Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53045D8CBED711EFA88BC345762E951A.roa
File: 53045D8CBED711EFA88BC345762E951A.roa (raw, json)
Hash identifier: ZfcHynKinikmMCqwMiRl+mgOfMcS1cBThFfKGeKocTI=
Subject key identifier: 15:E8:63:61:13:8E:68:A6:8B:3B:70:05:B9:58:E9:14:55:7A:3C:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53045D8CBED711EFA88BC345762E951A.roa
Signing time: Fri 20 Dec 2024 13:35:49 +0000
ROA not before: Fri 20 Dec 2024 13:35:45 +0000
ROA not after: Sun 02 Feb 2025 13:35:45 +0000
asID: 44559
IP address blocks: 154.209.192.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72942 (0x11cee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 13:35:45 2024 GMT
Not After : Feb 2 13:35:45 2025 GMT
Subject: CN=676572b5-f35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:40:ec:8e:00:dd:f8:ab:da:a0:bc:00:8b:3e:
d7:98:91:2e:5c:b1:4a:43:d2:e1:5a:d3:c4:40:94:
a0:b7:e9:6f:08:44:5f:5d:52:5a:12:6b:3a:21:7e:
3f:dc:33:14:86:6f:ed:c5:eb:bf:ec:1b:1b:d5:4c:
e3:11:f4:52:14:57:f9:1a:aa:22:e4:d7:f3:20:db:
cd:78:2e:6f:d8:3b:61:98:73:de:c4:3d:42:12:71:
c4:26:53:01:98:f9:e9:2b:a2:9f:bd:cd:66:c1:08:
6b:ff:3a:cd:00:99:75:30:5b:ce:f8:8c:60:1c:79:
e1:bd:81:9b:fa:6f:bc:41:23:8f:77:78:5b:64:4a:
61:be:ea:46:8f:f8:d0:29:46:72:f5:48:32:9d:a3:
5d:13:d4:87:08:c0:42:8f:20:ed:8a:a0:aa:4a:96:
34:ed:e4:08:cf:c0:e6:89:9c:46:83:20:21:2e:d3:
2d:6e:58:c3:e2:a0:d7:80:6c:2d:ab:56:ba:3a:32:
58:77:71:23:4e:d7:4e:44:c0:3f:18:33:14:2d:0a:
27:0d:08:2e:fa:49:6e:cc:d2:ab:65:c1:3c:cb:9f:
0b:15:56:e2:5a:0a:68:95:8c:bb:c0:5b:b9:56:a6:
08:df:29:8a:0c:95:9d:d3:38:ed:cb:97:c1:82:bd:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:63:61:13:8E:68:A6:8B:3B:70:05:B9:58:E9:14:55:7A:3C:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53045D8CBED711EFA88BC345762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.192.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:ec:fa:61:f8:8a:d9:b9:28:cd:0e:b8:8c:00:08:62:ac:46:
dd:d5:66:c6:eb:52:78:fe:0e:a4:41:ff:c3:81:98:68:50:8c:
23:f6:ab:62:a6:6f:77:6d:64:5b:f4:e0:49:90:d7:a9:ae:23:
29:31:66:a3:32:52:e5:d5:a0:1a:76:e8:a4:b4:53:b1:d2:ec:
ea:fd:82:27:ab:0c:3e:a0:7b:ba:9f:ad:e4:fe:7c:1c:38:7e:
63:36:f4:6e:79:80:f8:85:14:8f:01:7c:05:c0:59:c9:df:3b:
ed:5a:1b:93:ab:53:da:fd:c1:08:7c:40:23:9d:cf:2c:17:5a:
30:eb:47:b7:e5:03:a7:a9:89:74:e5:fd:fb:f5:84:85:04:8f:
0b:75:09:4a:db:7c:66:52:5e:8a:73:e5:ac:ac:43:5e:fc:08:
1d:f7:67:05:aa:8e:01:c6:a0:80:a4:67:97:3c:c1:96:79:f2:
c2:a7:8c:43:22:c6:eb:db:a6:90:83:fd:9e:70:76:26:b1:c0:
c0:85:bb:cc:09:59:e5:1f:c2:c5:4f:9e:25:99:3a:76:9d:aa:
22:1e:27:44:1d:26:a9:a3:2c:05:7d:50:90:7b:7a:0b:4e:9e:
6c:08:31:d4:f6:46:db:b9:73:f4:ac:a7:64:e7:b1:05:9c:4f:
04:9b:fb:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:33 2025 by rpki-client