Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5DD07E2F3E511EFBCCDBB4F762E951A.roa
File: E5DD07E2F3E511EFBCCDBB4F762E951A.roa (raw, json)
Hash identifier: q62AIrN8EseSNJUmVu3sRIJb7p/bUbm1XUZ2kYwjnfg=
Subject key identifier: 8D:31:E9:87:95:7C:65:A3:88:BB:A0:D4:6D:24:B7:6C:59:6C:FF:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016076
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5DD07E2F3E511EFBCCDBB4F762E951A.roa
Signing time: Wed 26 Feb 2025 02:03:40 +0000
ROA not before: Wed 26 Feb 2025 02:03:36 +0000
ROA not after: Thu 19 Feb 2026 02:03:36 +0000
asID: 984
IP address blocks: 154.203.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90230 (0x16076)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 02:03:36 2025 GMT
Not After : Feb 19 02:03:36 2026 GMT
Subject: CN=67be767c-2a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4e:0e:52:8f:80:36:03:3a:d0:a8:e7:db:a9:
aa:8b:10:21:11:04:66:5c:33:c3:f1:15:02:66:98:
95:2b:5c:9c:ca:d0:87:fa:66:97:ed:a2:58:1c:a5:
69:c1:54:8c:89:23:a3:8b:7f:00:73:60:73:4e:5e:
28:53:b8:6f:38:bf:0c:35:77:88:57:bd:07:0c:39:
0c:22:ef:d8:31:ae:6b:42:a3:f9:cc:2d:ab:27:49:
98:7f:a3:9e:a6:8b:96:4f:1d:5a:ad:12:e2:bb:35:
b3:2f:bc:1e:41:d7:eb:1d:e0:ba:53:d8:f4:b1:a3:
8e:28:1a:b3:b1:5f:ec:04:61:35:88:c0:17:66:e2:
7f:e0:7e:46:0c:b7:2c:e7:99:27:6c:92:0d:3d:a3:
25:b4:3e:05:59:96:c5:df:c6:e7:fe:49:56:bc:1d:
ec:da:4e:b1:07:39:ab:e7:80:81:70:27:bc:70:a1:
82:c5:ce:76:c0:5d:2b:03:b9:14:48:f1:87:2b:e5:
a0:6f:a0:76:a1:79:53:e4:4a:2d:b1:7f:14:6d:ce:
9e:a4:b7:a3:a3:d3:2f:6d:da:6d:7a:1d:03:05:1b:
89:0a:d7:1e:43:84:0d:3e:19:ab:a0:b2:5b:5f:ce:
bd:ff:d9:65:df:67:10:73:31:15:d5:d9:4e:e2:b3:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:31:E9:87:95:7C:65:A3:88:BB:A0:D4:6D:24:B7:6C:59:6C:FF:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5DD07E2F3E511EFBCCDBB4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.5.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d9:32:87:cc:7c:6f:30:6b:4f:95:fb:3a:8b:4d:1b:1a:17:
7d:9f:8d:b6:10:f2:71:0c:fe:e0:4b:8b:d3:b4:2f:57:b6:0b:
80:a4:f3:a3:24:c3:0d:d9:47:0a:3f:33:75:c1:6a:18:95:eb:
85:58:d0:c0:83:b3:f9:f0:aa:e4:fc:79:5d:bd:73:13:ce:4d:
f2:44:bf:a6:89:74:0e:97:fc:9f:9c:3c:4b:d2:2f:37:1d:f7:
54:96:5c:d8:c6:e3:f6:95:6e:92:08:bd:ac:48:c4:45:31:2c:
e9:01:27:5a:90:a4:49:89:00:1d:d6:46:92:f4:e5:6d:ce:29:
47:86:44:95:ac:08:06:b6:52:52:bd:2e:f6:34:99:55:6f:59:
77:fe:45:d3:14:b6:f7:77:26:9a:dd:ea:7c:52:18:bc:58:df:
3f:f8:00:c1:73:fd:4d:63:91:33:fa:44:91:26:7f:8c:b9:03:
ee:d3:d5:d1:e3:cf:db:b5:2a:ee:9e:ce:64:06:d2:aa:aa:7a:
cf:99:b4:e8:cd:f8:df:fe:dd:40:b8:57:a2:2f:30:92:14:72:
ce:e1:80:79:0b:97:f8:01:57:54:c9:94:84:45:86:e5:83:02:
c7:26:6c:e3:d8:7b:00:82:40:fa:43:74:98:24:90:da:0b:61:
46:33:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:52 2025 by rpki-client