Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E289612DA2811EFB3C3D347762E951A.roa
File: 5E289612DA2811EFB3C3D347762E951A.roa (raw, json)
Hash identifier: HjiH0XsOYjHirc6b//36cDZrFXoy7Wcf/t4RRD1pMtc=
Subject key identifier: E8:4B:9C:1B:9B:61:51:25:03:B2:24:2B:CE:97:B8:28:81:63:AF:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014436
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E289612DA2811EFB3C3D347762E951A.roa
Signing time: Fri 24 Jan 2025 07:53:58 +0000
ROA not before: Fri 24 Jan 2025 07:53:55 +0000
ROA not after: Wed 05 Mar 2025 07:53:55 +0000
asID: 202656
IP address blocks: 154.222.41.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82998 (0x14436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 07:53:55 2025 GMT
Not After : Mar 5 07:53:55 2025 GMT
Subject: CN=67934716-4bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:96:71:00:fa:7a:18:78:aa:99:26:fd:14:
66:e6:e6:87:77:61:8d:bf:74:44:04:6a:c7:5a:07:
4c:79:46:cd:5f:54:2d:8d:22:d7:04:03:ef:d7:f6:
0d:4c:ef:45:bd:99:4a:de:15:52:2f:02:18:7e:c7:
a7:61:dd:16:fe:46:31:13:5c:91:24:f5:2f:2d:be:
55:8a:e3:f6:73:60:4b:60:d5:73:85:d9:f4:4d:e1:
15:32:a6:a1:ef:9d:c6:8e:82:67:3b:6d:3e:1a:4b:
8d:43:c4:ca:e2:16:bc:75:0f:22:9f:58:28:af:ec:
ee:e2:7e:18:0b:da:f1:4d:da:9b:41:c2:86:a8:62:
3a:3e:62:25:23:d1:19:41:05:2a:6b:3b:38:c9:c8:
9c:ff:b9:54:1d:c6:6e:b5:a0:52:7e:d7:fa:09:e0:
ef:d6:35:51:bc:89:2f:52:99:35:86:f2:c6:ab:d1:
9a:11:d5:34:06:60:47:fd:84:2d:5b:50:1c:36:80:
65:82:64:42:f3:0f:7f:30:1f:46:ae:62:4e:6f:de:
6b:e1:e3:4c:ed:cd:1c:b2:b5:7d:18:65:94:af:53:
be:f8:66:7d:2c:f8:a3:48:67:e3:75:4c:b4:62:5b:
25:ae:2a:4e:74:89:ee:80:c7:91:c7:d1:fb:2f:f1:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:9C:1B:9B:61:51:25:03:B2:24:2B:CE:97:B8:28:81:63:AF:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E289612DA2811EFB3C3D347762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.41.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e1:66:31:12:2a:91:13:a9:6c:e8:bf:65:6e:55:1c:8f:bf:
14:0c:6c:c0:f3:a4:e5:32:01:c9:68:17:b7:91:a1:b3:75:56:
0c:ae:33:a1:5c:93:ba:ab:9c:20:75:d2:b3:e6:21:e2:fb:d2:
0c:7b:99:68:d2:05:82:9b:7a:ed:f0:42:82:a3:1c:02:2c:c5:
f1:46:4e:a4:a0:f1:40:b3:4a:ad:c4:0d:4b:f8:45:cb:18:9c:
46:26:ef:cb:00:49:b5:20:87:08:27:7e:c9:4c:20:e0:0f:72:
b5:15:76:07:c6:ea:3a:e0:6c:a5:65:6c:c4:09:05:27:2e:2d:
2a:fd:12:4b:6b:c3:32:ef:3f:67:76:de:1e:4f:a6:83:c5:e8:
f3:2e:92:20:72:68:29:bf:58:a1:ee:3d:c7:d3:9d:75:ee:70:
b3:b6:b4:0f:49:b7:5f:36:49:cb:7c:ba:fe:af:43:f9:a0:96:
38:ee:16:d2:e8:51:69:c5:38:cf:64:66:4f:a9:dd:ff:8b:8a:
f4:ec:53:fa:03:05:0e:9a:67:31:d7:9e:c2:d6:f8:b2:75:be:
4b:27:5d:6c:01:38:7a:ec:08:c8:6d:4d:4d:f9:6e:02:bd:ad:
12:fd:cf:91:7a:e4:cd:02:ad:b0:f4:7b:95:42:bf:89:62:e3:
35:91:2d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:57:34 2025 by rpki-client