Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF63972DA5E11EF853301B4762E951A.roa
File: 5BF63972DA5E11EF853301B4762E951A.roa (raw, json)
Hash identifier: pqyp0Xe3y6aiKX2u9CidJ8tlhynncaFKDMoyI57IIFU=
Subject key identifier: 34:79:62:9B:DF:E3:6F:13:F1:00:EE:7E:A2:99:30:45:8C:2B:91:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01480F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF63972DA5E11EF853301B4762E951A.roa
Signing time: Fri 24 Jan 2025 14:20:28 +0000
ROA not before: Fri 24 Jan 2025 14:20:24 +0000
ROA not after: Wed 05 Mar 2025 14:20:24 +0000
asID: 48031
IP address blocks: 154.222.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83983 (0x1480f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 14:20:24 2025 GMT
Not After : Mar 5 14:20:24 2025 GMT
Subject: CN=6793a1ac-ed3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6b:4b:d9:fa:9f:26:80:b0:27:c3:99:84:e6:
84:0f:5e:5f:4d:ff:d4:57:5c:5d:cf:61:8c:99:d8:
28:11:8a:e4:ff:f1:8f:61:8b:9a:28:f9:38:c7:5c:
0b:88:31:ae:3a:f4:71:38:6f:fb:f0:e3:fb:ed:7e:
b5:33:01:30:ae:ef:8e:2a:24:51:c9:9b:20:7b:2a:
9f:8e:ca:f7:dc:0c:03:9c:e6:d2:73:37:fb:37:22:
94:a1:d0:c7:3d:7b:be:b4:3d:43:46:18:a1:aa:42:
8d:3a:66:7b:05:9e:7f:40:92:82:94:03:34:dd:52:
40:08:1e:1f:22:28:4a:66:cc:52:a0:40:8f:75:17:
91:1c:d2:21:1b:5c:a5:32:e1:9b:15:78:5e:5e:8f:
6d:9f:a7:62:f1:77:57:8a:06:ee:d2:0e:50:94:06:
39:68:49:86:df:6b:77:3c:8a:5d:06:95:ac:aa:af:
80:29:6a:59:10:7f:19:24:e6:33:4c:07:ca:c3:ae:
92:0a:48:4f:68:60:23:ce:84:12:13:f6:86:ac:cb:
57:15:a2:1c:8e:30:1f:62:c1:a3:3e:ec:b9:ba:7f:
40:65:10:1b:d3:1e:78:17:97:ed:87:ac:3b:49:41:
dc:cf:4c:1d:dd:f5:31:8a:8e:a6:b7:dc:5d:13:c3:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:79:62:9B:DF:E3:6F:13:F1:00:EE:7E:A2:99:30:45:8C:2B:91:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BF63972DA5E11EF853301B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:02:59:ce:22:1c:0d:b3:0a:54:47:a6:9c:ce:cf:b2:ea:2f:
d5:24:7b:f3:ae:ba:40:df:70:ef:19:01:9c:a2:87:cf:cc:ba:
f7:da:48:04:25:72:16:2d:63:c7:68:ec:92:27:22:42:bf:b0:
f8:b2:4f:d4:cd:4c:85:2d:5c:17:7c:42:7c:9b:3f:55:a9:e4:
30:27:f9:78:29:c7:97:6d:ad:ad:91:64:d8:24:a8:09:60:4c:
1d:b6:69:da:d6:91:c4:1c:ae:39:2a:5e:3e:39:85:cc:2d:53:
f2:8c:52:93:91:ab:1d:45:27:b6:4b:09:51:7c:f3:9e:65:32:
d7:79:42:5c:83:b8:ed:2a:58:43:8e:70:12:ef:23:4e:4c:d0:
cd:34:b8:f7:09:eb:03:dd:d7:75:61:73:b2:e4:8c:32:c7:f9:
84:3b:6f:c4:d3:ee:2f:c5:ea:71:1d:2f:e0:8f:45:e0:86:c0:
c1:e0:08:ae:5e:7f:4c:f9:2f:b9:b2:37:a1:8a:7c:72:76:0f:
5d:b0:fa:8b:96:0d:d1:47:af:f2:6d:bb:cc:ad:98:0d:97:ad:
42:9e:54:ba:e1:e6:cf:dd:c8:74:80:81:53:cb:96:f9:b1:13:
15:aa:4c:46:4c:a3:73:63:e2:93:ec:87:ec:c4:0d:87:41:3c:
4e:98:b7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:11:35 2025 by rpki-client