Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF63984F3EB11EFA7EC7E7B762E951A.roa
File: 5CF63984F3EB11EFA7EC7E7B762E951A.roa (raw, json)
Hash identifier: 05dfiNeSoSxQQp4JijbGyQ4ydQLipjR0a9VJP1y3i/E=
Subject key identifier: 84:0A:BA:C3:54:6F:A5:DF:D9:2A:95:00:AA:B8:BB:1B:76:6E:6F:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016093
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF63984F3EB11EFA7EC7E7B762E951A.roa
Signing time: Wed 26 Feb 2025 02:42:47 +0000
ROA not before: Wed 26 Feb 2025 02:42:43 +0000
ROA not after: Thu 19 Feb 2026 02:42:43 +0000
asID: 984
IP address blocks: 154.203.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90259 (0x16093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:42:43 2025 GMT
Not After : Feb 19 02:42:43 2026 GMT
Subject: CN=67be7fa7-8eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:75:bd:c7:cf:95:6e:f3:ca:1a:95:e1:32:
71:95:3d:b5:f1:84:7d:a5:4a:91:6c:4b:99:0c:ef:
7e:bd:95:66:0a:d1:c5:4b:5c:da:f6:93:d9:99:0b:
2e:5b:76:9b:eb:b5:71:76:ad:f5:61:50:fc:13:a8:
37:d5:74:9c:9e:eb:e0:cf:1e:a5:56:8f:39:bb:ac:
c2:ce:26:b4:75:68:37:14:d2:cd:66:27:ec:83:55:
84:fb:05:27:bf:d0:cb:b1:1b:79:f0:5d:35:e4:25:
11:0b:6d:f5:b0:61:9f:2d:19:c0:3d:50:69:b3:10:
df:5f:14:29:27:d7:2f:ca:12:1c:82:8e:99:63:4e:
32:31:6e:7b:4f:11:d4:5f:fc:b2:88:04:95:84:78:
a8:36:4d:6e:c3:68:0c:d8:54:61:8f:35:d5:d4:4a:
a8:70:0c:5d:b0:9b:1c:09:23:22:8d:c4:1e:79:5b:
37:db:0b:dd:c9:98:53:fb:57:0b:86:02:0a:18:54:
a1:34:dd:ca:81:a1:1f:7c:3a:c3:7c:b4:0e:27:eb:
24:67:b6:8b:09:af:cf:2e:ad:a3:14:75:93:52:79:
06:ad:b1:bb:0c:18:f7:de:19:b3:73:fa:b4:44:f0:
2e:78:e6:88:4e:63:3f:72:01:2b:10:b1:7a:63:41:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0A:BA:C3:54:6F:A5:DF:D9:2A:95:00:AA:B8:BB:1B:76:6E:6F:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5CF63984F3EB11EFA7EC7E7B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.97.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:fc:c0:82:41:d6:7c:da:2b:c0:6b:72:2c:01:89:33:10:69:
6e:7e:21:ba:a4:e9:ea:08:39:08:a3:42:af:64:02:ad:f9:c7:
03:b9:df:c1:5d:07:ea:63:0b:3f:08:15:08:b6:9b:2c:0b:f4:
5b:dc:e8:1a:a0:02:2c:1b:fb:eb:6d:4e:17:92:ea:02:66:7f:
a1:15:82:cd:2e:b6:0e:42:01:c5:b3:02:7c:23:12:53:60:e3:
e6:3f:65:b5:b0:f4:10:7e:8a:44:e0:d4:71:e9:4b:31:00:e1:
33:7e:e3:85:cf:68:f7:4b:ec:38:d0:f7:03:c7:ed:94:ca:4e:
e5:d7:c8:d3:a1:63:7a:2f:0f:9b:fb:d5:78:6d:8c:1b:e3:9d:
25:e8:ee:8b:bb:9d:5a:f3:af:3c:ff:e2:c6:85:d3:d8:5c:8c:
1d:7e:46:4d:6b:33:97:45:a9:66:27:f0:13:e5:44:bf:42:a0:
62:2e:6a:b0:c6:9b:b5:93:85:74:8c:e2:d4:e2:2f:2d:7a:e4:
c6:6e:09:7b:29:b0:a3:21:e6:1d:c3:e9:28:91:4e:75:6e:3e:
92:41:b4:64:e1:42:9b:cd:3b:42:5c:7c:08:3d:af:c7:00:bf:
33:c9:ee:4e:0c:48:61:c9:c6:46:e5:39:92:54:64:fa:c6:fc:
8f:d2:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:01:40 2025 by rpki-client