Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0259527ED96D11EFADB2E358762E951A.roa
File: 0259527ED96D11EFADB2E358762E951A.roa (raw, json)
Hash identifier: 9WRJOSylMno5pvw2jp7dlWh4FgOMZyMQ5jNcVcXBn2U=
Subject key identifier: 4A:9B:F1:01:9C:99:32:0D:7B:43:4B:68:C2:CA:E2:B7:F2:EA:47:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0140EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0259527ED96D11EFADB2E358762E951A.roa
Signing time: Thu 23 Jan 2025 09:32:49 +0000
ROA not before: Thu 23 Jan 2025 09:32:45 +0000
ROA not after: Fri 28 Feb 2025 09:32:45 +0000
asID: 62240
IP address blocks: 154.194.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82158 (0x140ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 09:32:45 2025 GMT
Not After : Feb 28 09:32:45 2025 GMT
Subject: CN=67920cc0-5a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:96:f2:96:0d:c7:f1:f9:b0:99:3a:1b:28:26:
c0:50:13:12:64:68:90:f9:68:ac:fe:f8:c1:d3:28:
71:e9:ef:c6:50:ef:c0:a7:78:31:92:6d:40:34:cd:
9f:20:f7:67:5d:0c:94:76:d1:b0:ee:f4:61:4a:a7:
10:62:b5:46:4c:ee:5d:79:f4:e8:2d:9c:c2:a3:ab:
66:56:dc:d1:7a:41:5c:f4:e8:9d:64:95:cc:e9:40:
f8:e1:78:b6:00:66:b4:be:e8:a2:1e:ee:15:e5:33:
c1:96:d3:ed:6a:16:4f:54:55:8c:25:30:56:66:4c:
34:f6:cf:98:e5:8d:d1:78:51:c3:59:ad:a3:b8:60:
98:4b:55:0b:4c:97:90:69:31:1f:71:d4:7c:1a:fe:
a6:37:5f:03:cb:28:78:13:dc:20:b2:a9:41:17:a8:
cd:65:25:a5:37:6e:9e:3d:8a:f5:74:d8:71:4a:75:
73:1e:36:da:23:6f:1f:61:ce:ec:8b:d6:5d:f2:fd:
b0:f4:85:45:4b:74:07:b6:ad:29:9a:dd:08:28:bf:
39:8a:20:e2:9b:04:41:cc:6d:b6:34:25:ed:82:34:
e9:e8:69:d5:c6:0e:2d:a3:77:66:73:98:e7:26:9a:
e8:54:4e:74:2b:eb:ae:40:74:13:25:a0:fe:ba:b1:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:F1:01:9C:99:32:0D:7B:43:4B:68:C2:CA:E2:B7:F2:EA:47:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0259527ED96D11EFADB2E358762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.113.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0b:38:2a:c5:ec:a9:b5:89:62:23:90:f6:1a:ec:0d:a4:1b:
e9:9f:db:da:fc:b9:91:fd:cd:2d:b2:c0:20:0e:a1:81:3b:c0:
ad:72:7e:72:35:6f:5b:98:32:76:e8:04:ca:21:35:28:69:23:
16:14:56:89:22:9d:23:e6:06:8c:f6:bf:e3:2d:3e:af:1e:5a:
75:92:f2:37:28:8c:bb:73:38:2b:96:af:51:c9:69:e7:50:9b:
0e:7e:6d:b1:17:b8:0e:d2:ed:b5:d7:22:f3:1c:1f:86:a9:0c:
95:ec:17:cd:ed:94:f4:fc:eb:98:ed:4c:55:22:7a:09:6e:be:
f0:16:37:70:ec:42:c8:13:54:76:19:b1:c0:a0:a0:75:cf:2c:
af:ae:16:fb:fe:3f:b7:98:96:5f:cc:a5:af:27:1e:41:ff:73:
94:5a:0e:f2:cc:1d:de:37:6b:29:0f:7d:f0:dc:d0:a5:ab:d4:
f7:68:83:c4:c8:6c:3c:10:68:94:ac:aa:0f:eb:9e:bb:67:6b:
c2:50:18:4d:c5:ab:3b:e5:7d:d6:e3:76:3e:1d:2e:fb:88:8a:
d8:96:90:90:c8:d7:b0:5f:98:16:59:7c:5f:67:9f:7b:59:ab:
a9:33:10:fe:8d:ae:6d:ab:2f:69:b4:64:f6:8c:6a:ad:48:fd:
9f:3f:15:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:51 2025 by rpki-client