Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5958D08D9C811EFAAAE97B6762E951A.roa
File: F5958D08D9C811EFAAAE97B6762E951A.roa (raw, json)
Hash identifier: Cb99M+CJjJsOt+Vgf8/5Tm0iOdhMUkUgCZoN/jV9zJk=
Subject key identifier: F2:49:A5:8C:3F:8A:7E:8E:FE:38:02:9E:EE:0D:1A:A5:CB:29:48:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0142D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5958D08D9C811EFAAAE97B6762E951A.roa
Signing time: Thu 23 Jan 2025 20:31:01 +0000
ROA not before: Fri 24 Jan 2025 20:30:57 +0000
ROA not after: Fri 28 Feb 2025 20:30:57 +0000
asID: 62240
IP address blocks: 154.196.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82644 (0x142d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 20:30:57 2025 GMT
Not After : Feb 28 20:30:57 2025 GMT
Subject: CN=6792a705-f6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:99:7a:f6:af:68:55:c4:f9:3c:b0:ea:c7:80:
55:af:14:49:ad:fb:43:6e:d0:bd:c0:82:d3:dc:91:
b8:7f:85:d0:e8:e5:aa:0f:0d:76:56:2b:f4:b0:56:
2f:2b:00:1a:fa:51:c1:9c:f2:c7:d6:3a:d3:5f:7b:
70:6e:85:1a:c9:df:b3:0f:a4:8f:22:a3:eb:43:61:
38:dd:32:76:7c:6a:95:4d:0c:38:93:c4:d2:4f:d5:
4a:e8:1f:76:b3:83:87:77:b4:d3:92:54:fb:41:30:
a3:94:12:0b:37:bb:26:0d:d1:76:bf:5d:05:52:da:
3f:91:d8:50:c8:c2:0f:c6:c6:2a:28:ea:51:19:f6:
86:30:d8:8d:df:78:83:56:76:e6:34:4c:71:c9:8f:
63:68:a3:98:91:70:34:a7:44:24:ed:d6:6e:53:ce:
19:a6:d8:08:ba:23:2d:af:aa:c9:88:ab:74:19:6b:
03:53:46:63:84:77:5f:b2:1a:d1:20:f2:0b:22:84:
3d:49:13:ba:7c:d0:7a:41:ab:6f:66:df:53:2e:d9:
63:c6:ba:ee:77:74:28:5b:8b:b5:6d:66:b9:20:e9:
28:63:25:a4:af:c9:ef:41:96:03:3f:a6:bc:36:87:
73:5a:04:cf:e5:45:8b:15:72:8b:db:d0:c0:0d:fd:
44:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:49:A5:8C:3F:8A:7E:8E:FE:38:02:9E:EE:0D:1A:A5:CB:29:48:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5958D08D9C811EFAAAE97B6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.54.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:0c:76:bf:41:cf:40:77:e0:1a:5c:ee:66:c7:eb:d1:e3:16:
fc:4d:b9:06:a6:e8:4e:f9:97:56:52:f5:5f:ab:b4:a9:01:89:
a4:a6:4c:18:e0:75:76:a5:c5:f7:67:d6:78:4f:a1:66:9b:3e:
9c:e8:fe:97:42:d6:28:ea:f1:80:32:db:18:cd:6d:d0:db:8a:
b3:66:0f:06:5f:ad:1f:26:8c:c6:3f:5a:8b:d1:29:49:95:c6:
4f:66:1a:44:51:1d:43:7f:53:04:13:d0:90:7c:d4:7e:2e:7f:
4a:01:b0:53:13:04:d2:1c:2a:d7:68:fc:5c:97:60:59:95:f2:
73:e5:8e:1b:08:12:7c:f4:52:4c:75:26:3e:50:f3:2b:9a:6c:
87:23:52:48:e4:81:2e:49:f1:1b:fa:9b:6f:b0:1b:d6:e0:42:
89:e5:08:96:ef:6f:f9:2a:03:0e:b9:0c:e8:22:7b:35:16:57:
c8:33:2d:af:60:5a:50:a4:e8:49:d8:9d:94:0e:8a:70:b5:b9:
a0:54:3a:99:9e:9c:2a:02:53:bc:b0:6f:ef:35:19:49:9b:f6:
2d:c2:1d:f1:37:32:27:f0:b5:53:44:89:9a:6c:58:ff:ff:6c:
ee:34:51:d1:90:8e:70:f5:d3:4d:c9:a4:fe:d9:97:9d:79:cc:
a7:7e:e4:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:09 2025 by rpki-client