Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D732E8DA2A11EFB8C36955762E951A.roa
File: 58D732E8DA2A11EFB8C36955762E951A.roa (raw, json)
Hash identifier: 26qtx79RZfPSmAy3UC/ri5bQvxCU6BjgHfrAOq7GLWY=
Subject key identifier: 00:83:8F:E6:8E:00:5E:82:BD:CE:B3:D4:9A:5C:C5:92:82:94:AE:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01444A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D732E8DA2A11EFB8C36955762E951A.roa
Signing time: Fri 24 Jan 2025 08:08:09 +0000
ROA not before: Fri 24 Jan 2025 08:08:04 +0000
ROA not after: Wed 05 Mar 2025 08:08:04 +0000
asID: 202656
IP address blocks: 154.222.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83018 (0x1444a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 08:08:04 2025 GMT
Not After : Mar 5 08:08:04 2025 GMT
Subject: CN=67934a68-8ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a7:31:58:7e:01:a4:c6:83:f6:01:cc:55:e2:
15:3f:b3:2e:ac:29:1e:42:8b:e5:a8:69:7a:2d:a1:
cb:f6:70:19:27:4b:63:ac:f6:97:4c:31:e1:2b:6c:
61:cc:58:bb:fb:c3:48:e5:b1:6c:56:85:9c:8a:35:
ca:36:28:98:d9:ab:f5:96:0b:df:05:0d:03:a8:4d:
67:7d:f7:09:13:c4:e3:0d:3b:59:de:98:97:72:4c:
62:38:93:f3:0a:77:10:18:64:01:32:33:a6:ed:37:
d8:31:be:9c:f9:ca:85:d9:85:c9:2a:57:d4:6f:a9:
d2:f2:de:02:b3:96:3f:be:8d:5b:df:1a:67:6b:40:
ff:bf:82:3e:d7:cb:97:9f:fe:0b:d0:82:3e:e5:fc:
30:35:1d:86:42:b7:9f:78:fe:4c:33:e9:a9:8b:71:
65:f4:f6:76:4f:ef:a5:bc:52:f7:37:87:5f:62:74:
fe:13:3f:7f:16:94:31:0c:33:62:d7:53:72:7f:28:
23:4e:c0:d7:2d:2b:7d:c1:98:6d:8a:41:29:d4:27:
71:db:7f:67:fa:ba:ea:01:29:60:65:4e:d2:6b:e6:
6a:f7:b0:f3:33:9f:5d:26:fc:8e:b1:ff:c2:84:bd:
78:06:ca:21:27:4b:47:eb:01:c2:62:dd:23:2a:b2:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:83:8F:E6:8E:00:5E:82:BD:CE:B3:D4:9A:5C:C5:92:82:94:AE:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D732E8DA2A11EFB8C36955762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.12.0/24
Signature Algorithm: sha256WithRSAEncryption
33:17:fd:07:3d:86:7f:ef:dc:80:74:ae:4d:78:aa:fd:b8:53:
f8:0d:64:6a:86:11:2c:12:0d:f8:b5:06:49:16:94:59:35:85:
dd:f7:ec:f4:58:0b:98:78:4b:6f:39:c4:27:75:d5:04:19:24:
d4:e1:90:68:30:dd:07:ae:02:0c:5c:93:aa:33:8d:be:a4:a6:
16:b4:82:8a:e6:dc:26:c4:21:c1:b0:e4:76:a9:84:22:15:a2:
20:aa:13:f0:d7:ac:3e:b1:eb:b5:64:b9:31:7b:20:d7:46:76:
6e:08:e4:01:f7:8c:dd:2a:03:f3:41:4e:c3:d0:38:4b:5b:0d:
ed:72:4c:5e:ea:4a:3b:e0:eb:8d:6e:09:0e:52:c6:49:83:5f:
14:06:9a:43:07:28:7c:1d:96:ea:72:46:8d:65:bd:78:9e:21:
fb:de:ed:1f:62:fa:93:49:1e:12:e2:95:eb:88:84:8e:11:ad:
10:43:d5:39:dc:8d:b9:ee:b2:61:cc:55:11:d0:07:e3:7d:bc:
10:8f:ad:84:a3:19:c6:35:14:01:bc:75:97:a5:9b:0c:8e:60:
09:74:2f:d2:b8:fd:7a:fc:f2:f1:2c:59:f7:83:a3:59:ac:22:
12:df:a3:bf:76:77:69:46:99:7b:39:a6:4d:71:45:b6:9f:f2:
eb:32:82:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:32:57 2025 by rpki-client