Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A09924CAD611EFB2422C68762E951A.roa
File: 73A09924CAD611EFB2422C68762E951A.roa (raw, json)
Hash identifier: O/5c/qPf09+uKjOShm6ujBD60b4mfcQEwq+9mrWTZhc=
Subject key identifier: CE:FD:16:E9:59:79:4E:15:40:57:F9:3B:6C:4B:78:A2:C4:28:F5:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013539
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A09924CAD611EFB2422C68762E951A.roa
Signing time: Sat 04 Jan 2025 19:59:48 +0000
ROA not before: Sun 05 Jan 2025 19:59:45 +0000
ROA not after: Sat 08 Feb 2025 19:59:45 +0000
asID: 203020
IP address blocks: 154.217.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79161 (0x13539)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 19:59:45 2025 GMT
Not After : Feb 8 19:59:45 2025 GMT
Subject: CN=67799334-e6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:b8:00:89:14:e5:76:a3:5d:95:25:15:19:
a3:ff:a3:42:ec:c6:93:61:79:ad:b6:92:7f:9c:8d:
ec:17:7c:a5:48:30:e8:9f:d6:76:32:01:bb:0d:82:
df:b4:58:8b:5d:68:3b:d5:84:0f:bf:eb:bc:a1:d4:
bb:fd:bb:6a:dc:50:db:f7:49:68:83:e4:6d:c4:08:
d7:82:12:9e:be:b9:92:c8:af:0c:72:56:1b:d8:d0:
d8:a3:bf:a1:a5:b2:a2:50:88:7a:5f:a4:0c:26:12:
4a:17:82:62:8c:b9:8e:5f:06:c1:7f:5b:6e:34:10:
3a:58:24:4c:43:bb:fd:ed:71:e0:33:09:06:a8:2d:
51:2e:78:9e:b7:6b:4a:60:34:59:15:16:33:94:cb:
96:86:77:bf:71:39:15:04:e2:ae:4a:fb:30:82:a6:
09:64:eb:b5:15:7d:e0:4b:9c:7b:7e:e5:0e:8e:10:
24:86:c8:8d:cc:4c:9b:8b:60:7b:ea:aa:4b:8c:97:
44:8d:f9:3f:6c:3f:e0:fb:1b:48:18:71:86:8c:a8:
b2:82:e9:0c:a3:25:4c:51:c5:01:d2:cc:da:82:ac:
48:03:98:f3:a5:92:85:21:64:c4:3b:56:43:f3:4e:
14:52:bf:4a:68:41:6d:0f:e1:0c:fd:b7:35:38:a4:
58:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FD:16:E9:59:79:4E:15:40:57:F9:3B:6C:4B:78:A2:C4:28:F5:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73A09924CAD611EFB2422C68762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.5.0/24
Signature Algorithm: sha256WithRSAEncryption
76:73:b4:d9:6a:8f:34:3e:0f:25:ca:21:78:f9:86:02:65:72:
10:9f:7c:73:3b:9a:e4:01:10:cd:e7:be:4d:1b:39:06:ff:8b:
48:48:b7:e4:d9:cc:29:c9:2a:97:94:78:81:47:0c:5d:d8:a7:
fd:93:53:6a:3e:a3:88:35:e7:96:64:59:84:a6:a3:40:ee:42:
e9:60:a5:b6:3a:96:4c:0a:80:63:04:72:a2:31:c9:4e:4a:26:
ff:f3:6e:d2:13:db:dd:3f:81:6f:97:ae:2d:d2:33:ac:e7:cc:
84:69:66:ac:72:ce:74:04:a7:de:d6:58:6b:5c:e6:d9:3a:ff:
13:3b:d9:2a:41:6f:fd:4b:cc:7d:05:13:fb:75:e3:0c:36:96:
26:d4:fc:6a:48:72:ed:6b:9e:fb:88:f1:05:9e:f6:64:a9:71:
81:d1:84:dc:e0:f7:ee:9b:63:4e:05:da:40:fb:4d:18:22:0d:
a9:9a:d6:e0:59:1c:b8:56:b9:ea:17:a8:59:a7:d2:fa:d6:27:
3a:04:9d:6f:3c:f7:9d:38:d1:c2:02:7a:52:38:e9:ba:75:d3:
c6:dc:74:7d:5f:8c:0c:d9:81:de:b9:d9:76:b5:3b:0f:08:dd:
f3:96:bf:48:47:d9:42:38:64:68:89:bc:df:59:11:b4:2f:24:
ba:48:8d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:46 2025 by rpki-client