Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ABC6FECDCB911EF90EE5399762E951A.roa
File: 5ABC6FECDCB911EF90EE5399762E951A.roa (raw, json)
Hash identifier: tcBk9bDB3qDQZMNJac6hA0+h0eRavShdcuuLlwO3cNk=
Subject key identifier: CA:F5:C3:58:DB:EF:C6:7C:C5:32:D0:C9:67:4C:81:84:BA:D0:8F:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ABC6FECDCB911EF90EE5399762E951A.roa
Signing time: Mon 27 Jan 2025 14:16:53 +0000
ROA not before: Mon 27 Jan 2025 14:16:43 +0000
ROA not after: Sat 08 Feb 2025 14:16:43 +0000
asID: 7018
IP address blocks: 154.83.224.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85005 (0x14c0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:16:43 2025 GMT
Not After : Feb 8 14:16:43 2025 GMT
Subject: CN=67979555-5448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:07:0f:eb:9c:c2:7b:b1:c1:04:65:bf:7f:
4b:4b:7b:90:e2:4d:54:79:9f:f2:b1:89:3c:e1:d5:
07:64:ac:53:3b:80:c1:12:78:ab:f3:e9:14:77:f1:
5a:d4:1b:3e:65:b5:ee:3d:7e:14:da:dd:24:e9:8b:
36:62:ac:95:32:c9:1f:e4:7e:69:9b:8b:43:9d:9b:
26:d5:bc:20:95:ac:e2:0d:44:10:ce:bf:75:7f:ee:
90:d6:da:cd:8a:26:e4:6e:cb:59:62:38:79:33:d9:
61:49:5e:e5:a9:96:34:14:2a:20:ad:a2:e9:a2:45:
49:08:d0:5d:87:b7:b0:c6:3b:5e:71:e2:6c:28:57:
ca:20:fa:ce:ed:09:a9:eb:25:df:11:aa:cd:f4:ea:
8c:4b:d2:93:f8:4b:94:01:5b:81:9a:17:d6:bb:e6:
a7:ab:40:c9:3c:ae:4e:51:da:e1:95:3f:8f:75:97:
a9:74:bc:4f:e0:39:d7:1b:db:2a:04:05:37:d4:20:
b5:c4:01:66:eb:70:22:82:dd:f0:5b:a8:9b:70:ce:
cd:1b:a3:f7:df:22:ed:96:68:87:3e:28:3f:33:31:
51:da:c2:8b:c2:58:45:36:32:71:21:36:5c:b2:54:
e4:17:9a:25:00:d6:f6:01:3a:5a:87:7a:f2:61:39:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:C3:58:DB:EF:C6:7C:C5:32:D0:C9:67:4C:81:84:BA:D0:8F:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ABC6FECDCB911EF90EE5399762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.224.0/21
Signature Algorithm: sha256WithRSAEncryption
41:0b:c4:a2:4a:59:df:0e:b2:8a:40:e0:90:4f:fd:75:c7:ee:
73:3b:46:8a:c7:19:7b:06:7b:e8:c9:8d:da:e3:07:23:d4:d8:
25:d5:9a:6e:4f:57:27:78:84:fa:a0:bf:4b:8d:f5:e5:fc:9b:
2d:4c:82:bb:f8:c4:29:8b:6b:54:ff:1e:11:37:5a:d3:e0:0e:
3c:e5:b4:de:e2:6d:64:a8:00:3a:a5:ca:af:03:b4:5a:b2:8b:
05:41:3e:2c:dd:93:e5:aa:81:ef:cd:c0:fe:1c:d8:54:86:99:
51:84:31:48:53:73:35:10:8f:57:d8:b1:f9:9a:3e:a6:20:b9:
d6:53:9b:15:77:f9:cb:4a:9d:9c:7f:39:15:c9:2e:69:27:61:
c1:1d:91:6b:80:f6:c7:28:c3:d7:52:bc:84:01:1e:8f:92:01:
b6:83:17:40:0d:9a:91:fc:50:a5:7f:d4:36:37:84:ea:da:ce:
94:ee:87:e0:7a:2b:57:7b:a9:4c:5a:fe:f5:df:ff:7c:38:af:
45:13:79:eb:71:aa:97:1b:2b:f6:5a:47:86:5c:94:4c:f2:01:
be:76:22:b1:e7:49:74:bb:33:3c:70:14:b9:b3:56:ed:ba:62:
37:f4:67:7f:4f:18:2b:25:1e:78:d0:1b:f2:cf:eb:16:d7:78:
7b:7f:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:55:01 2025 by rpki-client