Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105653C2AD5311EFBE723385762E951A.roa
File: 105653C2AD5311EFBE723385762E951A.roa (raw, json)
Hash identifier: w4pfzMdGXN9hrLhipvRDvMbU5dJrIuch9NRC7v21xfc=
Subject key identifier: 34:B7:00:DD:91:3B:2A:64:CC:4C:C4:55:40:45:43:76:AF:66:43:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0114D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105653C2AD5311EFBE723385762E951A.roa
Signing time: Thu 28 Nov 2024 06:36:14 +0000
ROA not before: Thu 28 Nov 2024 06:36:10 +0000
ROA not after: Sun 30 Nov 2025 06:36:10 +0000
asID: 37517
IP address blocks: 154.203.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70869 (0x114d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Nov 28 06:36:10 2024 GMT
Not After : Nov 30 06:36:10 2025 GMT
Subject: CN=67480f5e-ef17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:55:70:b3:c9:f6:60:9d:8c:cf:b3:f7:49:51:
b5:6c:49:96:6c:4d:c8:f8:ac:de:57:30:48:14:7c:
fe:58:14:35:29:68:cd:0b:0a:79:71:f2:7b:bc:8f:
c2:49:95:73:40:21:1e:36:b9:90:2c:de:6e:09:bc:
30:62:64:69:3e:24:0d:e0:4c:37:ba:89:f8:2e:1e:
1c:eb:31:9d:46:13:40:e6:3f:f3:9c:d0:7d:27:3f:
fe:19:4e:c1:db:9c:a0:5a:ba:aa:94:48:ea:e3:07:
5b:ba:87:96:6c:50:d7:3e:cd:12:c5:50:1a:bd:6b:
54:fd:41:11:ef:33:c9:cf:ac:e0:fa:79:08:8c:5e:
b8:0c:4d:51:9e:71:68:2c:6e:d1:5e:ee:4d:9d:d1:
50:43:69:cb:bb:2d:23:85:65:d7:fa:af:58:12:97:
9c:13:c0:4e:c1:6d:aa:c6:c5:0f:92:cd:8e:0b:40:
7d:f3:f5:81:f4:bf:a0:f9:cf:af:56:92:e9:a6:99:
ae:94:dc:8f:de:c4:16:91:41:7e:86:e7:17:4a:bd:
b7:ad:ea:26:c4:ed:ff:c2:39:7f:ac:3b:28:51:4d:
2c:6f:00:f5:89:90:b1:63:c4:a1:c4:b1:36:74:8b:
10:63:55:11:93:4c:af:6e:aa:fa:98:fd:f3:32:85:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B7:00:DD:91:3B:2A:64:CC:4C:C4:55:40:45:43:76:AF:66:43:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/105653C2AD5311EFBE723385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a2:3d:c8:61:1a:6d:00:e0:82:e8:a7:08:36:c6:c8:2c:17:81:
33:0c:ae:b0:9b:96:78:d3:25:b2:ae:4a:b8:ed:2e:0e:84:0f:
ac:5e:c6:1b:88:d9:73:8c:79:02:a9:23:f6:01:b7:b2:b9:59:
42:4e:44:04:bd:2e:12:4f:0d:f0:3b:f3:a4:97:93:a4:e9:a0:
44:64:7a:6a:57:3a:91:0c:31:05:c6:ee:4e:47:7b:5e:3b:4b:
c1:8f:de:f5:55:ca:65:6f:e7:e5:9f:3b:4f:02:65:ce:37:89:
b9:50:bb:c1:68:2a:1f:bb:27:cb:d3:b6:3c:74:42:61:f2:f6:
f0:5a:59:b8:62:c9:72:11:62:6a:40:2f:bf:d8:4f:36:e7:35:
c8:71:6f:0a:52:b2:93:70:71:bc:8b:c1:b4:ab:9d:e0:19:c7:
32:36:52:de:ab:a6:e1:02:0f:28:e5:3c:e8:bc:b1:08:92:42:
b4:50:62:e5:dc:9d:f9:c1:8f:13:83:f1:3a:e7:8e:06:3b:75:
c6:c2:ad:84:09:99:77:be:5f:b3:88:6f:bd:61:15:a8:e1:c0:
c1:81:49:3d:53:3c:8c:62:ac:3d:28:dc:00:09:87:fa:c1:a5:
44:7f:8a:41:3d:1e:8c:ed:47:ea:c0:d9:f5:3a:4f:e6:79:81:
13:b8:5f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:34 2025 by rpki-client