Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D08CADEDCBE11EFA7D3CEBA762E951A.roa
File: 5D08CADEDCBE11EFA7D3CEBA762E951A.roa (raw, json)
Hash identifier: zeXcK7bmfZmmxGWmC3S/X8KqZYMMk1TNWi7kx6MGSes=
Subject key identifier: 70:76:E6:81:81:DA:A3:D9:F6:F1:B1:49:18:92:73:3E:0F:22:1E:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D08CADEDCBE11EFA7D3CEBA762E951A.roa
Signing time: Mon 27 Jan 2025 14:52:43 +0000
ROA not before: Mon 27 Jan 2025 14:52:40 +0000
ROA not after: Sun 09 Feb 2025 14:52:40 +0000
asID: 5065
IP address blocks: 154.86.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85027 (0x14c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 14:52:40 2025 GMT
Not After : Feb 9 14:52:40 2025 GMT
Subject: CN=67979dbb-1deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0c:07:ec:a9:69:ee:7e:3c:b5:0d:c4:36:f6:
df:8c:06:7e:2e:ed:7c:9c:36:7f:0b:e8:4d:e8:6a:
cb:59:5a:b8:bf:b9:9d:fc:5d:40:9e:8b:ca:ba:b9:
e8:5b:9a:e9:84:40:5c:23:72:d3:dd:b3:25:51:74:
e3:30:69:7a:70:4a:3c:2e:ca:4e:77:3c:63:6c:68:
34:e8:6c:f3:11:8b:ce:68:33:74:0d:91:e8:55:85:
2f:67:db:60:49:09:52:7c:a9:26:95:5f:82:99:c0:
5c:6e:0f:80:fd:4a:58:2e:72:1b:2b:5d:c6:03:0a:
87:8a:c7:75:04:d7:3d:12:c2:79:c6:e5:da:20:f3:
bf:f4:d8:dd:be:9a:fb:ad:70:f4:51:ab:ee:e3:0a:
bf:74:2c:c1:7e:ca:c9:6e:0a:70:31:67:aa:90:09:
1e:f1:6d:8c:2a:c2:76:b9:bb:7c:7e:cd:67:d7:5e:
57:7d:15:17:70:5a:8a:55:15:4a:6e:f9:18:31:7b:
6d:d9:21:1e:4c:e0:11:50:16:c1:63:14:d6:47:70:
db:aa:8c:df:eb:a8:73:71:89:5d:ea:71:42:3b:97:
6a:d8:58:48:92:62:d1:49:48:37:f5:c8:bc:f0:47:
57:e6:cf:e1:5c:24:5c:09:2c:be:fa:b1:25:5c:04:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:76:E6:81:81:DA:A3:D9:F6:F1:B1:49:18:92:73:3E:0F:22:1E:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D08CADEDCBE11EFA7D3CEBA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.97.0/24
Signature Algorithm: sha256WithRSAEncryption
04:40:36:56:77:c5:2b:2f:b9:47:43:3c:03:c2:43:80:36:f1:
2b:46:15:dd:67:a0:3d:47:d9:26:88:9c:5c:00:fd:d1:69:f9:
ca:51:30:92:e1:08:5d:13:ac:cb:b2:59:72:22:c5:f6:ec:b4:
8a:ef:c8:b0:4e:44:0b:50:79:cb:c3:34:18:96:e9:b4:86:55:
6f:6a:af:17:35:74:16:39:08:7e:95:ae:bc:ec:5c:40:fe:a4:
89:64:45:36:de:07:40:17:fe:4b:9c:9e:4a:3a:f4:e7:ed:6e:
db:90:a2:04:3f:f5:53:d8:8b:b1:66:35:34:ad:8c:64:fd:64:
69:82:6e:cb:34:af:0c:b9:da:ff:e6:44:bd:41:c7:29:8b:ae:
e3:d2:0e:ed:94:b8:fa:d2:b8:bd:30:1f:de:a2:5a:fd:36:ca:
0f:d1:bb:e1:58:0d:29:d1:e3:69:78:1f:00:88:9a:87:a2:73:
1b:fc:17:d5:85:59:3b:8f:15:c9:5c:6b:f6:6d:68:9b:6a:2a:
28:88:27:72:3d:c3:3f:47:5d:e5:05:a3:98:71:0a:18:20:6c:
1f:ba:fa:e5:d0:01:f7:57:8c:c4:78:26:fd:c4:d6:93:7e:c2:
cf:91:2b:c0:33:58:a4:07:f0:f7:8a:91:6d:d4:58:14:97:b7:
80:c2:3d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:57 2025 by rpki-client