Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96062740DB1B11EFB884A2B4762E951A.roa
File: 96062740DB1B11EFB884A2B4762E951A.roa (raw, json)
Hash identifier: Npbah9+GHOMeg57BTPdeQOgJIGZar1tzEmiQqx+RVMg=
Subject key identifier: 25:C7:D7:CA:E7:53:79:71:CC:C2:E5:1B:44:8F:C7:E0:AA:59:B1:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01495C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96062740DB1B11EFB884A2B4762E951A.roa
Signing time: Sat 25 Jan 2025 12:55:00 +0000
ROA not before: Sat 25 Jan 2025 12:54:55 +0000
ROA not after: Mon 03 Mar 2025 12:54:55 +0000
asID: 202656
IP address blocks: 154.219.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84316 (0x1495c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 12:54:55 2025 GMT
Not After : Mar 3 12:54:55 2025 GMT
Subject: CN=6794df24-2544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:97:81:46:9d:f8:45:ec:a8:fd:74:d9:73:
a1:20:f9:6c:b9:64:57:95:b6:c9:95:b0:13:92:cc:
d4:14:6e:af:2a:f9:16:24:87:0f:6a:29:e2:ab:89:
79:24:e9:f2:9e:b6:4b:dd:a8:93:0e:b7:56:ba:c5:
20:53:44:b0:08:6f:72:ca:25:5b:cc:cc:c8:dd:e4:
f4:12:7d:43:4c:64:c2:07:4b:22:8c:eb:59:dd:7c:
9c:79:f8:23:20:d8:99:9b:dd:ce:5a:06:4c:dc:74:
87:a0:c5:e7:6c:9d:32:1e:29:28:2f:d6:61:c8:f5:
e3:4d:88:02:23:db:c5:ba:ab:32:9a:96:e4:3f:1f:
75:4a:c0:b8:69:62:ab:a8:86:0f:0a:98:72:40:bc:
a0:9a:3a:a1:75:82:f5:1f:6f:20:38:b6:e7:d1:d1:
6d:cb:94:81:a0:22:06:28:a1:84:75:5d:de:cf:03:
89:d8:2e:7f:21:2e:38:2e:80:3f:46:cf:36:09:63:
ff:54:a6:25:aa:0d:eb:09:8e:ec:84:ae:fd:91:b3:
de:d2:92:8f:b4:ea:1b:34:f7:69:29:eb:4c:af:a6:
36:56:79:a6:13:c8:07:40:dc:32:f8:90:ca:f9:5e:
7a:d4:c7:31:1e:42:b7:6b:93:5b:23:b7:60:14:08:
93:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C7:D7:CA:E7:53:79:71:CC:C2:E5:1B:44:8F:C7:E0:AA:59:B1:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96062740DB1B11EFB884A2B4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.253.0/24
Signature Algorithm: sha256WithRSAEncryption
53:b2:5d:f4:42:d1:7f:e7:a5:cb:b8:21:46:8b:3b:91:e4:57:
b7:de:05:95:3b:71:14:4c:54:a6:fb:fc:1f:8b:32:cb:f4:04:
c5:ec:1c:38:9f:37:09:f7:df:59:81:78:2a:83:3a:d6:f3:98:
04:1c:93:cf:6f:89:d8:2a:19:cb:00:d8:22:c3:9c:8c:82:33:
85:83:09:eb:f5:f9:64:5b:ce:37:39:83:02:55:fd:0a:a8:af:
71:6d:55:6a:f3:0d:c0:0c:9a:66:30:4e:a5:42:ef:e7:62:8c:
f4:85:84:15:f1:71:fe:b0:ba:1b:70:01:86:4b:62:11:fa:b6:
dc:9c:c1:d1:f6:4e:c0:bb:d9:2d:dc:6a:51:d5:54:66:f6:ed:
0b:fd:9c:f3:52:89:dd:e7:8b:cb:90:59:cd:3f:ea:eb:5f:08:
83:3e:2c:16:a6:4d:41:88:a0:ac:44:b5:c3:0f:27:33:07:30:
95:be:e9:b6:4e:f7:d2:1d:a6:0e:24:b8:72:8a:ca:85:59:87:
92:8a:cc:97:33:06:1d:8a:cc:1e:f1:e7:4d:b8:b6:dc:8d:54:
1e:99:99:f1:9f:11:6b:f9:ee:1a:6f:66:49:93:fe:3c:bf:77:
ed:53:6a:86:1e:2f:00:12:e8:2d:b4:a4:79:b7:4d:8f:33:db:
0c:49:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:35:36 2025 by rpki-client