Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ABB4850C42D11EF8DEFC39E762E951A.roa
File: 5ABB4850C42D11EF8DEFC39E762E951A.roa (raw, json)
Hash identifier: 3CiHvQ7qHgiTWGLgJO2XknvvhFEXZGU/yhPwmw/GXCI=
Subject key identifier: 41:F6:23:E7:FF:09:C9:13:48:8C:C6:2E:B9:EA:21:98:CA:82:06:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012A39
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ABB4850C42D11EF8DEFC39E762E951A.roa
Signing time: Fri 27 Dec 2024 08:34:15 +0000
ROA not before: Fri 27 Dec 2024 08:34:11 +0000
ROA not after: Sun 12 Dec 2027 08:34:11 +0000
asID: 17561
IP address blocks: 154.203.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76345 (0x12a39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 08:34:11 2024 GMT
Not After : Dec 12 08:34:11 2027 GMT
Subject: CN=676e6687-a323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:3c:3d:56:cc:dd:b0:e2:33:13:b2:04:11:
1f:b3:07:24:8b:54:fa:00:5a:f0:c4:b5:6d:35:95:
a1:8d:bf:bb:d0:24:32:d3:a5:32:a2:12:3d:a1:2a:
dd:0e:90:89:4c:1f:62:e8:3c:2e:fe:d3:cc:16:a2:
53:32:3d:62:f3:4e:49:74:d7:b4:76:a0:d6:b5:ff:
8d:56:e8:80:a2:8d:0b:67:1c:93:97:03:61:d8:04:
fd:fb:02:7a:3e:b7:89:a9:a6:ef:d8:8c:a6:f2:12:
92:1d:4c:fc:1d:a8:d0:e5:3f:d7:01:9b:da:5d:ed:
5c:3c:33:3f:37:0b:a3:f3:d7:ae:a4:ec:02:ec:fa:
cb:db:91:27:4b:a9:45:b7:0d:73:16:39:7a:4e:42:
6c:d0:2b:17:91:fe:f5:6b:5f:b4:4c:33:1f:9f:9d:
e0:6c:e2:a7:26:27:f6:dc:60:6f:bd:9c:34:ad:3b:
4e:bc:e6:95:07:d8:4e:9f:04:0d:77:f1:b0:84:63:
d3:82:37:a1:63:3e:06:41:f9:b2:93:3a:89:a7:1a:
01:e1:bc:f8:7a:30:c9:8e:2b:66:4f:c9:c2:b9:ef:
08:1e:e6:a9:aa:37:1e:4c:f1:45:b7:d1:ed:f0:35:
8d:7f:c5:a0:da:47:ca:d1:83:47:fb:9a:85:3b:51:
2c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F6:23:E7:FF:09:C9:13:48:8C:C6:2E:B9:EA:21:98:CA:82:06:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ABB4850C42D11EF8DEFC39E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.5.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ab:3a:28:25:6d:7a:6c:d6:09:ab:cf:3c:79:47:af:88:c8:
c2:7c:54:b6:ff:7c:51:b6:8c:84:be:70:a1:70:d3:c8:70:1d:
47:50:f6:2e:09:82:f9:d4:f1:f9:80:42:9e:38:4d:9a:09:5b:
dc:1f:90:84:9f:1d:e6:8b:a1:9b:ce:ff:d5:d5:ab:1f:24:24:
a8:e7:99:48:5f:2d:1a:2f:28:b7:44:a3:98:15:a2:a7:f8:3d:
28:19:2e:d5:44:e7:e1:59:c6:7b:f9:58:6f:18:73:f1:3c:94:
9c:9f:3c:d2:df:c9:f1:d1:82:eb:bc:46:59:d3:b4:e2:cc:86:
5d:1a:5e:5e:1d:d0:a6:1b:6a:b2:0d:74:6c:4f:2a:fc:18:69:
cd:f4:ab:42:b9:a1:b9:67:b3:38:c0:82:5a:e0:6f:cc:d1:4d:
99:11:39:eb:e3:13:35:4c:1d:a3:13:26:cb:50:e7:9b:05:0a:
c6:b1:97:1e:60:4f:11:9d:a4:13:5f:78:4f:c7:d6:c8:65:56:
ca:a3:a4:f5:db:4a:2d:c1:be:46:2a:2e:b8:8c:f3:c4:50:47:
15:38:39:bb:8c:d8:e9:cb:a2:04:e1:1e:8e:cf:f7:fd:32:40:
f9:fb:6b:11:37:5b:fa:f8:e1:f5:a4:fc:47:94:f1:33:4e:0c:
82:19:83:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:10 2025 by rpki-client