Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/599BECE2C35E11EF8AA4B273762E951A.roa
File: 599BECE2C35E11EF8AA4B273762E951A.roa (raw, json)
Hash identifier: RRAlrfGawyDcfw2u2qE66NUkv09LUbJQ3bGwT0Xlv5Q=
Subject key identifier: FE:BD:E2:1C:30:3C:D1:98:D4:68:7F:DA:88:3A:18:17:CD:0B:BA:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012619
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/599BECE2C35E11EF8AA4B273762E951A.roa
Signing time: Thu 26 Dec 2024 07:52:27 +0000
ROA not before: Thu 26 Dec 2024 07:52:23 +0000
ROA not after: Tue 04 Mar 2025 07:52:23 +0000
asID: 138915
IP address blocks: 154.94.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75289 (0x12619)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:52:23 2024 GMT
Not After : Mar 4 07:52:23 2025 GMT
Subject: CN=676d0b3b-c687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:cd:77:f8:00:a6:86:6d:dc:72:54:f2:d0:
2e:10:b4:6f:55:a9:e8:e6:fc:17:28:6b:db:f9:5b:
0a:8d:b9:79:46:52:90:ea:8b:45:9b:a9:d9:bd:58:
55:38:21:2a:2d:0a:15:1f:2c:f2:c7:5f:6b:c8:aa:
60:25:c8:59:2a:9c:63:a7:42:8f:eb:a7:00:91:d6:
80:32:3a:0a:87:e1:9a:48:64:a9:69:0a:89:de:9e:
1c:04:7d:91:0a:61:04:dc:ce:8a:1f:fa:0d:b0:10:
f7:73:1d:d3:ca:48:3e:f0:f1:aa:46:56:0f:ab:fc:
55:8e:33:00:db:a6:4e:0b:49:fc:d4:89:2d:59:f2:
74:82:29:1f:29:00:5b:5d:2f:f4:fb:5d:75:49:25:
d2:1d:8c:4f:83:41:04:b3:ba:55:0e:ce:45:bf:ca:
cc:7c:dc:63:0d:36:14:46:cd:44:a0:a4:ed:12:36:
d8:9b:7c:f3:20:ab:18:a3:8b:f3:fb:cb:8d:37:e6:
ad:ba:98:d7:b2:54:99:1e:7e:93:4c:cd:6f:d3:67:
ef:40:26:57:11:07:c2:1b:29:69:41:1f:7d:8c:08:
73:6e:c6:72:f8:ab:85:db:18:f1:b8:45:ff:89:72:
fc:57:fb:d9:56:c8:24:66:4e:01:74:f6:05:60:6c:
27:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BD:E2:1C:30:3C:D1:98:D4:68:7F:DA:88:3A:18:17:CD:0B:BA:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/599BECE2C35E11EF8AA4B273762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:fa:54:5c:13:54:fa:ae:b4:c9:15:7c:95:99:93:b5:e6:67:
c4:33:68:a5:7e:75:e6:d8:b5:b4:b1:33:10:52:56:f6:bf:5e:
f0:65:95:37:13:fe:68:10:ae:fc:28:dd:dd:e1:b6:02:19:8b:
4b:67:0c:de:e9:c0:24:3e:ce:6c:df:48:16:a7:57:a6:e3:fb:
ac:23:d9:71:6f:87:21:04:78:41:62:71:78:ca:15:de:92:06:
f4:e6:be:53:e3:a1:cc:03:62:fe:2d:09:fe:21:66:12:7f:2f:
23:26:21:b1:e3:84:f1:f0:2a:b8:8c:79:98:9f:a8:84:6f:23:
93:e7:e6:bb:e9:7d:39:ef:26:fb:2a:eb:c8:6f:a6:9a:3f:54:
15:90:9d:87:3c:9e:05:55:b8:ce:62:4a:ac:92:66:a9:43:9d:
7e:87:e3:28:82:36:db:aa:6b:4b:d9:77:fc:be:4a:3d:52:07:
80:57:11:e9:ed:96:ef:de:5b:a2:6f:e0:d9:7b:42:2e:7c:a1:
b5:54:6e:6c:6c:60:2e:e9:59:c1:b1:30:b9:5b:7d:9e:c5:9f:
ef:75:0c:ae:e3:fb:63:50:44:6a:8c:47:6c:eb:d1:2a:0b:46:
71:d0:03:ee:80:10:0d:50:2a:a9:60:e3:20:fb:8b:60:52:bd:
a5:8f:b7:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:16:07 2025 by rpki-client