Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F7E87CC3CC11EFBBD165A5762E951A.roa
File: 53F7E87CC3CC11EFBBD165A5762E951A.roa (raw, json)
Hash identifier: /+0PAilfXlw9lhYx1YXfZqxJKb4vI9X/kUSjnSHDceA=
Subject key identifier: E0:71:4D:A9:46:0B:36:3D:8D:5B:13:F8:9A:A0:EC:CD:70:A3:1B:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012810
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F7E87CC3CC11EFBBD165A5762E951A.roa
Signing time: Thu 26 Dec 2024 20:59:42 +0000
ROA not before: Thu 26 Dec 2024 20:59:38 +0000
ROA not after: Sun 12 Dec 2027 20:59:38 +0000
asID: 17561
IP address blocks: 154.83.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75792 (0x12810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 20:59:38 2024 GMT
Not After : Dec 12 20:59:38 2027 GMT
Subject: CN=676dc3be-fea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:94:55:ae:c7:ec:09:f6:04:38:ef:8a:34:9d:
4b:61:c9:9b:93:62:6e:7c:63:41:df:c4:82:7a:1e:
6f:17:1f:b9:d9:5c:7a:56:e4:08:13:00:de:07:79:
f6:d1:d9:e2:ec:53:e6:05:ee:1d:50:a8:dd:d4:7d:
a8:47:75:e0:28:ad:d4:9d:99:25:f7:eb:e9:5b:2b:
0f:36:55:76:b8:ba:84:9d:b3:fd:b3:4a:4d:42:cc:
a1:1e:ab:af:0f:ba:3d:b9:51:7f:46:e4:4c:44:56:
2c:20:2b:24:79:3b:54:23:d5:f3:1c:19:6c:4a:6a:
ed:d1:5e:11:81:84:8c:93:db:4e:f9:07:cd:b2:4a:
fa:b2:90:2d:77:25:5d:a7:f9:94:4d:b0:cc:9b:56:
32:a3:10:8c:1d:9a:8f:16:6d:73:00:bc:4f:40:78:
b0:78:2d:3e:c4:bb:68:dd:1b:99:2d:9f:1e:d8:2d:
5f:7a:a9:b9:da:7a:93:6a:a1:f5:1a:94:0b:d2:39:
68:1d:5c:0e:c3:ea:16:cc:21:7c:fe:37:4d:fe:c0:
e2:21:6f:f6:27:74:18:ba:fd:60:9c:d5:5b:e3:88:
f9:1b:49:b9:26:e3:fe:7d:01:d0:96:d5:69:3c:c9:
b1:0e:ec:5d:00:89:1e:7a:cf:d4:a0:3a:50:13:11:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:71:4D:A9:46:0B:36:3D:8D:5B:13:F8:9A:A0:EC:CD:70:A3:1B:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F7E87CC3CC11EFBBD165A5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.158.0/24
Signature Algorithm: sha256WithRSAEncryption
41:92:cf:06:0d:a6:51:fc:2e:b7:e4:05:6d:4e:16:f0:64:c6:
1e:c8:f2:6d:f7:b5:08:80:26:79:62:9b:0c:00:ae:06:83:95:
47:d8:44:34:c0:c1:0a:53:19:2d:b1:f8:cb:74:01:5c:76:68:
15:be:b3:e0:a2:7c:f7:39:1d:38:2b:a5:79:32:4d:e3:0d:06:
30:1d:a3:37:22:27:77:24:2e:14:55:40:f9:e5:a9:b2:00:eb:
b5:a3:38:fd:47:37:bb:9f:49:d7:66:9e:7b:2b:c5:68:57:99:
0e:9a:6f:a7:31:19:d8:8f:12:8b:91:bd:90:9b:12:1e:1b:cc:
4a:82:44:76:46:0f:f0:bd:0d:1c:5a:d2:d5:df:d9:2f:91:96:
64:4b:2f:0c:16:86:9c:c1:5b:26:a0:bc:0a:88:4e:6e:16:09:
37:52:92:49:ce:c4:8a:2b:67:d2:67:46:a8:b6:c4:ab:35:83:
e5:7f:b4:47:58:f9:56:cd:3c:59:e6:f6:bf:3e:8e:a2:38:77:
7c:09:ed:31:37:3f:7b:9e:5d:8f:ac:91:3a:99:d8:2f:ae:2d:
d0:5b:d6:41:1c:25:44:16:4f:b5:61:19:66:af:fd:61:b7:e8:
17:3d:1a:d2:66:04:61:e8:d6:fb:1c:56:fe:bf:52:be:d9:4a:
2d:4e:26:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:38 2025 by rpki-client