Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DDB9460CDD611EFAFCD6985762E951A.roa
File: 5DDB9460CDD611EFAFCD6985762E951A.roa (raw, json)
Hash identifier: elqSVY9uSMmmnUIEmSPGlO9qWL4Sjgf7M2tW9ktmxzQ=
Subject key identifier: 4C:58:9E:F5:BE:54:7E:BC:26:CF:A2:68:7C:E5:B1:42:C4:67:BB:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01376D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DDB9460CDD611EFAFCD6985762E951A.roa
Signing time: Wed 08 Jan 2025 15:36:45 +0000
ROA not before: Wed 08 Jan 2025 15:36:42 +0000
ROA not after: Mon 03 Jan 2028 15:36:42 +0000
asID: 17561
IP address blocks: 154.88.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79725 (0x1376d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:36:42 2025 GMT
Not After : Jan 3 15:36:42 2028 GMT
Subject: CN=677e9b8d-9f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:09:1a:3a:16:d4:f7:2c:7e:fb:e1:34:af:
6c:fc:7f:1b:e5:22:9c:1d:6e:cf:ba:71:e0:af:35:
34:be:ea:43:11:1c:37:37:8f:5d:28:41:b4:c9:ec:
78:d3:c9:5b:4f:9b:c5:ab:82:b8:48:90:ad:e8:2e:
9c:66:71:e3:e4:5c:b7:2a:12:79:e3:11:b9:b9:cd:
3b:93:1a:43:57:b5:e8:6a:91:c3:a3:fa:e6:71:b2:
fa:b1:ee:2a:e4:86:04:7f:01:6e:7c:45:f9:a7:88:
d1:b5:6f:c7:cc:4d:30:88:2c:02:3c:bf:05:f4:39:
2c:99:9d:99:2e:7e:90:2b:54:b6:ee:ed:40:c7:e5:
66:12:6d:9b:60:59:6e:68:70:fe:ab:73:0d:4d:69:
e9:a5:70:1a:dd:99:7a:47:92:da:b1:b1:04:17:77:
bb:f4:bd:c5:4b:97:cc:83:e4:d7:7e:c5:76:9c:bb:
b7:e7:74:a5:9f:09:b2:08:33:c3:8c:e5:4a:53:1e:
f8:a2:72:d8:aa:67:ff:09:2f:a2:9a:af:f6:7b:47:
6c:7e:78:ea:31:f2:c8:3a:1d:c6:b0:47:29:f4:11:
a7:d5:23:89:bb:bd:09:3c:ab:d0:0f:7b:d1:a0:a2:
f3:b6:cc:4e:5c:39:fb:68:da:e6:32:33:67:58:0e:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:9E:F5:BE:54:7E:BC:26:CF:A2:68:7C:E5:B1:42:C4:67:BB:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5DDB9460CDD611EFAFCD6985762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.38.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:26:06:5d:d1:36:cc:8f:70:eb:06:bb:6d:e9:89:60:21:d8:
05:94:66:e0:4f:3e:53:2b:5d:85:b9:db:49:97:32:01:bd:35:
d0:c4:47:9d:98:6b:40:63:75:2f:81:7b:85:5e:66:7c:74:62:
3a:d7:7b:ac:be:b9:b7:b5:74:f0:b6:24:31:6f:df:6b:93:aa:
08:64:fb:4f:fa:06:61:57:c7:92:ce:bb:45:04:06:42:61:ff:
8b:a7:cc:f9:b4:8d:fc:d4:f4:94:64:94:5c:59:5a:a4:d8:32:
99:13:40:a8:3e:c7:95:60:8b:76:ad:5c:db:ca:47:70:32:36:
d4:df:14:bb:25:a5:17:32:92:17:58:37:da:92:9c:a2:be:9c:
9d:84:9f:76:a9:b5:8f:71:70:93:61:34:53:9b:80:e5:09:31:
bf:ee:8b:77:68:ff:3b:55:8f:1f:73:b0:a0:3b:54:68:36:7f:
66:04:77:e6:94:d3:c5:ad:2f:8d:09:88:84:dc:4c:a5:68:60:
2b:b4:c3:fe:21:2f:2c:31:ce:c0:18:ab:e2:ba:e8:12:8f:bc:
69:6c:1b:95:e5:56:ca:a8:33:62:26:af:dc:aa:9f:98:aa:15:
a4:ad:ce:37:ef:97:98:95:42:61:01:7f:c0:28:b5:6e:51:6c:
b1:31:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:16 2025 by rpki-client