Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5AE5594DE2711EF86C28948762E951A.roa
File: C5AE5594DE2711EF86C28948762E951A.roa (raw, json)
Hash identifier: 8+yvCmQ3900uAXPg0I5MA67AVs0Xel2vAdu36AESocs=
Subject key identifier: E0:1E:21:4F:10:25:9F:5A:AF:71:C1:44:EB:7A:7E:70:D4:0E:2F:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014D82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5AE5594DE2711EF86C28948762E951A.roa
Signing time: Wed 29 Jan 2025 09:59:47 +0000
ROA not before: Wed 29 Jan 2025 09:59:43 +0000
ROA not after: Wed 05 Mar 2025 09:59:43 +0000
asID: 203020
IP address blocks: 154.197.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85378 (0x14d82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 29 09:59:43 2025 GMT
Not After : Mar 5 09:59:43 2025 GMT
Subject: CN=6799fc13-8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:f0:d0:e6:1e:89:de:de:45:c1:2b:4e:ca:
62:33:7b:ac:a4:d2:ec:40:01:a0:66:42:d8:95:a7:
00:59:17:c9:9a:54:99:2f:75:88:a9:1f:a5:1d:e4:
46:b6:3d:91:0f:1d:c3:79:f0:a6:35:b5:ff:80:ab:
87:24:75:84:2b:7c:ac:b4:ca:47:8c:4e:05:96:cb:
36:2c:39:6c:3b:a9:38:8c:33:09:0a:b3:df:2e:b1:
e7:f7:5c:0d:3a:7d:f6:a6:84:14:ca:d5:09:a6:bc:
c9:a1:f7:d8:ff:1e:7f:fe:6f:cb:6d:ac:37:52:90:
8b:0c:23:9f:1a:22:ba:38:ea:6a:3f:76:b7:c0:d0:
33:17:9a:e9:aa:d7:80:6d:f1:04:1e:16:ae:21:57:
f2:fc:72:9e:4b:75:5e:c6:8a:fa:e2:11:e2:8f:8c:
9b:a2:d5:ee:d3:30:76:85:b2:23:09:99:14:a5:52:
ba:19:8a:8b:85:03:bb:9a:06:83:0b:7f:2f:24:9c:
95:bd:42:93:f1:23:d1:cd:74:52:84:5e:50:3d:95:
fc:bc:62:7a:4b:da:3e:67:94:a4:e6:92:e8:11:49:
22:bc:ee:1d:0b:bd:14:c3:9b:da:4b:b2:94:d4:ca:
e7:c9:bf:d6:38:69:c1:a0:f8:e5:0b:5c:d4:4d:29:
08:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:21:4F:10:25:9F:5A:AF:71:C1:44:EB:7A:7E:70:D4:0E:2F:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5AE5594DE2711EF86C28948762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.120.0/24
Signature Algorithm: sha256WithRSAEncryption
28:88:8c:f4:15:64:33:29:6c:f0:b8:dc:bb:43:90:dd:85:f0:
b4:96:a6:ca:0e:d3:8a:90:52:80:eb:63:3b:46:01:3c:b4:72:
d9:4e:65:b3:c2:62:d5:f8:a5:3c:56:78:60:fa:9d:f2:80:b1:
79:99:50:27:20:65:92:0b:9d:96:b8:34:17:33:7f:38:61:70:
12:d6:1a:cb:57:e2:3d:fc:58:cd:63:21:ae:dd:8f:24:ee:df:
c0:3a:71:70:9c:8d:da:b5:42:44:da:3a:e9:9b:88:31:89:5e:
96:54:b3:6a:ef:fa:74:e8:b3:49:e4:a7:44:1b:7d:12:64:f1:
3a:46:bf:b1:37:e6:36:ee:8b:d0:87:dd:3b:24:f1:48:df:8f:
32:f9:d8:b5:82:b7:d6:5f:f2:f8:87:c4:1d:8c:a5:02:9a:80:
bc:1f:a6:90:f5:ec:99:25:a5:4e:b9:49:fe:2a:5b:30:72:f6:
68:a6:0b:07:02:d7:ea:6d:39:bb:49:41:80:80:f9:71:2b:7f:
90:f4:92:93:e6:27:e4:04:6b:ae:3a:34:d5:d1:73:e1:ae:69:
13:45:b2:54:53:09:ba:28:d2:db:2b:04:02:9a:c2:45:53:53:
fd:75:d9:39:db:a2:f4:c5:6e:8a:93:a6:fc:3c:dc:c4:a7:f1:
2b:f6:e1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 17:00:23 2025 by rpki-client