Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E585C2CBE811EF83FB32BE762E951A.roa
File: E5E585C2CBE811EF83FB32BE762E951A.roa (raw, json)
Hash identifier: /hdx6/iqfqg/diWaYRzTod7IL91jIHakjPusVvkGpbQ=
Subject key identifier: 29:3E:92:B6:F2:87:FE:DB:6F:FD:62:10:EF:D0:DF:7B:6B:F6:93:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01359B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E585C2CBE811EF83FB32BE762E951A.roa
Signing time: Mon 06 Jan 2025 04:44:22 +0000
ROA not before: Mon 06 Jan 2025 04:44:18 +0000
ROA not after: Sat 08 Feb 2025 04:44:18 +0000
asID: 272854
IP address blocks: 154.194.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79259 (0x1359b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 6 04:44:18 2025 GMT
Not After : Feb 8 04:44:18 2025 GMT
Subject: CN=677b5fa6-dd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:09:8f:b0:7c:ee:7a:98:5f:4c:08:65:cd:b5:
bc:c8:ba:92:7e:9a:65:4c:52:ec:b4:85:42:ed:99:
b5:ce:27:81:e4:c0:24:0a:3b:93:10:8a:34:4e:07:
5a:f9:66:ed:b7:cd:98:ad:80:f1:bb:d0:ac:1b:16:
de:3f:39:9c:f1:11:35:25:8c:fc:60:2c:c0:ab:65:
b7:ef:67:8c:81:77:93:23:8c:c2:37:81:fb:03:c2:
16:59:36:53:c7:5f:df:50:39:27:ac:f2:8c:d4:b5:
6f:2f:24:b9:b9:f9:5c:8c:e6:0e:6e:7c:d6:40:f4:
d4:05:71:43:14:c8:a0:05:71:24:d6:2c:d7:d0:dd:
e2:cf:1f:ab:76:d3:5a:46:69:a6:85:f7:41:90:18:
70:4e:71:78:40:36:54:47:85:77:88:eb:b2:41:9f:
ec:e1:0c:80:3a:8a:40:05:0c:2b:c4:bf:2b:ee:c6:
75:29:28:fb:7f:b0:ba:50:97:39:1c:2c:76:79:f6:
08:8a:fa:b7:61:82:11:0a:1e:ea:19:48:3e:03:a9:
73:b4:70:97:59:14:97:b2:af:3b:11:1e:8f:ed:6e:
c7:3e:c7:5e:ec:0e:e1:13:ec:35:3f:f7:1e:c4:8d:
70:64:d8:a5:7b:db:31:54:49:c5:3e:e5:bc:b5:82:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:92:B6:F2:87:FE:DB:6F:FD:62:10:EF:D0:DF:7B:6B:F6:93:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5E585C2CBE811EF83FB32BE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a9:da:e2:3b:49:d4:28:a7:b9:74:f6:56:92:5d:26:97:3a:
89:a8:65:6c:18:c8:4f:76:bb:de:e8:ce:da:f1:e9:a5:54:39:
6d:86:9a:4c:9e:c0:be:51:d3:f2:16:6f:05:74:38:b6:eb:be:
e6:2a:b7:bf:d0:c4:af:ac:e7:43:4d:0c:2c:70:b6:95:9e:a6:
8a:be:58:2a:df:56:f2:93:8c:5f:5a:6d:cd:21:da:99:57:7e:
68:dd:96:cb:d5:0d:6c:a8:bb:4f:6c:75:90:c9:b0:9c:b5:ed:
6c:c0:c4:52:cc:9d:40:b4:8f:48:a5:6b:c9:c5:ee:a2:a2:de:
59:c5:7f:b2:af:92:fa:df:4d:31:59:d6:d5:9b:a4:3e:56:fc:
78:81:40:4b:51:75:f1:2e:2f:06:6a:9d:41:8b:36:67:7a:46:
e0:c8:b7:e9:87:a9:07:bc:19:3d:27:65:d0:45:a7:d1:ff:96:
d7:43:df:67:54:5f:b5:33:2a:e1:6d:5f:1f:54:ec:bd:ed:ad:
46:8d:c4:1d:bd:a7:45:85:f6:c1:2e:ff:93:91:02:7e:37:de:
d3:64:e6:bd:d6:96:cc:93:37:0c:f1:7e:76:ea:6b:51:79:fb:
9d:e5:6a:ce:e5:fd:53:bd:4d:e5:3a:7e:d1:fc:78:c7:69:0c:
50:61:a9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:36:29 2025 by rpki-client