Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C139748D4B811EFBC4B1058762E951A.roa
File: 0C139748D4B811EFBC4B1058762E951A.roa (raw, json)
Hash identifier: r2dkjRmohW1HiPhD2SzLzoWjUcruVN3YyMPwyvekSuU=
Subject key identifier: C7:23:20:C1:1E:CF:73:C7:18:A7:98:B3:6D:00:17:B9:08:80:68:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013C5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C139748D4B811EFBC4B1058762E951A.roa
Signing time: Fri 17 Jan 2025 09:47:21 +0000
ROA not before: Fri 17 Jan 2025 09:47:18 +0000
ROA not after: Mon 17 Feb 2025 09:47:18 +0000
asID: 140883
IP address blocks: 154.201.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80989 (0x13c5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 17 09:47:18 2025 GMT
Not After : Feb 17 09:47:18 2025 GMT
Subject: CN=678a2729-6f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e8:6b:52:c1:79:97:f5:a3:40:d9:15:97:39:
ca:72:35:7b:fb:e0:fd:78:1f:b2:91:56:1b:86:87:
2b:74:4a:00:2f:74:9b:f6:d4:0b:75:f0:5a:b5:a0:
a1:70:a1:da:8f:3b:86:43:45:d0:3a:a7:31:cd:79:
a3:8f:c0:8b:fd:9c:d2:dc:b6:46:45:cb:8c:f3:8b:
39:81:c0:f8:77:3c:7e:08:71:1f:ae:db:95:9e:d0:
58:ae:e1:b2:fe:2b:7a:eb:1a:c2:c4:7c:5c:94:58:
4f:8f:e8:e3:60:93:b6:4d:72:4e:d3:0e:e5:2c:38:
f7:27:7c:d5:2a:2e:b2:c3:bf:06:7e:aa:11:58:a6:
c8:55:4f:ac:60:a8:c1:f9:77:17:67:78:e1:e4:a5:
e9:f4:3b:77:0d:ce:aa:ed:8b:c3:f8:fb:d4:ed:9b:
9b:8b:04:80:bb:0f:7c:6c:61:1d:04:90:11:c5:8f:
df:a6:65:c3:84:2f:10:a5:18:ef:2e:16:1b:62:0f:
3c:be:c2:dd:5c:d5:40:53:6b:94:c9:36:41:a0:9f:
57:90:aa:eb:d6:51:b0:03:52:27:14:a1:12:df:9e:
3c:75:0a:0a:b6:76:1e:15:88:53:f9:9b:bf:ed:84:
60:99:66:10:48:63:12:31:d3:68:02:4b:09:dd:2b:
6a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:23:20:C1:1E:CF:73:C7:18:A7:98:B3:6D:00:17:B9:08:80:68:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0C139748D4B811EFBC4B1058762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.5.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4d:52:22:23:be:79:7b:d0:bd:82:73:2b:11:f3:fc:08:d0:
c4:49:ba:04:6e:a1:ff:9c:22:97:4a:4b:1a:1e:bc:ac:8f:10:
e3:cc:a3:50:4a:54:c2:b3:b1:28:d5:73:13:2e:cd:b3:8f:92:
80:7d:3a:24:87:78:9d:c5:08:9a:25:9d:44:df:0b:b4:f4:02:
39:2f:cf:ad:f1:e6:43:fa:aa:1d:e4:7b:86:a3:c8:b5:99:4b:
6a:49:34:db:08:5b:76:34:07:06:af:fd:60:9a:6d:cb:88:12:
31:30:b2:2a:4d:e2:d8:d1:97:b9:b0:dd:3e:03:b9:b2:de:35:
08:54:19:ff:d0:a3:f1:f3:48:76:39:4e:cc:ab:08:00:48:13:
be:7f:7c:ed:b6:fe:d8:d8:11:4c:e1:0d:ae:4d:9c:a1:66:54:
70:31:76:5d:de:21:34:8c:f1:22:27:ee:c1:e4:15:3d:25:07:
5a:31:0f:9a:31:04:bc:22:2c:95:0b:46:1d:1b:cf:1d:ca:15:
2d:bc:87:06:fa:fa:77:53:1f:39:a0:f0:cf:bb:c1:08:eb:8b:
b1:03:cd:47:13:f0:13:fc:9c:5d:fb:b0:dc:08:57:99:08:56:
77:65:57:b6:c1:8c:38:83:6a:1d:ee:24:5f:45:5e:a3:9d:4d:
18:34:16:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:37:37 2025 by rpki-client