Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65C75488C2A111EF844D9D47762E951A.roa
File: 65C75488C2A111EF844D9D47762E951A.roa (raw, json)
Hash identifier: zw373OMKqt4tTO7Q5se1pV3uPHanTztQD4HgC00kL4E=
Subject key identifier: 89:60:28:0F:23:49:DD:92:35:43:06:53:6C:E2:AB:F7:B4:D4:AE:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012536
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65C75488C2A111EF844D9D47762E951A.roa
Signing time: Wed 25 Dec 2024 09:19:52 +0000
ROA not before: Wed 25 Dec 2024 09:19:49 +0000
ROA not after: Thu 13 Feb 2025 09:19:49 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75062 (0x12536)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:19:49 2024 GMT
Not After : Feb 13 09:19:49 2025 GMT
Subject: CN=676bce38-4847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:54:7a:17:45:8b:2b:e6:80:13:1c:08:26:
7d:5d:ab:19:cb:f9:c9:b1:45:60:29:b4:f9:20:ee:
05:f4:de:36:40:06:27:f0:1e:07:f8:df:9f:1f:e6:
24:f0:b3:56:1f:c0:4c:30:4c:96:7f:0e:89:55:0d:
6e:c0:72:cd:3f:2a:ad:76:e5:36:07:ee:e0:f8:92:
61:1a:0a:d4:99:cf:a7:19:c9:ec:95:f8:ec:43:98:
59:11:a1:c6:a8:e3:78:6f:fe:27:9a:d6:9f:1d:89:
19:06:bd:d0:a5:b8:0a:87:0d:d3:7c:4c:98:91:73:
85:ec:3b:b4:5b:9f:0f:68:40:c5:1d:f7:e8:a6:68:
d7:39:b1:e8:08:f4:28:0b:90:f1:71:e0:5e:c4:fd:
5c:30:1a:8d:fb:2a:ec:3f:89:9e:c5:5a:12:94:de:
05:51:48:4c:a8:27:c5:41:ec:4c:4b:58:64:fd:ae:
2f:6f:1e:53:47:98:ae:0b:40:3f:0c:1a:09:00:b8:
80:41:46:3d:12:3c:e5:ef:15:a7:42:96:ce:7f:ee:
0e:ae:d4:ac:86:e7:7e:5f:94:76:25:65:53:22:89:
5e:d3:05:7c:4a:db:fc:35:50:2a:40:4d:75:ef:eb:
83:aa:bb:cc:2f:2a:54:53:d6:5b:4a:10:4c:95:74:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:60:28:0F:23:49:DD:92:35:43:06:53:6C:E2:AB:F7:B4:D4:AE:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65C75488C2A111EF844D9D47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0/23
Signature Algorithm: sha256WithRSAEncryption
34:6a:15:0b:f0:25:12:4d:d7:67:27:df:14:b1:3f:4e:d7:75:
57:9e:48:e2:13:42:9f:83:a2:20:96:ec:e2:22:0f:d3:ee:2c:
da:c3:1b:94:02:3a:c1:4e:b1:08:21:4b:93:45:a3:ae:77:05:
00:49:2f:d8:1f:ee:84:84:55:13:56:98:9a:30:49:97:34:3f:
a9:d6:3e:13:74:ab:be:3f:a0:ce:2b:86:6b:80:e6:43:6d:24:
35:a2:b9:d9:bb:f2:8a:fd:6a:eb:ca:d2:43:57:e4:db:9e:f5:
0a:ed:43:a4:40:0a:6c:2b:e7:5e:b3:38:af:37:44:6d:72:36:
b5:5f:11:55:1e:8d:f3:33:a7:84:1b:88:7b:ec:29:a7:50:7e:
90:8b:fc:1d:f7:60:0e:d0:82:79:1f:b0:7a:22:c2:df:31:6c:
25:18:a3:e5:6c:32:cf:04:55:87:c3:88:eb:db:c0:32:be:35:
b6:14:3d:57:ea:24:38:3e:51:6e:61:00:f9:d8:6a:85:3c:b5:
39:e8:91:5e:7f:5c:e3:60:cc:dc:92:f5:ed:30:6e:d4:8d:5f:
a7:a2:68:ef:22:4d:85:61:01:3e:02:c4:86:60:16:e2:01:c3:
59:e7:8e:be:17:23:48:1a:5f:7e:3f:a6:41:b3:a4:80:8d:b4:
39:2d:cd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:07:46 2025 by rpki-client