Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58644FB0D98211EF8CAC3666762E951A.roa
File: 58644FB0D98211EF8CAC3666762E951A.roa (raw, json)
Hash identifier: KmXpuazohQ0IeI1pZzsFtZHX2rO+UBMt2kxqYAhBUu8=
Subject key identifier: 72:81:DA:91:B4:97:8C:75:BC:50:B1:65:29:86:B6:2C:B4:46:51:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0141EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58644FB0D98211EF8CAC3666762E951A.roa
Signing time: Thu 23 Jan 2025 12:05:32 +0000
ROA not before: Thu 23 Jan 2025 12:05:29 +0000
ROA not after: Thu 13 Mar 2025 12:05:29 +0000
asID: 138915
IP address blocks: 154.203.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82411 (0x141eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 12:05:29 2025 GMT
Not After : Mar 13 12:05:29 2025 GMT
Subject: CN=6792308c-ea1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:33:6c:41:71:dd:60:e7:82:83:67:f2:09:
2d:c3:a5:21:27:20:68:26:ab:58:4b:00:f8:6a:1b:
ae:91:65:f6:15:c6:7f:78:54:48:2f:13:b5:79:f8:
89:30:d3:1f:0f:6d:3b:96:4c:f4:43:3f:9f:f0:58:
e3:38:89:b8:f8:39:a7:96:6c:08:22:9b:bc:26:69:
d8:0a:cb:e7:73:9d:12:d3:3b:ef:c6:30:e7:28:5a:
d9:50:c1:e0:6a:3d:e1:a2:2e:39:96:04:a3:22:fe:
5f:05:a2:46:ff:cc:6a:49:7f:d9:92:86:33:f6:5f:
ed:19:09:52:e8:d1:c0:b0:12:8e:0a:84:ab:82:91:
cd:72:d6:7a:56:03:db:35:fb:95:bd:18:33:1d:50:
96:d6:0b:8b:3f:ce:56:10:6f:0b:6a:33:fc:8e:30:
46:8f:a1:6b:85:b2:85:ad:87:86:3b:cd:70:9e:36:
62:b8:63:27:39:6b:eb:22:c8:37:fc:79:3f:56:17:
01:7a:2d:2a:24:0c:45:ab:b2:7f:44:64:d3:f7:e5:
27:3e:90:99:b6:8d:fa:a7:75:5d:bf:e8:87:84:68:
e8:1d:25:b2:18:70:26:21:f9:6b:e6:79:c6:b5:97:
8e:ed:14:9f:0b:c4:7d:1e:06:4c:85:43:d0:55:91:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:DA:91:B4:97:8C:75:BC:50:B1:65:29:86:B6:2C:B4:46:51:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58644FB0D98211EF8CAC3666762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.157.0/24
Signature Algorithm: sha256WithRSAEncryption
25:c2:26:07:89:83:e7:7f:fa:a3:e4:55:8d:4f:94:5c:d5:d0:
0f:9f:99:22:27:19:05:04:02:08:8e:1d:c1:1d:d3:a3:38:29:
d6:39:5f:24:8a:6f:27:8e:3a:dd:50:e0:ce:64:b8:a7:2b:ba:
db:9a:56:cc:af:8e:a7:9d:17:8f:4e:0a:ad:db:b9:d9:18:08:
a1:ca:7e:5e:50:2a:47:22:59:e5:ba:bd:6e:7e:37:f6:25:2d:
0a:9a:e6:f9:6f:5b:c7:f4:13:6c:2e:71:7f:d1:28:63:42:fd:
39:e7:d9:92:5a:d4:a8:e3:a3:de:ae:b2:49:c9:83:07:9e:39:
af:61:29:f1:c9:56:4d:07:7f:7c:2a:77:51:14:91:3d:e2:a0:
85:6f:ae:94:07:3c:7f:70:4c:8f:48:d7:12:4f:9c:e0:7d:4f:
e4:1e:ab:f5:91:87:30:a4:91:a7:9d:3f:a0:9c:5f:c1:20:85:
32:24:90:53:00:af:19:d6:a0:0e:ca:05:71:f1:48:61:da:fd:
15:36:e8:7b:91:c2:1e:3e:26:cf:64:5b:d1:64:9b:8e:e7:f4:
72:3e:77:ee:fd:75:35:4e:7e:00:f5:31:8c:1c:b8:d8:2b:73:
a7:16:2e:85:37:e2:ca:70:c6:77:e0:ab:8f:7c:64:ea:2b:2e:
6e:62:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:19:23 2025 by rpki-client