:19:e1:ff:3f:68:e7:fa:4c:83:02:
94:b4:31:cf:72:38:17:47:d2:c1:94:6f:a1:69:c3:39:53:2b:
33:80:c8:13:9f:6a:79:5f:55:db:32:cd:b5:bd:ad:88:79:9d:
34:23:99:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:44 2025 by rpki-client