Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5E16584DA3E11EF8C8BB15E762E951A.roa
File: C5E16584DA3E11EF8C8BB15E762E951A.roa (raw, json)
Hash identifier: algyeZwfdZGiINJvnBYAfxD1ojKF1SJcU4VW5rd6B5M=
Subject key identifier: 2E:07:E6:F8:21:41:4D:5F:C5:53:5E:0C:7B:D2:EF:B4:3A:7C:59:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01459C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5E16584DA3E11EF8C8BB15E762E951A.roa
Signing time: Fri 24 Jan 2025 10:34:21 +0000
ROA not before: Fri 24 Jan 2025 10:34:18 +0000
ROA not after: Wed 05 Mar 2025 10:34:18 +0000
asID: 202656
IP address blocks: 154.219.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83356 (0x1459c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:34:18 2025 GMT
Not After : Mar 5 10:34:18 2025 GMT
Subject: CN=67936cad-7da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0f:da:71:e3:06:57:82:3a:68:a7:43:2f:4c:
60:65:3b:00:fd:ae:23:d1:2c:be:bf:40:ff:70:8e:
9b:44:81:e1:2e:60:31:c2:7a:1e:50:51:96:67:04:
fe:03:2b:e4:02:36:77:56:f8:27:8d:a8:73:fb:20:
b7:06:51:28:bd:13:2b:79:2f:b2:99:c8:d9:02:bd:
f6:49:02:4a:71:8b:5e:f2:e6:54:d8:4e:ad:93:47:
81:9d:18:bc:d5:7a:77:73:21:f7:6c:a4:da:ae:c8:
33:e2:6b:19:cf:76:d2:72:fc:e4:9d:c8:b4:79:d9:
22:a8:76:d5:d5:28:5b:07:5f:49:fb:87:0a:13:e1:
a6:de:3a:7d:f9:b7:5f:39:01:f5:ba:f4:17:74:5e:
52:84:89:59:42:d5:16:5b:90:59:c1:8c:8d:3e:8a:
a5:32:b2:68:a8:3d:a1:1d:a4:4d:4c:37:99:1b:ba:
f6:aa:60:26:d0:7c:f9:ad:7e:38:a7:34:f0:6a:97:
a4:8e:ec:92:52:70:99:44:7c:bf:ff:b5:f0:8f:b8:
53:2a:68:90:3b:05:cd:0e:a3:36:50:30:86:2a:85:
99:40:ab:16:ef:b2:31:b7:6c:94:07:d0:bc:d8:e6:
cc:be:2e:3f:d1:93:f5:a9:62:bb:35:b8:0b:b5:e6:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:07:E6:F8:21:41:4D:5F:C5:53:5E:0C:7B:D2:EF:B4:3A:7C:59:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5E16584DA3E11EF8C8BB15E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.16.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:83:00:e6:b6:29:81:57:36:bd:f9:57:b4:fd:02:77:84:f8:
a5:fc:63:72:ef:a5:ad:b9:5d:78:4e:e9:b7:e4:13:21:a6:26:
52:45:43:c5:f7:00:bd:9f:d0:b4:51:30:61:ce:a3:5d:e5:1c:
30:c8:24:36:69:df:2c:ff:5e:6e:e6:04:16:3e:94:96:16:59:
7c:ce:b0:91:0a:9f:ec:da:82:5b:df:7a:21:a5:fd:33:ae:ab:
1a:79:4d:a6:98:ab:ad:66:4d:ec:ab:21:d7:87:4f:b8:ae:57:
26:50:7d:ac:2d:07:71:09:d7:c2:8e:37:c2:f5:67:02:fd:ca:
a4:16:49:17:51:d5:eb:df:80:f0:1a:df:8b:b4:65:28:c5:2e:
bc:2d:b9:10:cb:67:d7:45:6c:78:ce:d3:be:0c:7a:64:63:2e:
05:a2:2e:41:e3:bf:4d:66:a6:26:89:0a:09:75:08:9c:62:42:
ef:2a:cb:76:46:2e:80:87:57:1c:b7:51:83:5e:09:2a:1a:a8:
7d:34:e7:a4:54:88:fb:08:99:23:87:a5:28:6b:07:36:4b:3e:
a5:7b:9b:1b:d4:e3:65:80:00:1c:67:61:26:09:97:97:01:d5:
d3:ae:6e:3a:3d:65:af:f6:80:98:19:64:71:c7:a2:41:dd:72:
0b:6b:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:11:44 2025 by rpki-client