Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5333DA96CBE611EFA871F5AE762E951A.roa
File: 5333DA96CBE611EFA871F5AE762E951A.roa (raw, json)
Hash identifier: uFvAXjec4Bdt8jy3CBzPEPjpcWA4Nw/q3cxTlaGQJnQ=
Subject key identifier: 91:88:6C:3C:6D:EF:90:9A:4A:FD:A8:92:CB:6A:E0:5B:2E:8B:D8:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013581
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5333DA96CBE611EFA871F5AE762E951A.roa
Signing time: Mon 06 Jan 2025 04:25:57 +0000
ROA not before: Mon 06 Jan 2025 04:25:53 +0000
ROA not after: Sat 08 Feb 2025 04:25:53 +0000
asID: 203020
IP address blocks: 154.217.156.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79233 (0x13581)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:25:53 2025 GMT
Not After : Feb 8 04:25:53 2025 GMT
Subject: CN=677b5b55-7868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:8d:d6:36:7a:b8:00:2e:ea:3a:7b:a9:e2:
83:f2:91:50:fe:68:37:fe:6a:24:2b:fc:00:23:0f:
41:33:22:6f:e3:22:8d:20:d3:94:f1:a1:9e:78:cf:
e1:27:f3:d9:be:f6:57:7a:50:9c:7e:0e:90:25:55:
cc:1e:ad:9c:b1:d0:b8:41:52:39:77:c1:88:88:63:
4e:10:c0:c4:0f:e3:fb:b5:ea:3a:13:f4:fd:61:a8:
25:23:f4:47:bd:a4:19:ca:4e:61:da:17:f3:5f:98:
fd:7b:41:cb:6e:c3:87:80:1a:bf:fb:7a:ca:18:bc:
34:19:bc:fe:c3:aa:21:89:2f:54:13:07:19:b1:3e:
13:18:f3:c3:84:26:7e:02:46:16:14:81:19:c4:35:
55:7b:2c:5f:fb:9b:d3:77:f8:5c:80:58:82:d1:ec:
c0:19:3e:a2:97:89:a7:75:f4:6e:e3:19:8f:f9:a7:
89:39:cd:62:af:a1:44:11:65:e1:dd:2a:aa:27:8e:
73:0e:95:8b:1f:11:88:0c:6a:d7:ed:8b:28:bf:f2:
48:ea:2d:bc:d3:3d:d3:77:6b:c7:82:83:22:f0:78:
19:94:01:32:5b:76:5b:98:93:8b:d5:30:38:4c:3c:
b1:14:4b:5a:8a:dc:ef:d0:9e:ea:4f:d5:22:39:6d:
44:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:88:6C:3C:6D:EF:90:9A:4A:FD:A8:92:CB:6A:E0:5B:2E:8B:D8:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5333DA96CBE611EFA871F5AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.156.0/23
Signature Algorithm: sha256WithRSAEncryption
21:85:90:77:22:5b:25:ae:90:c0:c4:0b:da:49:ba:2c:0d:ec:
a8:46:41:88:20:d6:9a:8c:0c:ba:54:63:89:f5:75:f9:97:0e:
23:c7:41:dc:11:d2:9d:97:4c:80:e8:0b:de:ce:a5:ca:a8:b5:
5a:be:6c:2a:39:d7:c3:b8:e9:00:ea:a6:0b:57:77:78:ee:d3:
10:b4:fa:1a:44:ba:6d:31:73:67:a8:39:58:24:57:01:63:8e:
27:3e:8d:69:42:a3:c7:ff:f8:4c:88:a2:ea:ed:fe:4d:7c:1e:
a6:f9:46:bf:16:86:3f:cc:20:de:d4:aa:eb:f9:95:db:fb:51:
ea:0c:04:28:97:3c:96:27:c8:62:f3:10:8c:07:a9:fa:00:cb:
f7:69:5c:58:32:05:55:ab:d6:4f:b3:56:46:9a:29:95:5e:0c:
74:99:0e:3b:87:b5:c7:87:d2:dc:b9:cf:21:e2:af:53:7d:d7:
5e:c5:5d:4c:1f:e6:f4:75:83:36:3a:f2:96:d5:73:0a:d7:31:
72:c0:51:36:df:a8:5b:2c:69:20:0a:9b:a2:d0:4b:a3:77:f4:
95:fe:c2:84:51:85:28:76:3f:f8:a9:72:27:b4:89:ea:f2:45:
9f:0b:47:06:bb:0b:43:3b:96:0e:b3:23:51:d8:50:f6:d7:0c:
03:e3:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:03:09 2025 by rpki-client