Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C81D40DA3811EF9118DDB2762E951A.roa
File: 53C81D40DA3811EF9118DDB2762E951A.roa (raw, json)
Hash identifier: W4aWDoy1d0HCBrj4I/9sP1jd/eSqrmJs0ZcL1avQxew=
Subject key identifier: B9:82:0F:30:60:50:FA:F9:07:1B:EA:40:48:E5:AE:F0:FA:6A:CC:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01451F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C81D40DA3811EF9118DDB2762E951A.roa
Signing time: Fri 24 Jan 2025 09:48:13 +0000
ROA not before: Fri 24 Jan 2025 09:48:09 +0000
ROA not after: Fri 28 Feb 2025 09:48:09 +0000
asID: 62240
IP address blocks: 154.196.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83231 (0x1451f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:48:09 2025 GMT
Not After : Feb 28 09:48:09 2025 GMT
Subject: CN=679361dd-7164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:e2:b1:cd:65:c2:9a:69:a3:6d:74:c4:f1:
ed:02:34:d1:9e:93:3d:8f:ef:1b:74:30:5a:28:5d:
14:ba:27:7c:95:0c:3b:40:91:e4:0f:0f:1f:19:dc:
0c:29:0d:7c:3b:b1:f3:eb:ab:58:20:0a:b0:13:82:
08:94:a9:9d:32:60:88:11:54:c9:4c:b4:3d:89:7b:
78:26:b1:53:6e:c9:56:9f:48:39:ee:eb:b3:c5:5a:
54:26:54:d3:26:bd:c9:3a:b2:23:05:55:d4:68:f2:
67:11:56:bf:3e:41:f0:7d:aa:09:2c:15:59:18:8b:
23:16:35:6e:0a:59:0d:9f:11:a1:ff:3b:fa:41:cb:
2f:5e:a6:3a:5c:4c:4c:87:ff:1c:63:a2:c6:81:47:
15:6c:0a:74:c7:57:3f:1e:5d:e6:ea:f1:3c:a9:ef:
b4:03:cc:2f:dc:4d:d0:e0:9a:83:b8:35:54:13:13:
b2:37:9a:72:b1:05:7e:b0:58:97:cb:50:1f:bf:9d:
ed:69:d0:0a:2a:8c:47:41:a4:93:fc:9b:52:57:35:
da:87:c9:21:0c:50:d3:f6:81:5b:be:61:bb:7c:18:
bc:4f:37:83:75:bd:21:20:a3:0d:d9:70:e7:c7:77:
f7:2f:4b:10:74:41:a5:25:41:9d:bd:5d:40:15:6b:
14:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:82:0F:30:60:50:FA:F9:07:1B:EA:40:48:E5:AE:F0:FA:6A:CC:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53C81D40DA3811EF9118DDB2762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.34.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9b:71:08:bd:61:08:4e:ae:bc:60:60:5a:57:0e:81:f1:13:
2d:c7:1a:5e:85:5c:4f:5f:6c:dc:8e:5e:51:44:79:60:dc:0f:
c3:44:a2:3b:55:19:a7:76:88:29:e7:fc:9f:25:d8:64:7e:9e:
ec:f9:02:1f:07:57:62:16:b7:92:5c:37:e3:ce:bb:9a:3e:49:
63:47:40:01:ef:54:50:b0:4b:6b:95:37:1b:c4:94:10:4b:63:
d1:77:a6:da:3f:83:12:b8:21:34:a6:86:21:87:41:97:16:e1:
54:fa:bd:20:81:82:f6:f6:7e:19:4a:fe:fa:30:f2:64:63:11:
d6:17:6a:9d:ea:bf:e9:e8:57:8a:f1:f9:af:c1:90:ca:97:61:
1e:54:36:43:dc:92:d9:9f:27:b6:cd:a2:2e:58:3d:66:66:72:
70:ef:2b:34:de:dc:2b:90:71:5b:53:01:69:de:a0:ce:af:fb:
4d:a2:f5:5c:c6:cb:ca:23:91:1e:bc:2c:8e:71:16:5f:60:64:
62:fe:d3:ef:28:cf:5c:e3:f2:3e:b6:2b:fd:86:1b:37:db:0b:
2e:24:1a:8f:8c:2a:06:42:ba:c6:65:8a:cb:06:bb:04:f4:08:
92:c6:5d:f6:e3:7a:44:35:19:fd:3e:f7:1a:79:cb:8f:d9:51:
96:0a:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:57:04 2025 by rpki-client