Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E278E34B5F711EFB62F8E78762E951A.roa
File: 5E278E34B5F711EFB62F8E78762E951A.roa (raw, json)
Hash identifier: 1WWKE6F2UcpWPKdNzjScKWWicVgbHVQS2G0qT3vdXQ0=
Subject key identifier: 53:7A:9B:52:4F:21:A3:DD:9E:20:40:C8:BB:86:CF:38:91:F8:B6:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0119AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E278E34B5F711EFB62F8E78762E951A.roa
Signing time: Mon 09 Dec 2024 06:32:31 +0000
ROA not before: Mon 09 Dec 2024 06:32:28 +0000
ROA not after: Mon 19 Oct 2026 06:32:28 +0000
asID: 150706
IP address blocks: 154.205.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72109 (0x119ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 9 06:32:28 2024 GMT
Not After : Oct 19 06:32:28 2026 GMT
Subject: CN=67568eff-fc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:24:35:69:db:04:32:84:9a:34:27:6d:8c:
e9:61:2f:35:5e:cc:d5:32:6a:99:b0:c1:87:36:cf:
82:0b:04:d1:48:de:10:cc:05:f7:11:6f:25:70:54:
53:c7:f2:99:05:b1:a4:c4:8e:1d:1b:9e:12:97:e5:
39:4d:bc:d3:e0:2e:81:1b:3f:c1:fb:a4:49:8e:46:
30:ca:c2:f4:28:bd:cd:16:e1:37:88:80:2a:56:d6:
91:71:b6:00:ec:d6:67:d4:30:3b:f5:00:d0:08:9e:
ed:ee:2c:0a:c9:d0:25:c5:88:9c:d8:66:de:9f:1b:
1a:ad:b8:4f:5e:86:80:4c:9d:3a:5e:e1:02:7d:a9:
22:bf:d6:0f:8e:8b:b7:32:b2:ba:52:22:03:ed:f9:
28:c1:0c:ab:7b:8b:e6:11:75:b9:b1:6d:a1:44:a4:
c9:3f:d8:4c:b5:45:07:d7:94:63:6f:04:8d:cc:b7:
e8:9b:2b:c6:ae:02:60:63:4f:b0:d6:6e:17:86:e9:
53:91:04:48:4e:7c:92:65:54:e0:70:c0:4c:ec:c0:
d5:13:ff:19:c2:21:78:13:90:06:24:5b:59:4b:30:
0c:73:1d:43:c9:17:db:57:38:59:1f:c4:87:9f:d3:
f8:bd:f9:cd:80:d7:09:7c:e9:d9:ac:62:c1:c7:a2:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:9B:52:4F:21:A3:DD:9E:20:40:C8:BB:86:CF:38:91:F8:B6:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E278E34B5F711EFB62F8E78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.8.0/22
Signature Algorithm: sha256WithRSAEncryption
65:30:bf:a9:4d:58:b4:2b:d8:5c:31:25:86:55:cc:0a:2f:57:
a1:68:c5:19:81:64:f9:67:98:39:fe:96:03:1e:76:86:9a:b5:
4c:87:cf:5e:74:2f:47:4c:d0:aa:5c:a2:18:ca:fa:fe:36:c6:
15:98:66:2d:61:45:8f:93:d0:93:b6:3f:fd:29:07:ba:15:2d:
6f:d6:16:e5:4e:ba:2d:f5:af:3b:63:7c:76:35:4d:b7:9e:a1:
3f:89:2f:45:3f:d2:d7:c6:bb:b4:a9:bd:a0:30:ac:23:48:48:
f2:d3:a6:5d:0c:75:13:fc:0d:87:07:40:de:11:e5:6f:e0:29:
e2:53:cd:17:29:29:f6:c4:df:05:f7:63:23:88:8f:b0:4f:eb:
89:27:dc:93:51:0e:2f:93:2c:6c:08:f2:34:7a:0c:85:d6:43:
9e:90:7f:7c:08:22:f5:9f:c5:cb:01:dc:4a:e4:a9:14:d0:85:
73:ac:a8:20:f9:9c:f5:3c:84:f4:8a:b6:f7:a0:de:af:fc:cf:
24:4a:cd:22:ae:53:87:cd:57:5a:32:16:61:55:d4:e8:0e:f6:
2c:40:df:22:05:7d:8b:2b:42:e0:4f:5d:52:d3:ef:be:8b:cf:
f4:90:cd:8f:7b:fb:4c:73:2c:5e:bf:24:81:37:aa:48:69:bf:
f1:94:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:04 2025 by rpki-client