Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFF39FB2C8BF11EFAADEF9AE762E951A.roa
File: EFF39FB2C8BF11EFAADEF9AE762E951A.roa (raw, json)
Hash identifier: sQivx+avSqcjbqr4tORJ7PrhSEofwS7oIsb2QqC1QOM=
Subject key identifier: F3:D0:E9:07:C6:18:50:AC:9A:04:F4:FF:98:D5:54:E3:9F:AC:1D:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0131F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFF39FB2C8BF11EFAADEF9AE762E951A.roa
Signing time: Thu 02 Jan 2025 04:13:36 +0000
ROA not before: Thu 02 Jan 2025 04:13:32 +0000
ROA not after: Mon 13 Dec 2027 04:13:32 +0000
asID: 17561
IP address blocks: 154.221.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78328 (0x131f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 04:13:32 2025 GMT
Not After : Dec 13 04:13:32 2027 GMT
Subject: CN=67761270-9a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:8b:0b:83:4b:ea:e5:f0:b3:07:74:fb:f8:
26:a9:cd:db:9e:7f:10:ff:f7:d8:53:3a:e3:b6:ee:
02:89:3e:98:82:2e:ed:c2:be:e9:e1:5c:59:df:68:
41:25:2c:e0:56:69:70:41:42:af:dd:b4:08:7d:91:
3e:1d:aa:04:47:50:0e:f0:5b:21:dd:ee:9f:cb:38:
89:4d:9e:6f:bd:1e:63:e2:fc:da:f3:39:86:61:7a:
4a:41:99:20:9b:68:20:0c:cb:27:6a:ec:43:7f:88:
99:98:21:b2:c9:1c:81:2c:fe:9d:e0:02:71:70:fa:
63:77:9c:f0:bf:f1:dc:2f:dd:4c:e5:09:86:3f:d7:
c3:60:b2:3b:ec:0f:ce:3e:47:e1:77:5a:dd:5d:20:
b5:c1:0e:12:7a:f1:b5:4f:0d:77:fe:3c:8a:9e:e3:
4f:8b:69:cb:ac:de:6f:4a:39:43:e7:85:81:00:a0:
96:77:90:cd:29:dd:fd:8c:7a:25:db:bf:53:9a:26:
d0:61:2c:fb:ba:4e:62:94:0c:e7:14:b6:87:d7:22:
6d:e5:4b:99:ab:5c:f8:89:ad:f7:a2:ad:90:04:4d:
8f:83:67:c3:a3:a3:6c:fb:79:b9:29:38:c3:c7:25:
61:0c:f3:be:35:95:90:c7:fc:7b:dc:06:ff:63:d2:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D0:E9:07:C6:18:50:AC:9A:04:F4:FF:98:D5:54:E3:9F:AC:1D:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFF39FB2C8BF11EFAADEF9AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.202.0/24
Signature Algorithm: sha256WithRSAEncryption
97:e5:ec:79:50:ca:ef:a3:81:80:e9:36:94:08:3b:f3:eb:a0:
22:8a:2a:51:0a:d9:73:94:c2:20:9b:18:6f:16:6f:f4:bb:30:
9d:70:35:e6:7c:a6:25:77:1e:8e:df:13:be:3d:0d:82:80:04:
10:75:f6:7b:47:38:da:f6:5c:68:c8:6a:c7:1b:5d:73:3e:83:
86:97:6f:f9:65:33:aa:a5:02:4c:ca:fb:82:db:b1:d1:89:60:
eb:14:52:63:e9:ca:2d:13:d3:f8:86:c8:58:16:ba:e9:8f:7d:
04:92:41:8c:b9:26:8b:bb:8b:6d:b4:93:1d:c0:27:c8:45:7e:
4d:5f:07:25:20:b7:7c:5d:4b:c1:34:fb:c7:2d:22:be:e6:02:
8e:93:1f:43:f5:ed:fc:2c:d9:f2:f2:f3:8c:7e:4a:c7:4a:75:
19:bb:8c:25:c6:a2:ed:7a:e4:e2:b4:c6:e5:8b:9b:d3:24:6c:
8c:8c:1f:d8:a8:bc:b7:96:f8:33:07:d5:7c:da:9d:c3:81:ee:
d0:11:27:cc:a6:8f:84:9f:59:78:b0:f9:ed:6b:4d:15:23:33:
6d:68:2e:39:3b:e4:ae:19:c4:5d:85:99:7e:cd:54:8d:62:0c:
b9:bd:c6:15:91:e4:5b:73:83:bc:7c:5b:5a:d5:bd:41:78:a2:
20:86:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:21 2025 by rpki-client