Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CCA02E4D30A11EF8BEE478B762E951A.roa
File: 5CCA02E4D30A11EF8BEE478B762E951A.roa (raw, json)
Hash identifier: dsqX2DMYoYx2n5wuRialweZMy11Jl/s6j3cRSAaajSA=
Subject key identifier: 43:5A:10:5F:74:62:FE:9A:64:AB:3F:78:1E:91:A0:B9:52:70:AB:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BA5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CCA02E4D30A11EF8BEE478B762E951A.roa
Signing time: Wed 15 Jan 2025 06:31:33 +0000
ROA not before: Wed 15 Jan 2025 06:31:29 +0000
ROA not after: Wed 19 Feb 2025 06:31:29 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80805 (0x13ba5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 15 06:31:29 2025 GMT
Not After : Feb 19 06:31:29 2025 GMT
Subject: CN=67875645-3137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:e0:e0:f7:38:2b:5f:16:6c:f0:93:d6:bf:
0f:df:f2:be:15:44:41:98:6c:06:62:91:c1:a4:02:
0e:2f:33:9e:79:9b:66:35:eb:55:3e:37:d3:30:34:
50:6e:e8:87:e1:0c:7b:3c:b5:56:cd:96:71:ae:77:
08:cf:45:e2:06:bd:20:99:68:8b:51:b9:20:4d:c8:
c0:35:af:29:68:30:9c:00:77:f3:72:5a:c9:1d:5f:
d4:f9:8b:84:87:61:ff:d0:7e:7f:0e:d0:9f:26:f7:
91:c6:11:14:89:15:9f:75:fd:e2:38:58:e3:28:96:
85:15:63:7a:00:ff:0a:7f:c6:62:52:51:c5:b4:63:
85:93:59:62:74:5e:21:c3:e3:92:70:08:0b:c8:e6:
03:1f:e3:f3:b2:e9:1c:2d:6f:b1:6c:10:8a:69:e2:
af:c9:f2:0b:8a:ab:38:19:44:c9:4b:90:8f:18:57:
d6:d3:d6:e3:ed:36:d7:84:d9:11:83:9d:0e:37:ab:
d2:c2:5b:8c:fc:28:1c:c3:ea:2c:0d:61:51:fd:47:
81:89:ce:50:de:76:3f:9b:45:80:93:22:21:c0:70:
9f:b5:5a:d9:f0:2c:67:aa:1c:46:e3:e5:43:72:64:
1c:d3:62:ac:b8:f4:7f:94:31:11:47:78:52:45:a0:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5A:10:5F:74:62:FE:9A:64:AB:3F:78:1E:91:A0:B9:52:70:AB:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CCA02E4D30A11EF8BEE478B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2e:34:62:85:e6:a1:4d:0a:b1:60:16:05:d5:d5:5c:a1:e2:
de:38:71:29:5e:a4:cc:9b:82:9b:a8:77:d5:b7:2e:09:43:9b:
c4:cd:7f:34:91:c3:f0:aa:9d:24:8d:bb:8a:4a:0d:98:61:02:
1f:96:ea:e3:5b:6a:83:1b:eb:d2:ad:7f:66:45:6b:26:c1:8f:
96:31:f0:08:a7:d3:a5:48:53:cc:88:93:1b:30:da:b5:8f:8a:
2c:81:bc:b2:0b:f5:72:ec:1c:49:cf:a2:10:fe:c2:69:01:1b:
63:4a:7c:3a:fa:a4:fa:ef:15:a1:df:49:e1:1a:06:21:4a:b1:
b4:61:29:64:b5:dd:62:f3:04:d6:6a:ed:e2:e9:5b:db:5f:6a:
d9:2b:eb:01:be:27:de:aa:5e:38:02:b9:77:76:b9:0b:1b:3d:
5e:b1:3d:0b:63:e0:3c:bd:b6:c7:54:a4:33:fa:65:6c:9e:24:
9e:8a:4f:82:71:5a:ae:fb:4b:de:46:39:0b:b8:1a:1a:88:27:
95:67:c9:15:b1:80:08:fb:19:17:75:3d:e4:8d:7b:82:48:d6:
07:f5:69:e7:7c:4c:d4:11:29:9e:24:f4:61:ed:6d:e1:3e:07:
84:5a:c5:9b:59:5c:3b:a5:62:8a:d5:7f:a6:73:6a:43:6b:f7:
59:73:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:18 2025 by rpki-client