Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13FE1394D8A911EFB34734B0762E951A.roa
File: 13FE1394D8A911EFB34734B0762E951A.roa (raw, json)
Hash identifier: X443p/q/GiYXi6dXr2jhE7/GMhMVF5/tX+FeoYoxAbk=
Subject key identifier: 16:19:2C:5D:1C:CE:44:D7:3C:C9:BF:B8:A9:C5:7A:A4:20:18:36:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013EB0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13FE1394D8A911EFB34734B0762E951A.roa
Signing time: Wed 22 Jan 2025 10:10:17 +0000
ROA not before: Wed 22 Jan 2025 10:10:13 +0000
ROA not after: Wed 05 Feb 2025 10:10:13 +0000
asID: 395793
IP address blocks: 154.200.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81584 (0x13eb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 10:10:13 2025 GMT
Not After : Feb 5 10:10:13 2025 GMT
Subject: CN=6790c409-6526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:7c:b4:e0:12:df:2a:b1:b8:90:c6:96:af:
28:e5:ba:ed:d6:03:b5:25:54:c7:08:b1:f5:50:6e:
65:12:ad:d9:3e:7b:4b:6b:b3:8c:01:20:54:65:ef:
fc:50:a4:fb:af:61:97:cb:86:eb:ae:71:94:95:bf:
53:d9:61:03:3a:05:e4:84:93:0e:47:72:ef:88:4e:
c6:ec:5c:dc:7c:35:4c:9e:61:af:a6:ef:0b:98:db:
b9:f7:47:6a:1b:7f:48:14:f2:e8:f4:81:aa:7d:55:
19:5c:7e:c5:7d:53:90:fd:10:3c:31:c6:91:ae:79:
44:18:f9:66:46:94:3f:83:5a:3d:18:b0:e9:6f:f7:
ea:0e:e3:83:94:2a:51:ec:3a:ee:85:72:3a:92:75:
f5:0f:60:4b:f5:52:51:6e:11:aa:cb:e2:3e:75:21:
c4:55:e1:61:c1:27:dd:51:02:f5:f7:9f:6b:fd:6f:
d5:c5:89:20:d1:85:33:7e:f9:28:2e:ef:07:51:f8:
5d:ff:69:cd:bc:da:2c:44:6f:c7:52:29:af:a4:1f:
1c:90:51:10:3f:15:89:b9:e2:d2:7a:0a:c7:43:c5:
f0:d5:35:67:a9:19:d5:04:6d:55:1f:c4:fc:22:0a:
89:98:ff:9c:67:99:2c:b6:77:58:97:3d:5d:ee:f8:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:19:2C:5D:1C:CE:44:D7:3C:C9:BF:B8:A9:C5:7A:A4:20:18:36:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13FE1394D8A911EFB34734B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.59.0/24
Signature Algorithm: sha256WithRSAEncryption
09:38:f7:6b:00:5d:d6:89:28:0d:bf:89:60:ad:fe:cb:5e:42:
b4:b1:3a:3a:7e:cc:d1:66:bc:99:5d:50:d0:9c:86:f6:43:78:
a6:4c:37:4b:72:1d:56:c3:fc:c4:5e:40:c7:01:ec:1a:ea:10:
f5:de:5c:58:56:eb:b2:f5:62:68:ab:65:5b:af:67:a2:60:54:
9f:20:cc:b7:f0:e5:66:01:cb:ee:4f:82:96:aa:48:0e:3f:86:
23:ab:85:f4:f4:e4:3f:1e:05:cd:87:6e:b3:63:d2:5b:c1:ff:
52:da:12:16:35:3c:ac:02:1c:e2:7c:d0:ab:fb:ea:25:94:25:
f7:39:ba:16:94:a6:03:5d:85:0c:78:f5:a4:40:a3:03:0d:f5:
bc:83:f5:8e:13:d2:6e:f4:17:7e:e5:70:bb:60:1c:e3:17:c9:
9a:44:d2:7c:16:d1:f3:18:03:31:cf:27:1f:03:89:ea:79:8d:
c6:70:95:27:87:1c:78:c3:8f:e9:8d:c5:f7:e5:d4:22:2e:66:
1c:69:bc:97:a6:0b:99:1b:c3:b8:51:0a:86:8e:32:39:d7:de:
9d:5b:f8:12:32:5d:15:21:d6:8f:e5:7b:4c:22:99:f8:fc:6d:
1e:4f:6a:a9:6e:90:1d:00:99:d0:9d:89:13:66:d8:9b:7c:cb:
c0:97:8c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:24:51 2025 by rpki-client