Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A8BF5D2DA4E11EFA813AD47762E951A.roa
File: 5A8BF5D2DA4E11EFA813AD47762E951A.roa (raw, json)
Hash identifier: w5TD1MNOp8+VYbIyOVFNXibRP+v2fnOKoVjfpUBl+no=
Subject key identifier: 95:40:80:C7:1A:44:59:95:62:43:82:5A:29:9A:79:8A:10:83:9E:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0146C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A8BF5D2DA4E11EFA813AD47762E951A.roa
Signing time: Fri 24 Jan 2025 12:25:53 +0000
ROA not before: Fri 24 Jan 2025 12:25:50 +0000
ROA not after: Sat 01 Mar 2025 12:25:50 +0000
asID: 44559
IP address blocks: 154.205.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83648 (0x146c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:25:50 2025 GMT
Not After : Mar 1 12:25:50 2025 GMT
Subject: CN=679386d1-5f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:15:a1:4e:2d:92:f5:91:c3:f7:64:e1:e8:
3c:00:f0:4a:56:d8:e1:38:51:48:7c:25:d1:1a:ad:
1e:f2:ea:ac:4d:0c:11:e2:e0:8c:49:a8:57:ac:61:
0e:c4:32:94:f3:68:62:27:4c:fe:61:7d:67:45:cc:
fe:f1:6d:85:09:65:83:10:56:36:14:de:7f:ab:48:
fc:47:91:f5:bb:9a:c1:5f:ba:f3:2d:7f:9e:44:9c:
cf:6e:55:93:ce:4b:ab:c6:82:02:07:c9:4f:63:81:
66:6e:ee:c3:8d:8c:11:4e:4c:5a:00:be:10:d9:8a:
ba:1f:fe:fe:fc:fd:83:d5:56:de:a6:a0:55:a1:a9:
3a:24:8a:3f:1f:7c:94:a8:c2:41:b9:34:9f:2a:68:
b0:bd:8e:c2:42:d3:81:6a:cd:1a:43:57:e6:d2:4d:
10:82:42:98:e8:61:cf:2f:7e:c0:27:35:b9:16:45:
c6:0a:80:35:a3:35:5a:7b:2d:a3:1b:f2:33:73:56:
85:e5:8e:86:11:9b:c9:b2:a1:14:bc:b7:7e:aa:c4:
aa:aa:67:a2:21:4d:6e:21:c2:b7:03:20:b6:93:a3:
c0:ef:41:a7:23:dc:39:a3:59:59:b7:0a:d2:4a:71:
30:d6:ad:4d:41:f2:29:c6:78:b8:9d:41:a7:b0:c6:
4c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:40:80:C7:1A:44:59:95:62:43:82:5A:29:9A:79:8A:10:83:9E:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A8BF5D2DA4E11EFA813AD47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.229.0/24
Signature Algorithm: sha256WithRSAEncryption
53:8b:19:bd:6b:fb:35:c0:7a:90:92:0d:cb:56:43:94:3e:86:
78:d4:23:b8:78:9d:d6:98:7e:7e:e1:2b:ff:7d:c2:ed:99:2c:
e3:84:a2:7d:b7:7b:e0:c3:6d:b4:51:db:30:02:df:b7:5f:35:
2b:65:eb:69:6a:b5:b1:c4:38:76:db:cf:74:af:bd:b9:62:8e:
a5:7f:3d:1c:ba:5e:99:20:d7:f8:41:f7:27:db:56:b5:5f:ea:
92:f3:c9:48:5e:f5:57:67:b6:ee:f9:1b:4b:da:23:5f:d6:57:
44:38:d1:08:80:67:d3:0c:57:16:7b:c0:f5:3d:98:58:1f:d5:
24:13:39:e7:e6:14:1a:27:80:24:de:6c:66:e2:ed:34:85:fc:
ae:24:4c:71:72:bb:2c:55:0d:aa:2e:05:27:cc:d5:12:c2:0b:
68:77:8e:66:33:58:37:17:bc:7c:65:2b:7c:84:64:74:e0:25:
0b:37:cc:51:ac:44:b3:ef:6f:6c:3c:fa:4a:15:8c:52:72:cc:
a3:18:6a:65:09:a6:47:9b:f6:c1:e7:0e:84:16:ac:dc:ef:7d:
26:08:b2:55:58:bd:22:25:75:9f:d8:b8:67:06:37:de:59:b1:
e7:5a:78:8a:69:ff:53:ac:52:79:f2:a2:f7:e9:90:9b:51:24:
94:81:a8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:09:32 2025 by rpki-client