Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F84BEEC2A211EFADEB7E4C762E951A.roa
File: 53F84BEEC2A211EFADEB7E4C762E951A.roa (raw, json)
Hash identifier: +MuQjBfDKRjouPBshBD/wXL8cLwdMg1loFIILkVLF24=
Subject key identifier: 1F:C3:A3:79:C0:47:70:D9:57:EF:49:3E:0A:88:82:AA:17:4C:B2:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012540
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F84BEEC2A211EFADEB7E4C762E951A.roa
Signing time: Wed 25 Dec 2024 09:26:32 +0000
ROA not before: Wed 25 Dec 2024 09:26:29 +0000
ROA not after: Thu 13 Feb 2025 09:26:29 +0000
asID: 138915
IP address blocks: 154.203.140.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75072 (0x12540)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:26:29 2024 GMT
Not After : Feb 13 09:26:29 2025 GMT
Subject: CN=676bcfc8-679e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:97:9a:5a:f4:11:48:f3:4e:06:e1:10:36:6d:
ee:24:e6:4d:9b:d6:f0:a0:97:74:85:b3:2f:42:26:
21:36:d2:47:ec:52:7e:8a:7f:c7:0b:7e:66:b6:2b:
03:d8:ba:02:c1:df:eb:8b:c5:8c:f0:45:05:4d:6d:
61:51:fc:fc:98:4a:51:81:73:b5:0e:66:e0:56:2c:
62:6a:e1:4f:bb:ac:5e:92:c1:c4:6b:85:81:74:cf:
54:ac:88:f7:1b:be:b6:3d:dc:26:92:ea:bd:62:d0:
33:34:b8:44:30:37:a4:21:a6:82:a1:d7:02:0f:aa:
ff:50:5d:60:78:c9:f3:95:58:c9:70:bb:45:6d:c5:
0d:c5:da:43:64:e8:ca:85:08:c9:8e:b3:34:91:49:
47:2c:53:f9:2f:31:71:ea:08:2c:79:b6:bd:22:1b:
ed:20:44:b1:9b:e9:9e:b5:d5:ef:84:d6:f1:1b:a6:
0e:46:47:da:b8:17:47:a7:c3:37:14:3c:58:36:ad:
9f:c0:28:9f:d1:94:21:6f:38:2e:e3:3c:ee:86:fb:
41:ae:43:8e:fe:a8:eb:1a:c0:9c:ad:81:d2:be:dc:
ab:57:28:95:64:1f:75:d8:a9:d1:3f:5d:2d:ef:a8:
e6:1b:81:d7:4e:ba:78:ec:b4:3c:f3:b2:3d:a4:53:
ae:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:A3:79:C0:47:70:D9:57:EF:49:3E:0A:88:82:AA:17:4C:B2:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53F84BEEC2A211EFADEB7E4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.140.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:e4:c1:52:d5:3c:92:af:24:3d:be:60:ff:1d:0d:f7:1e:77:
5b:06:3c:24:14:c5:72:46:1e:07:f9:72:b0:bf:bb:e8:49:f4:
5e:ae:fa:65:af:c7:cb:eb:bd:b4:da:ad:73:4e:7e:dc:ba:7b:
07:17:f3:9b:4a:07:ec:92:b1:eb:b1:0c:d9:f2:f6:f9:7c:c6:
82:82:2b:46:10:47:4b:9c:e6:2d:f8:6e:10:a0:a2:1a:13:02:
0a:a5:c7:4d:43:40:19:2d:33:36:e5:3f:bb:51:43:00:f8:82:
46:0f:91:73:be:7c:6b:0d:74:18:7c:d8:35:d5:87:53:39:73:
10:00:fe:e5:77:7a:43:0e:cc:51:d5:85:b2:7f:73:a9:68:9d:
d3:77:31:b0:78:ec:bc:ea:1d:57:d3:3e:16:f1:cf:cf:72:79:
f7:88:6e:0a:c8:4e:15:08:37:12:25:2c:d5:80:97:07:b7:9e:
ef:e6:de:df:a0:27:7b:9e:f6:a2:4c:06:60:75:6d:b5:e3:80:
3b:55:79:e5:b7:69:97:1f:c9:17:4c:ec:ec:77:b0:38:a3:f7:
b1:c6:b1:07:fe:b2:64:08:88:7f:58:e2:9a:54:7f:1f:52:4b:
be:da:3b:d3:b3:2c:bb:47:dd:dc:bc:86:ca:12:81:20:fa:67:
a3:ba:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:23:58 2025 by rpki-client