Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EB50892D50811EFABAE4860762E951A.roa
File: 5EB50892D50811EFABAE4860762E951A.roa (raw, json)
Hash identifier: YVBCaN3Ql3exxS0Y5iRPVteMomUjOr1ilgxm0RabuA0=
Subject key identifier: 81:81:F9:09:5C:21:D4:B7:33:16:7B:63:EA:A0:69:D0:3C:2A:96:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013D2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EB50892D50811EFABAE4860762E951A.roa
Signing time: Fri 17 Jan 2025 19:22:20 +0000
ROA not before: Fri 17 Jan 2025 19:22:16 +0000
ROA not after: Sat 22 Feb 2025 19:22:16 +0000
asID: 54801
IP address blocks: 154.215.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81195 (0x13d2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 17 19:22:16 2025 GMT
Not After : Feb 22 19:22:16 2025 GMT
Subject: CN=678aadec-3480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:d9:82:20:dd:89:40:61:b1:63:d6:d0:2c:
8e:51:14:2c:0c:e7:7d:d3:42:e6:79:65:5c:83:b1:
03:e4:77:d8:2c:77:e3:15:f3:f8:df:f3:2a:01:d8:
ec:5d:c7:fb:72:2a:f4:c2:f6:89:0a:0f:df:e6:84:
ac:96:00:fd:1b:25:7a:cf:9c:02:fb:a3:ed:ed:8c:
55:b5:63:6f:44:2b:66:00:34:db:fe:7f:89:cc:e8:
49:97:56:1a:68:84:78:c3:db:27:b6:f4:ef:ea:64:
ed:72:5d:ee:e0:89:37:79:19:c5:67:e4:d7:ca:0e:
c7:10:87:f3:0a:cb:31:c8:82:01:7c:8c:01:c7:fa:
66:a9:d5:19:cf:e3:15:b7:63:cc:44:28:bd:b6:b7:
b0:75:70:b2:ab:a4:d5:f5:04:2c:c4:59:77:ab:27:
4d:0f:66:fb:bb:05:e2:a5:4e:33:13:bc:b0:91:ae:
20:9e:7e:05:ab:13:3b:bd:52:31:6b:6f:57:96:e3:
83:2c:4b:e9:2b:5f:81:10:7a:e6:59:43:00:39:c7:
48:d2:fd:eb:85:82:c8:56:20:39:8e:ac:a1:44:8e:
2a:eb:d7:cc:69:04:c7:34:8f:0f:ad:44:82:bb:39:
17:e0:5c:b2:16:4f:98:5c:d0:10:3e:a2:be:20:f0:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:81:F9:09:5C:21:D4:B7:33:16:7B:63:EA:A0:69:D0:3C:2A:96:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EB50892D50811EFABAE4860762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b0:63:cc:0c:d8:06:32:23:14:04:0c:77:19:a0:73:f3:ba:
6c:fc:13:d0:6c:15:fe:55:54:4e:09:a9:bc:d5:4c:04:b4:3c:
54:5e:4a:d6:8c:e9:42:ac:57:dc:cc:16:02:ed:b8:60:d6:e9:
f7:8b:69:e9:ed:27:86:79:8b:c7:e6:d9:b1:81:3c:c7:51:1e:
5d:ae:3b:2f:b9:6d:a2:c4:50:1e:4a:7d:76:8e:c9:46:57:73:
71:63:5c:6f:c1:2c:bc:70:c6:a8:13:2c:26:6b:c0:b6:d4:69:
2b:ca:49:36:07:b8:3b:77:c2:7b:7b:58:b1:ff:59:a7:12:5a:
59:06:ee:ac:61:32:57:ba:97:df:0d:0c:ae:e7:a9:37:0d:89:
40:86:fc:8b:44:47:97:d4:64:7f:ac:3c:26:c6:c0:f9:45:65:
9c:4e:97:fe:1a:9d:ef:a4:9e:8f:13:a2:5e:fc:22:73:11:4d:
45:a8:0f:66:d5:8c:1a:0b:35:9d:3d:03:5c:12:7a:7f:04:0d:
f5:39:21:82:ae:7b:78:88:f8:04:fd:8f:2d:95:ae:bd:1f:9a:
fb:d9:5b:da:24:cd:db:92:b3:56:dd:e4:5e:93:54:a7:c8:8f:
48:6f:a3:ad:5a:e4:9f:79:f5:28:4d:af:b9:e6:fc:c9:fe:04:
61:72:75:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:40:23 2025 by rpki-client