Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/591433BCD3FB11EFA0925385762E951A.roa
File: 591433BCD3FB11EFA0925385762E951A.roa (raw, json)
Hash identifier: uw0XpM0+/1/IW2Gc0XEa93lan8/54R+9vFhAwIUfKUg=
Subject key identifier: CB:20:37:20:79:99:9F:FF:D1:78:08:3F:74:A5:02:DB:5B:B7:C6:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013BE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/591433BCD3FB11EFA0925385762E951A.roa
Signing time: Thu 16 Jan 2025 11:16:36 +0000
ROA not before: Thu 16 Jan 2025 11:16:32 +0000
ROA not after: Sun 16 Mar 2025 11:16:32 +0000
asID: 17561
IP address blocks: 154.213.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80872 (0x13be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 11:16:32 2025 GMT
Not After : Mar 16 11:16:32 2025 GMT
Subject: CN=6788ea94-5612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:38:a7:44:19:22:92:fc:ad:94:9c:db:8e:
3b:47:4a:03:04:a1:e3:f6:34:b9:ee:88:f3:56:3f:
90:56:92:51:1e:a4:1e:3a:e0:fc:23:99:23:9b:43:
b8:96:eb:22:e8:95:d9:b1:19:da:ff:5c:34:de:55:
91:2f:7c:23:56:6d:d3:96:f2:5c:32:48:52:64:3e:
ac:93:c4:8b:7f:ed:3e:ba:45:5c:01:17:14:a1:48:
51:32:a9:69:9a:10:55:77:c5:4c:41:01:c6:55:e4:
6d:e6:bf:f3:b3:9d:d7:a0:44:37:0b:c7:c0:a0:fc:
c3:36:1b:22:9b:5b:22:15:87:10:85:ef:84:99:8b:
01:1a:dc:36:be:13:f4:ae:a2:74:aa:8a:f5:f0:e9:
54:70:8e:5b:17:ae:04:fc:ff:6f:c5:ad:a1:e4:68:
7e:44:b4:67:12:06:3f:b1:eb:37:57:3b:dd:f3:81:
9f:2e:f5:97:d0:55:24:f3:45:b7:f0:d2:b4:0d:b1:
a0:8d:2c:3a:f4:2b:b0:77:4a:9d:6c:4b:e3:d8:0a:
20:e7:53:01:e6:2d:61:7c:2e:ef:82:76:a3:4e:60:
67:a5:fe:1c:6c:55:e2:5d:79:4c:59:6f:d8:f5:46:
08:2f:2b:c5:73:5c:1b:7c:ee:50:a6:63:4c:ce:14:
0c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:37:20:79:99:9F:FF:D1:78:08:3F:74:A5:02:DB:5B:B7:C6:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/591433BCD3FB11EFA0925385762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.16.0/24
Signature Algorithm: sha256WithRSAEncryption
05:88:27:77:e0:1e:bc:bb:08:64:c4:eb:67:f3:3f:ca:ea:c0:
89:de:cd:15:45:62:de:9a:3e:4e:73:09:77:38:58:45:f2:38:
eb:19:09:90:03:e2:d7:a0:f2:70:c8:42:48:4f:af:89:8a:93:
c7:05:9e:bb:55:66:c1:d0:c1:43:57:92:dd:f1:f4:8c:d9:55:
15:88:bf:dd:11:3b:b0:26:5a:16:e9:b1:29:a8:7a:e8:87:8b:
bc:a0:1c:f9:bc:4a:3d:38:a7:e0:08:bc:6a:fd:f8:6d:30:dd:
ea:bb:67:4c:ec:8e:c0:66:6e:15:bf:c9:47:06:ab:13:96:65:
04:46:dc:b4:8b:3a:5c:97:5f:7a:20:d5:8e:70:92:ae:4a:6b:
9c:3d:c8:10:ec:43:2d:21:ef:45:76:38:7d:df:19:9d:04:d8:
fb:c7:f5:2f:5f:8c:a8:b1:ee:f7:75:a5:34:74:51:d6:0f:f9:
82:14:a3:0f:2f:7e:7a:2a:dc:6c:b8:f3:18:12:2b:86:37:9d:
19:cb:63:8b:b3:d4:b7:18:8b:ef:f2:a8:d0:d3:7f:7b:a0:f5:
84:98:1d:16:90:56:52:89:75:79:e4:30:47:c1:9f:e8:d2:fd:
1e:d6:66:90:b3:c5:94:91:a9:42:f9:21:7c:1a:7a:13:39:64:
c1:dd:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:16 2025 by rpki-client