Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5793BB2F35C11EFB395CCAF762E951A.roa
File: C5793BB2F35C11EFB395CCAF762E951A.roa (raw, json)
Hash identifier: 9wwFdYoRew1GJfONQqtzUD+hQGfj2YZMaaJGW3evC8A=
Subject key identifier: 71:EC:A1:CF:EF:A5:35:2B:8D:3D:44:41:7C:D2:BD:20:DA:C7:CD:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015E10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5793BB2F35C11EFB395CCAF762E951A.roa
Signing time: Tue 25 Feb 2025 09:42:05 +0000
ROA not before: Tue 25 Feb 2025 09:42:01 +0000
ROA not after: Sat 19 Feb 2028 09:42:01 +0000
asID: 17561
IP address blocks: 154.83.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89616 (0x15e10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 09:42:01 2025 GMT
Not After : Feb 19 09:42:01 2028 GMT
Subject: CN=67bd906d-cced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:e7:e6:ef:5d:0b:39:4c:c1:ab:23:95:9f:
f0:7f:0d:a7:27:c6:22:2a:71:28:a8:80:7c:66:e2:
1c:b6:56:09:3b:c4:df:49:6c:77:61:eb:20:8f:05:
39:6a:46:6c:9b:56:6e:13:42:8e:64:80:c9:83:e3:
7c:08:e7:d7:61:c7:d6:81:09:5d:a8:7e:37:9b:44:
f6:0e:26:3b:4d:3c:1f:d7:52:a1:16:40:19:f7:5a:
ef:28:d5:e8:29:b2:28:c6:d0:f6:59:ae:95:a5:32:
96:78:da:5f:c6:29:be:75:ff:08:d2:ba:f1:dc:12:
50:ff:5a:d0:92:dc:93:6b:6c:53:81:da:85:9a:eb:
1e:3e:93:9c:db:e8:f6:93:cf:fb:a6:49:da:32:06:
c3:5e:c5:d0:cd:96:50:a1:f6:0d:a5:97:c9:37:1c:
ed:d8:39:bf:78:98:e1:f6:61:94:c9:9c:e9:b4:d3:
88:90:63:0a:f5:0b:30:02:75:6d:88:a8:89:34:05:
2a:d7:77:41:f7:cc:8f:75:ea:65:74:7d:07:ad:26:
1c:4d:70:33:66:1f:41:17:71:2f:da:1d:7b:56:c2:
0c:ed:5e:b4:e5:5c:8b:bd:d3:cd:c2:df:91:c3:f6:
81:a7:72:84:42:e9:2b:41:26:99:cc:1a:a1:43:d7:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EC:A1:CF:EF:A5:35:2B:8D:3D:44:41:7C:D2:BD:20:DA:C7:CD:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5793BB2F35C11EFB395CCAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.79.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1e:40:24:be:3b:75:41:d1:2f:75:26:06:f6:e9:3b:fc:cd:
e5:fa:85:ec:f8:21:c5:e7:63:cc:5c:6b:ae:c3:99:07:c2:f1:
90:80:43:b8:46:ee:bb:dc:8c:6f:0d:07:e4:27:e3:ca:66:91:
8a:11:0d:14:d0:3b:62:1a:2c:43:ac:2e:e5:a1:d5:ec:96:d0:
d0:80:9e:18:06:5f:cb:8a:62:6f:d9:9e:88:9d:d8:3e:1a:1e:
69:e5:7a:1f:6b:7d:8e:41:40:a7:61:8e:a1:8c:5f:e5:d0:6c:
82:7a:1d:a8:42:5e:40:86:9d:aa:8c:68:d8:07:c0:1a:39:31:
22:90:61:55:81:3b:c0:b0:00:6e:04:c4:ac:f7:3c:69:04:1d:
0f:1f:c0:cd:b7:2a:16:be:21:67:bc:f3:c2:4d:c1:a7:90:0b:
fb:3e:82:53:b7:76:6e:7d:d2:41:62:0b:46:a1:52:f8:1c:f1:
a1:da:1c:72:a2:a6:6b:7d:c8:a1:7d:a4:b8:56:2f:6e:fd:f8:
42:de:f2:ef:85:51:b3:d3:26:f7:ec:c1:b5:26:c2:ff:34:f4:
73:fe:1f:22:6f:5e:f1:91:07:ea:6c:36:39:d9:5e:d2:c2:e0:
79:0e:46:00:95:a4:c2:94:f0:6f:a0:26:87:22:1a:75:be:c9:
a5:17:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:01 2025 by rpki-client