Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A231606062D11F095CC597E762E951A.roa
File: 5A231606062D11F095CC597E762E951A.roa (raw, json)
Hash identifier: f6VtELDcA30JzKwQoHcNkrYmw+mRbYlg6E4cvuPei4M=
Subject key identifier: 82:82:C6:7A:0F:B3:E2:93:8B:01:FC:E6:C8:FF:B4:3A:E7:29:63:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017561
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A231606062D11F095CC597E762E951A.roa
Signing time: Fri 21 Mar 2025 08:20:30 +0000
ROA not before: Fri 21 Mar 2025 08:20:27 +0000
ROA not after: Sun 27 Apr 2025 08:20:27 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95585 (0x17561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 21 08:20:27 2025 GMT
Not After : Apr 27 08:20:27 2025 GMT
Subject: CN=67dd214e-40db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:ad:6a:0c:e9:23:94:a7:fb:bd:20:5b:76:
31:cc:8a:63:23:1c:ad:a8:ff:78:d3:a7:ec:10:26:
f0:64:33:25:79:98:59:07:bb:57:fd:18:40:cf:bd:
d9:82:fc:55:a1:21:4e:01:72:26:f8:a9:c6:c7:02:
97:2d:67:ee:ba:f2:d0:8e:dc:7c:ff:2a:ea:c8:04:
f5:4d:f9:ce:34:2d:0a:4a:f8:c4:ea:d5:81:88:fa:
18:e5:72:9d:fb:22:da:61:1c:b4:3f:1b:f6:bc:1e:
e7:04:cb:a0:54:04:ab:24:17:0e:a8:76:3e:db:94:
33:88:96:23:6b:2a:06:13:01:0d:38:68:39:46:20:
17:60:7f:d1:56:7d:40:60:88:e5:ea:fa:de:33:43:
db:44:ce:40:ab:1b:72:ab:9e:0e:4f:01:2e:46:d3:
96:44:41:ec:a7:db:43:19:5c:3f:9a:ff:a9:79:7d:
05:1e:50:93:9f:c5:f9:e8:b0:83:5c:99:2b:74:4e:
93:c1:b2:31:9d:a7:f1:f5:bb:12:9c:c4:63:42:56:
71:bc:d8:a4:a3:a6:02:7a:95:49:fe:60:2c:80:9d:
07:7f:84:a8:a3:7e:00:68:0b:93:19:88:ea:8a:57:
d9:61:e3:da:fd:76:dd:25:75:73:d9:d5:79:e0:30:
5e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:82:C6:7A:0F:B3:E2:93:8B:01:FC:E6:C8:FF:B4:3A:E7:29:63:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A231606062D11F095CC597E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
cf:69:3d:70:11:f0:0f:05:62:54:6f:e9:cd:e2:ac:74:5d:bd:
d9:b0:2e:06:1c:59:5b:25:97:2e:1d:20:c2:b8:65:3e:aa:bd:
68:49:27:ae:4e:78:24:80:5d:30:b8:b0:34:7d:4c:7e:ec:b8:
68:bf:bb:0b:23:40:a7:28:d6:6d:6d:f3:dd:f0:55:6d:4c:b2:
b0:98:99:72:2c:a1:04:74:3f:7a:ef:c9:d6:44:99:26:02:9f:
11:f8:22:47:75:c1:46:b7:65:3f:be:b7:e0:ee:82:08:05:0a:
cd:52:db:ce:05:0f:74:24:d8:44:3b:e5:46:f3:57:f0:01:ac:
0a:35:3b:86:93:c6:49:2e:d2:39:2b:53:d8:18:f2:d0:e2:50:
bf:6c:10:c1:2b:ef:c5:9a:85:c9:22:c2:12:39:eb:c5:ec:36:
bd:7a:31:ba:6e:64:fc:b5:95:32:4d:b5:a1:35:9b:0a:f4:9b:
6e:61:4b:09:5e:03:e6:5a:78:19:a1:b8:39:02:27:90:52:e1:
67:10:04:20:02:4a:32:76:60:85:34:f6:e1:1a:36:1d:9c:2c:
ff:fa:00:99:83:e0:73:f9:42:dd:64:fa:ed:97:74:d7:70:50:
7e:37:8c:3d:91:64:91:53:f8:e9:76:a2:2c:ba:d9:90:df:d8:
07:52:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:13:08 2025 by rpki-client