Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E733C98D0BA11EF9EC94359762E951A.roa
File: 5E733C98D0BA11EF9EC94359762E951A.roa (raw, json)
Hash identifier: ZkhPArVt3UzzGOsMPSIZDHJPExJs2DIyj1FegQlgw48=
Subject key identifier: 6E:76:D1:25:FF:A2:AE:40:3D:02:7D:9B:E2:25:B8:B5:0E:B8:EB:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013AA2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E733C98D0BA11EF9EC94359762E951A.roa
Signing time: Sun 12 Jan 2025 07:53:54 +0000
ROA not before: Sun 12 Jan 2025 07:53:50 +0000
ROA not after: Fri 14 Feb 2025 07:53:50 +0000
asID: 137899
IP address blocks: 154.222.24.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80546 (0x13aa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 12 07:53:50 2025 GMT
Not After : Feb 14 07:53:50 2025 GMT
Subject: CN=67837512-3aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d0:06:4b:77:16:f3:00:95:cb:53:75:16:ff:
53:29:93:f0:08:70:73:56:84:6e:30:bc:41:89:10:
13:1a:51:61:a8:9f:f8:ce:8c:d0:51:e0:84:3f:5e:
12:83:7c:f1:6d:56:3f:d5:bd:d9:a3:5a:9f:ac:3b:
99:2e:56:03:35:58:4f:c2:b4:ae:11:de:7a:92:fc:
26:9d:1a:80:a9:21:6a:ee:86:89:16:d8:a1:eb:5c:
48:b0:19:a0:fc:7c:68:64:59:7b:d1:91:53:1b:a4:
1d:2d:2a:ef:54:fe:7d:44:88:7c:81:81:0c:e9:93:
a2:75:4c:7f:90:5b:b3:c0:50:b6:83:71:60:b0:d9:
91:91:e7:50:82:32:1c:e5:10:b3:db:3c:94:ae:56:
75:80:f2:bd:12:5b:d3:45:6d:ba:3a:13:51:1c:32:
1a:4d:18:71:b0:e8:c2:95:19:8b:b0:1a:45:e2:6a:
8f:83:ce:57:5f:60:8a:14:28:2c:18:6c:ff:c1:97:
bb:8e:59:dc:f1:a5:ae:60:99:50:d1:14:26:86:cf:
8f:32:b4:69:07:fc:7a:bf:f8:d3:6f:a7:51:29:10:
69:2f:39:14:2d:68:bb:21:a2:28:0a:95:42:a4:9d:
04:0d:98:e3:69:16:57:f0:b9:70:36:6a:70:a7:a0:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:76:D1:25:FF:A2:AE:40:3D:02:7D:9B:E2:25:B8:B5:0E:B8:EB:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E733C98D0BA11EF9EC94359762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.24.0/21
Signature Algorithm: sha256WithRSAEncryption
9e:a4:5c:08:34:1c:0c:91:f9:9c:fd:70:3f:b0:ec:6e:24:e4:
c3:ce:91:e3:ca:12:f4:3c:70:dd:02:71:6f:c9:7c:e1:2b:73:
e4:f3:2e:d2:75:db:59:90:e5:8b:cd:63:a2:52:51:67:75:8a:
b2:00:f2:49:5e:b9:38:1c:d8:76:c4:6b:f2:a1:b3:1f:50:44:
d5:4a:7e:3c:32:74:4e:42:0f:28:7b:8c:63:96:3c:56:34:b3:
25:86:74:87:df:7f:bb:28:8b:6e:18:7b:8f:dc:b6:7f:67:d0:
cf:60:84:89:bc:e8:1c:8b:cf:1f:66:2b:ff:1a:50:7e:64:47:
b2:af:3b:9d:e1:49:0d:3f:7b:64:60:dd:91:e9:e9:c7:26:94:
f0:1f:dc:0a:ac:e0:fb:58:9c:4d:f6:0e:06:5f:5c:f3:14:d9:
c0:e0:2b:50:fb:f8:19:a2:be:df:33:f2:26:89:ce:a7:53:6a:
52:c5:bc:66:ee:fa:71:b6:ee:54:3c:37:aa:7b:5b:e1:c8:45:
10:f4:4f:ae:ce:2b:b6:3c:7f:50:f2:b8:01:ae:7b:8d:7c:6b:
8d:12:4a:43:6d:67:c4:b0:ba:d7:e7:cf:20:04:eb:17:ce:1d:
ed:d6:f4:a9:9f:6b:7c:14:ad:fc:77:ba:36:46:eb:6a:7b:3e:
56:26:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:07 2025 by rpki-client