Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5810AF44C3DA11EF9B85C87F762E951A.roa
File: 5810AF44C3DA11EF9B85C87F762E951A.roa (raw, json)
Hash identifier: GD+ajPT5G8CXkO5Z0mnsa+RsmNMAxzhW981XftzW5Rg=
Subject key identifier: A3:B6:CA:8B:B0:59:82:60:0E:FD:3F:2D:C3:B3:CC:E0:39:69:EA:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01289E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5810AF44C3DA11EF9B85C87F762E951A.roa
Signing time: Thu 26 Dec 2024 22:40:02 +0000
ROA not before: Thu 26 Dec 2024 22:39:58 +0000
ROA not after: Sun 12 Dec 2027 22:39:58 +0000
asID: 17561
IP address blocks: 154.85.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75934 (0x1289e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 22:39:58 2024 GMT
Not After : Dec 12 22:39:58 2027 GMT
Subject: CN=676ddb42-f0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:d6:39:c3:f8:15:2e:cf:5e:e5:19:08:72:
4c:6e:06:87:f9:2b:c8:98:b8:2b:0b:08:00:e0:eb:
a8:83:3a:7a:1a:5e:78:19:9d:d8:cb:5b:ca:e1:28:
f9:c9:80:9d:d4:c9:96:2b:b4:10:2f:a9:0e:2a:13:
34:0f:54:12:4c:34:55:b7:f5:33:4c:11:7e:1c:24:
82:be:28:95:6a:bb:01:e7:1c:25:bd:a0:b2:1f:54:
f5:62:60:31:48:83:0b:1c:b0:e6:10:6b:36:d2:92:
8e:c0:a2:9e:05:4d:82:2f:eb:db:44:7f:96:4d:b6:
76:11:94:f5:d2:d3:cf:59:51:97:a5:f0:fe:be:9d:
1f:ff:08:4e:b5:40:4a:e9:8f:54:4b:a0:6e:06:38:
24:69:d4:70:10:7d:96:2d:b9:81:d4:bf:e7:82:f7:
d4:11:09:5c:e8:eb:78:2f:5a:a4:fc:fc:7d:b0:07:
f5:cf:c0:71:dd:74:2b:f7:cd:cc:c3:c8:91:dd:ce:
89:69:b3:42:51:45:22:c0:44:fa:c1:45:41:98:9e:
d5:8f:3d:ca:21:91:7b:5f:16:9f:00:43:aa:35:64:
36:4d:52:3f:43:e2:36:08:7d:e3:e5:dd:a9:15:0b:
b6:36:30:a9:ad:3c:85:f6:fc:eb:5d:2e:38:d9:94:
17:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:B6:CA:8B:B0:59:82:60:0E:FD:3F:2D:C3:B3:CC:E0:39:69:EA:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5810AF44C3DA11EF9B85C87F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:49:f7:ac:0b:d7:53:c1:0d:df:8b:4b:1c:b7:a7:e7:77:ea:
9f:6e:b4:d4:41:b9:63:9f:8e:57:73:0d:50:70:51:98:b8:71:
5d:05:0f:dd:73:4b:8a:8b:d9:3d:36:d2:04:6c:24:88:97:85:
0c:3d:16:2f:38:a3:5d:93:6b:1a:c5:8a:18:b6:d0:df:83:35:
34:4c:21:af:f9:3c:c4:d4:d8:e5:9d:58:6a:66:67:07:df:12:
4d:5f:a6:ff:cb:20:ce:9a:b2:79:d6:18:18:8a:2d:a5:6b:dd:
f7:97:17:ed:56:06:55:08:5e:3b:0d:ba:36:65:9c:bf:ac:da:
a0:ea:ff:3f:23:1b:80:9f:b2:c6:58:2b:58:c0:63:42:e3:ac:
ac:23:73:f4:91:f9:83:2d:da:4e:a3:eb:a4:47:85:e6:77:ea:
ea:88:af:29:80:81:a9:0c:a6:fd:57:28:4e:a5:e6:f2:09:78:
ba:a1:58:ed:f9:d9:a8:be:8c:2d:17:2f:e4:95:e2:3f:55:ac:
ba:46:80:66:d4:b8:ca:28:a8:4e:dd:8d:68:fe:09:a4:12:d4:
9d:44:76:f2:e3:9a:63:4a:02:a7:52:c2:0b:5f:8d:be:46:5b:
c3:00:7c:85:36:9d:15:55:34:a3:ed:7e:9b:7f:38:84:4d:54:
59:bc:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:22 2025 by rpki-client