Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F1D1F9E058311F08C5C806A762E951A.roa
File: 5F1D1F9E058311F08C5C806A762E951A.roa (raw, json)
Hash identifier: Pe9o/mETOYAvM7SVQRwPe03FxYjdBVpGcyrEMFBOzyI=
Subject key identifier: FF:FE:E3:A9:F4:2E:87:82:92:0E:BA:66:A8:E6:4B:A3:72:74:CB:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017547
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F1D1F9E058311F08C5C806A762E951A.roa
Signing time: Thu 20 Mar 2025 12:03:44 +0000
ROA not before: Thu 20 Mar 2025 12:03:40 +0000
ROA not after: Mon 28 Apr 2025 12:03:40 +0000
asID: 996
IP address blocks: 154.205.184.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95559 (0x17547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 20 12:03:40 2025 GMT
Not After : Apr 28 12:03:40 2025 GMT
Subject: CN=67dc0420-6c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:85:17:0d:1b:e8:84:a8:d2:61:91:1d:13:
0b:1f:ef:a1:19:1b:b4:ca:a9:5e:29:da:4c:ef:1f:
54:dc:e8:b9:77:0e:38:4a:e7:53:e5:4c:50:22:ed:
84:97:ee:39:1c:66:0e:05:99:43:01:b2:34:ed:e8:
08:a7:a9:63:b3:4b:d7:4a:53:c0:8e:52:59:b1:98:
e7:84:b6:9c:2d:08:dc:7d:fa:98:36:61:ef:10:d9:
19:be:01:17:58:03:23:fc:dd:f5:ab:13:bd:e5:62:
ca:6d:91:65:bd:d1:81:b0:35:09:7e:2a:20:d9:93:
c4:d2:4d:e4:5e:2a:26:21:07:28:2b:43:0e:6d:60:
cd:46:da:85:ca:d7:43:2a:d6:d3:74:67:4b:60:e2:
b1:0c:9d:d0:94:88:90:90:60:f5:52:ce:94:fd:7a:
2b:af:9d:1a:31:fb:63:9a:73:73:14:39:ca:0d:52:
5c:f3:c5:e4:fd:9b:28:f5:e6:32:e0:1c:de:1c:40:
2d:15:a7:5f:1c:fb:30:06:11:65:68:87:a1:ca:44:
cf:e9:af:d7:5e:1e:5a:22:c9:fd:2b:e5:79:24:d5:
c9:b9:84:d3:8e:99:87:b8:15:02:c3:8f:11:38:5f:
93:93:a5:ab:b0:a6:fa:19:f5:be:ab:10:20:f0:dc:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FE:E3:A9:F4:2E:87:82:92:0E:BA:66:A8:E6:4B:A3:72:74:CB:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F1D1F9E058311F08C5C806A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.184.0/23
Signature Algorithm: sha256WithRSAEncryption
91:52:47:ea:e0:42:7b:ba:9c:48:af:08:5c:af:71:b3:03:a4:
ee:cf:b4:76:68:0d:ad:98:64:57:15:a4:8e:23:b9:12:76:b3:
d7:ac:65:0f:45:53:32:67:61:1f:12:e6:3c:2a:a7:9f:44:a7:
01:b2:e7:77:a5:54:9a:f3:b1:b4:4b:ba:30:4b:48:28:c6:26:
aa:eb:44:48:ea:56:23:d3:8d:57:85:f6:41:fa:42:af:16:05:
2e:0a:3f:a7:1e:5c:59:d3:ad:d6:e6:96:db:1a:76:34:2f:db:
43:d8:5f:d0:0f:a7:f3:24:10:b9:cb:f3:3a:c3:98:90:3c:68:
27:b8:f2:ce:1f:49:64:c1:05:9f:d2:9f:ac:0b:21:56:7c:6f:
a5:7d:fb:59:8a:d7:69:5f:67:a3:d4:ef:0b:76:1a:0d:a8:76:
ef:0a:75:9c:32:a2:96:a7:5f:64:d6:e0:bf:fe:7d:a6:05:65:
ad:f5:14:0b:13:de:02:dd:19:70:11:34:15:75:84:f8:d9:b4:
78:5b:4f:47:47:82:22:49:eb:1d:87:62:96:db:f9:15:59:4d:
58:55:a1:60:0b:3d:dc:64:83:1c:fb:c0:5a:77:33:50:67:bc:
b4:b4:8b:e2:70:2e:51:43:a6:b3:8e:8b:f9:94:ce:a9:1a:15:
a6:17:0e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:24 2025 by rpki-client