Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9EF55ACDA5711EFB6869389762E951A.roa
File: F9EF55ACDA5711EFB6869389762E951A.roa (raw, json)
Hash identifier: LwN/1h04fA8h6O3Ot6/5EbFsOa37e1tZVyMo0G2DKW8=
Subject key identifier: 5C:98:B6:10:9B:05:8B:9C:01:F2:1A:0D:D6:27:97:2E:30:18:0A:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014789
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9EF55ACDA5711EFB6869389762E951A.roa
Signing time: Fri 24 Jan 2025 13:34:46 +0000
ROA not before: Fri 24 Jan 2025 13:34:41 +0000
ROA not after: Sat 01 Mar 2025 13:34:41 +0000
asID: 44559
IP address blocks: 154.203.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83849 (0x14789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 13:34:41 2025 GMT
Not After : Mar 1 13:34:41 2025 GMT
Subject: CN=679396f6-4252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:7e:a3:4d:65:92:10:49:8c:9b:f1:38:56:
bd:7f:53:23:8a:54:f7:3d:ea:ea:39:a9:17:31:9e:
4e:60:66:1a:7a:cd:4f:71:b2:0e:2b:fb:37:fa:35:
d3:7b:db:71:d9:54:26:2a:05:c6:8b:71:dc:0b:c2:
65:a6:af:e8:15:19:c8:75:1e:6c:29:77:db:81:39:
74:c5:f2:0b:8f:28:34:94:23:f5:79:58:f8:66:0f:
93:40:60:7b:22:1c:43:7d:bb:4b:cf:6a:3c:cb:1b:
ca:48:58:59:4a:53:0e:b2:be:12:06:ee:e1:b5:f3:
83:c5:a7:2d:fc:f9:68:fc:56:b7:9d:24:ff:2a:c6:
fe:a5:60:de:e9:d7:3a:1a:ef:ae:2a:27:1c:de:a5:
1d:bd:35:da:f8:a4:95:a1:8b:07:79:8a:61:85:6f:
be:ee:1c:fa:8f:aa:ee:65:ba:f0:78:1d:8c:08:30:
2c:ce:47:de:85:8e:b8:51:a5:ba:d0:bc:61:7b:17:
8e:0c:cc:33:42:b3:a0:08:64:b5:38:2c:01:d2:5c:
21:2e:6b:18:65:bd:fd:ac:2d:7b:43:41:0e:33:a7:
db:29:ef:b4:bb:b9:a9:33:2f:86:ea:2f:04:ce:5c:
13:ed:b2:09:53:f5:4a:34:1e:85:cd:39:af:87:d5:
f9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:98:B6:10:9B:05:8B:9C:01:F2:1A:0D:D6:27:97:2E:30:18:0A:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9EF55ACDA5711EFB6869389762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.213.0/24
Signature Algorithm: sha256WithRSAEncryption
18:59:bc:6d:de:3b:70:c0:38:14:26:31:47:59:21:cd:44:05:
5d:b1:ba:c0:a8:7e:fe:79:b7:af:45:10:60:63:55:12:8d:0a:
cc:1b:f0:3c:97:bc:df:1e:c4:79:77:78:10:49:e2:50:f2:8c:
09:c6:3a:a8:00:45:95:6f:9c:95:f9:5a:bc:be:bc:75:89:ad:
cc:b1:e6:3f:07:5f:a0:78:1a:a9:0c:f8:f2:a8:56:f8:94:8d:
de:38:a9:04:aa:f0:70:f1:b3:78:93:0e:89:f9:85:33:f3:41:
e9:00:cf:bf:ca:01:01:71:9f:5a:62:70:2b:60:8c:74:2e:80:
bc:e2:8a:5a:ab:85:1e:b7:d2:7f:50:cb:b9:24:67:66:6f:78:
1b:05:90:43:cc:74:5b:34:2b:ed:23:5c:f6:15:21:ac:33:35:
d1:bc:9d:23:34:b3:e4:db:c3:6f:0d:22:55:df:8a:26:f3:0e:
f3:53:c1:86:38:ac:ec:f0:18:0d:4d:7e:4e:19:41:db:bf:e2:
f8:4f:f5:72:05:f8:c9:a3:80:ac:bd:27:17:ac:0c:53:52:28:
5a:7e:56:d8:25:b4:2b:7e:cf:c8:3c:d9:ef:30:19:e5:05:b9:
4b:18:b5:ad:6e:31:c7:10:fd:c8:fe:79:7b:5a:23:c2:a6:88:
16:08:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:13 2025 by rpki-client