Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFEB7482C42C11EF9F36AF9C762E951A.roa
File: EFEB7482C42C11EF9F36AF9C762E951A.roa (raw, json)
Hash identifier: ArCuB42Vus+uv8kD/n+gd+hIeNoLu6HOYXXoxcQ2z0c=
Subject key identifier: E0:19:63:90:CC:EC:F7:C7:D1:F1:0A:23:C3:62:C8:0F:5D:F7:D3:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFEB7482C42C11EF9F36AF9C762E951A.roa
Signing time: Fri 27 Dec 2024 08:31:15 +0000
ROA not before: Fri 27 Dec 2024 08:31:12 +0000
ROA not after: Sun 12 Dec 2027 08:31:12 +0000
asID: 17561
IP address blocks: 154.203.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76341 (0x12a35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:31:12 2024 GMT
Not After : Dec 12 08:31:12 2027 GMT
Subject: CN=676e65d3-5a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:bb:9e:fa:71:20:91:78:be:2e:81:1b:ba:
05:e8:10:51:76:5c:86:bb:ca:a9:26:38:a0:65:f6:
39:ff:ed:9b:e8:1f:94:df:da:7d:ff:87:73:c2:8f:
c3:58:59:53:da:a7:29:d3:f0:fa:b9:bf:6e:94:9d:
d5:bd:a8:ca:2d:9e:74:c1:7a:58:ea:38:89:f5:9f:
6e:a5:9e:b9:b2:35:db:2b:47:3a:25:b2:f3:7f:57:
8a:19:80:84:55:ac:d4:17:ad:5d:11:25:bc:8e:2c:
24:6f:2b:67:62:e7:60:f4:6d:f1:42:25:f6:6e:94:
66:9a:8b:69:ef:00:97:db:c6:3b:2a:51:2d:b0:28:
cf:2c:ae:90:cb:0a:02:dd:77:da:d7:ec:1c:d6:54:
16:80:6d:a1:90:f6:b5:c6:cf:cd:4d:fe:30:32:df:
ff:18:ca:1b:e4:4a:57:4d:b1:bf:91:e5:fe:8d:42:
de:3c:54:1c:5c:c7:45:75:7a:9a:d9:09:28:13:de:
64:87:40:07:12:ef:36:12:9e:65:42:19:3c:de:25:
26:b6:ae:64:a9:29:6e:0d:ff:9c:69:b7:80:78:72:
f3:93:32:38:7d:9e:eb:12:4e:bc:6e:69:7b:b7:95:
6d:e6:26:66:c4:f1:22:85:65:93:96:9a:fb:bb:42:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:19:63:90:CC:EC:F7:C7:D1:F1:0A:23:C3:62:C8:0F:5D:F7:D3:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFEB7482C42C11EF9F36AF9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c4:da:2d:f0:a9:65:f1:11:24:32:db:c5:21:77:05:cd:2a:
84:6e:44:2d:79:04:29:bb:f5:d0:ef:4f:87:59:4f:d7:fb:89:
24:8f:30:c1:33:50:0b:10:30:d9:8b:c8:7d:da:78:30:a6:f3:
ca:72:5a:e8:9f:5e:aa:bd:db:cc:91:94:8d:91:c8:b3:f5:52:
de:9d:3f:bc:90:a5:7b:94:b1:5a:73:5f:63:a6:c5:b7:a7:d2:
1e:30:66:8a:d6:ee:ca:00:99:e3:26:4d:32:28:61:e2:c5:0c:
cd:6c:63:27:40:3c:8e:80:c9:9f:b5:1e:fe:d2:71:f5:28:b9:
2e:a6:f4:6b:1a:8f:dc:92:68:8d:70:5b:96:89:80:52:0c:be:
2f:90:ac:bc:ee:ed:25:53:97:ae:ee:48:15:e5:3d:cb:40:a2:
e6:fd:05:16:8e:68:38:e7:47:bb:0e:84:9e:6e:d7:c4:47:6c:
33:97:d1:10:c9:f3:51:fd:e5:f5:a6:bb:47:f5:10:97:be:36:
9a:50:f4:46:42:a2:52:41:ed:4f:4f:91:7f:07:c0:da:df:55:
0d:03:bd:ca:a6:ff:28:12:49:6b:70:10:69:9a:e5:f3:bb:48:
60:33:07:14:8a:cd:63:56:98:af:f2:76:97:64:5e:54:98:61:
cd:cd:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:59:27 2025 by rpki-client