Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5C37012CEED11EFB6252370762E951A.roa
File: C5C37012CEED11EFB6252370762E951A.roa (raw, json)
Hash identifier: lqpiTqi1jrZhc4nWmbOqw9FDXP+9b3dvV8WezNTQtZk=
Subject key identifier: 25:7C:BC:76:C0:E9:F1:31:74:18:E7:B9:A1:1A:41:7A:EE:48:FC:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01396E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5C37012CEED11EFB6252370762E951A.roa
Signing time: Fri 10 Jan 2025 00:56:49 +0000
ROA not before: Fri 10 Jan 2025 00:00:45 +0000
ROA not after: Thu 13 Feb 2025 00:00:45 +0000
asID: 54801
IP address blocks: 154.83.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80238 (0x1396e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 00:00:45 2025 GMT
Not After : Feb 13 00:00:45 2025 GMT
Subject: CN=67807051-aa0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:73:e6:93:19:dd:82:13:3d:62:b0:55:a0:
b4:2e:ef:f9:c2:d0:08:e9:37:00:de:13:6a:ad:a1:
34:3f:09:8f:d2:ed:26:13:1f:c9:8d:70:3d:e9:7d:
cc:36:22:73:50:ce:c2:f9:78:b0:9b:3d:1c:5f:ff:
a5:af:97:b5:04:98:b9:bd:d3:b6:81:5c:c2:91:be:
58:91:42:78:1b:1d:cf:79:53:e3:a0:35:13:55:a8:
b3:e3:58:87:40:61:4a:63:1d:e3:15:b9:c6:3d:a1:
4a:8b:fc:56:92:8a:95:7e:be:67:82:dc:1e:e7:6b:
a1:bb:fb:12:f0:72:12:04:bd:c9:4b:c0:a0:f7:ad:
19:8b:27:be:11:c8:2c:f1:f5:7b:c5:6f:55:b4:eb:
62:8c:5b:c0:2e:eb:a3:7d:ef:a3:c3:1a:5f:8f:4d:
08:b7:d3:1b:ee:65:a9:93:6c:c5:68:e5:01:6b:50:
50:ac:77:b8:e5:76:51:29:d6:b3:c3:d9:b2:d9:d8:
37:90:e4:a0:43:ee:cb:ed:df:5c:a9:d2:cc:15:27:
b8:2d:c0:c6:6b:5a:d3:58:48:73:1f:80:de:75:59:
70:02:6c:ec:e2:53:f7:2d:c3:7f:10:40:2a:27:d0:
ad:f0:e1:5f:d2:0d:a8:2e:49:3e:99:13:27:a9:64:
01:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:BC:76:C0:E9:F1:31:74:18:E7:B9:A1:1A:41:7A:EE:48:FC:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5C37012CEED11EFB6252370762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.158.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a4:92:5b:2e:c9:0c:9c:ca:32:b5:ed:d9:51:7a:5a:33:35:
50:99:9b:ec:58:f0:40:fb:6c:68:da:ab:4f:0c:ff:55:2e:e6:
1f:a7:cb:7b:d7:7e:b4:93:fa:e1:b9:c7:61:c4:e2:49:4d:37:
69:6d:23:35:26:74:67:ad:99:15:ac:03:e2:dd:59:8f:7e:ce:
58:20:17:f5:bb:f2:07:db:e1:90:47:61:7d:8e:5c:6c:2d:6b:
11:eb:d2:10:8e:94:82:e2:a2:b3:a7:91:65:74:d5:48:11:23:
f8:86:b7:ed:d6:fa:e6:12:14:75:d2:47:2a:6a:b6:f0:90:0d:
2b:ef:e1:c2:00:ca:2f:42:27:15:3b:d7:04:fe:27:03:ac:eb:
6e:48:d8:e7:f9:0d:36:5f:ee:f3:d8:c3:ac:ce:51:4b:35:bd:
21:72:e4:aa:e5:9f:a4:d4:32:79:da:1e:90:89:41:72:6b:0a:
b3:53:3d:d3:e8:86:66:d4:65:21:7c:c2:c9:74:3d:67:23:8c:
04:bf:ff:ab:e4:6b:c2:3b:66:7b:98:b5:7d:e2:bb:ce:23:91:
67:ca:73:00:fb:79:21:35:ea:28:78:b1:b9:a3:fa:d0:60:1d:
a6:bb:70:a3:bb:60:75:d4:65:f7:65:cc:40:58:a4:c3:5a:d0:
90:b9:74:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:05:22 2025 by rpki-client