Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095BE332DE2411EF9435BAAF762E951A.roa
File: 095BE332DE2411EF9435BAAF762E951A.roa (raw, json)
Hash identifier: 3tpo11Y+q2cFzwky/x2rJ0HDT7TgW8E+aoWYrTzKRAg=
Subject key identifier: 48:B6:82:94:19:0A:99:EF:40:91:7E:6F:1B:C4:81:18:FA:1B:EF:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095BE332DE2411EF9435BAAF762E951A.roa
Signing time: Wed 29 Jan 2025 09:33:03 +0000
ROA not before: Wed 29 Jan 2025 09:32:59 +0000
ROA not after: Wed 05 Mar 2025 09:32:59 +0000
asID: 203020
IP address blocks: 154.201.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85350 (0x14d66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:32:59 2025 GMT
Not After : Mar 5 09:32:59 2025 GMT
Subject: CN=6799f5cf-88ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5e:a7:09:27:71:cb:c8:d0:8f:4c:48:45:8b:
34:66:d7:c5:dd:75:ee:4d:c8:d1:53:5c:df:30:61:
c4:08:7c:19:3f:a0:10:27:bb:f9:8f:31:ec:f1:58:
01:10:c8:4e:12:74:59:fd:71:a3:0f:c1:45:6d:49:
cc:10:16:f5:74:3e:78:63:dd:cd:64:51:d3:1d:6c:
e6:cc:a0:54:4e:1c:5b:a9:f2:a9:16:b8:13:fe:b4:
e8:a5:af:5c:60:e5:39:2e:37:e5:38:c3:61:d7:70:
35:05:f7:d4:08:02:0a:38:cb:f3:64:a2:39:4e:bd:
61:a1:03:da:a9:cb:4e:75:9c:e4:80:17:cc:d2:db:
48:d7:b0:6a:8a:bd:78:46:dd:c0:93:3e:63:33:65:
42:62:e5:67:dc:04:ce:99:ad:d5:b2:7c:c6:ef:bb:
2f:6f:0d:c4:b0:33:12:bd:a7:47:a2:2d:1c:09:bc:
68:3a:3f:26:a5:8f:8e:d7:9c:ea:45:0d:93:3e:97:
f5:8e:78:fa:14:5b:00:a2:1f:6c:8e:4d:76:15:eb:
a1:b1:67:55:a0:e5:79:68:08:fd:0e:4c:e7:bc:73:
c4:23:17:c2:ac:c6:83:7e:c8:a0:b6:8d:e1:24:04:
d8:a6:d2:47:ed:b8:3b:69:2f:a9:82:ba:04:99:96:
bc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B6:82:94:19:0A:99:EF:40:91:7E:6F:1B:C4:81:18:FA:1B:EF:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/095BE332DE2411EF9435BAAF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.58.0/24
Signature Algorithm: sha256WithRSAEncryption
76:e4:fa:00:19:e5:74:6d:5e:db:45:c1:3a:a4:5e:bf:18:6d:
fd:e6:42:96:d6:05:5a:ef:f6:d8:53:85:7a:fe:da:67:23:27:
08:ea:b7:48:8c:2b:2a:de:d4:ec:cd:ea:f7:c7:1b:33:16:a1:
a7:ff:44:51:8d:5d:8f:45:6e:72:1f:0c:96:a5:7e:61:3f:c6:
e7:dd:c3:c1:10:04:9f:aa:81:10:00:66:29:3b:bf:d2:f8:56:
26:8a:b2:89:39:57:85:41:17:79:07:2d:85:c3:37:c2:b7:66:
02:11:24:dd:a0:98:07:9a:01:d2:b8:98:4e:5e:b7:d1:84:2c:
3f:c0:e7:d6:56:63:c9:79:c6:62:f0:cf:e7:63:21:f8:5c:87:
69:dc:ad:ac:ea:e9:84:ad:95:a2:03:b1:dd:f9:1b:60:f2:a6:
ea:a7:22:db:57:16:89:81:b0:7b:72:c3:8a:8f:9a:16:bd:2d:
93:66:61:54:79:b4:f3:c7:fa:d5:2d:6d:d2:9b:8b:f2:d7:fa:
cb:dd:6d:2c:f0:52:63:9b:88:2a:a9:c4:08:b4:a8:3a:fd:65:
20:2b:f1:07:4e:6e:10:a1:bd:d7:85:bc:a6:23:78:8d:0e:bc:
0b:54:d1:0a:9a:5c:ed:7a:cd:78:6f:71:49:8c:05:4c:6a:56:
bd:0f:e3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:17:51 2025 by rpki-client