Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B4D140C1AD11EFA4B205A7762E951A.roa
File: 15B4D140C1AD11EFA4B205A7762E951A.roa (raw, json)
Hash identifier: HLGzBmuIm8CGzLTpr7aKlOVJ0jxnqgBlQ2+Jnhgnh0U=
Subject key identifier: 0F:CB:B5:D8:75:F4:FD:06:04:9C:90:FA:62:1B:08:D4:67:AF:E9:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012145
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B4D140C1AD11EFA4B205A7762E951A.roa
Signing time: Tue 24 Dec 2024 04:11:01 +0000
ROA not before: Tue 24 Dec 2024 04:10:57 +0000
ROA not after: Wed 10 Dec 2025 04:10:57 +0000
asID: 984
IP address blocks: 154.193.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74053 (0x12145)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 04:10:57 2024 GMT
Not After : Dec 10 04:10:57 2025 GMT
Subject: CN=676a3455-944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:bb:63:50:d5:a8:87:91:74:26:46:b0:b5:
71:8a:c2:98:15:d4:61:f9:23:56:74:4a:02:78:32:
85:f5:43:0e:9e:02:94:81:33:61:21:d1:43:20:23:
c6:93:bb:56:75:6a:72:91:9c:9f:a3:cb:64:2a:89:
83:3a:21:41:03:76:3b:41:b2:36:20:c2:8d:d2:0f:
74:05:4b:ee:c3:8d:24:6d:4a:8f:15:71:31:3d:62:
51:9b:76:62:36:8b:0a:09:b6:e1:f6:01:ac:40:c5:
8d:d6:7a:d5:fb:82:5d:15:cb:ee:d8:e1:2a:96:4e:
c2:f4:c9:94:51:c0:75:c2:16:98:3a:4d:fd:15:80:
89:78:14:ea:93:50:e4:c3:85:62:fb:e9:4c:b6:3a:
2e:4d:ca:1a:bb:e8:8e:90:d9:d8:e1:84:a4:d1:9f:
fe:ec:36:09:c0:f7:36:6e:36:a6:90:70:e9:af:03:
79:7b:78:a6:d5:de:b6:41:63:f7:7e:15:f1:64:3f:
b4:3b:08:04:c1:59:05:22:e9:2b:1b:15:2f:07:48:
77:22:60:4f:be:be:19:ee:b1:aa:90:a1:55:7e:14:
4d:fb:ae:2c:cd:e0:53:51:55:e5:ff:d7:7a:e4:0e:
30:52:f4:cb:16:9a:ae:cc:2f:9a:74:5c:9c:78:df:
72:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:B5:D8:75:F4:FD:06:04:9C:90:FA:62:1B:08:D4:67:AF:E9:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15B4D140C1AD11EFA4B205A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.59.0/24
Signature Algorithm: sha256WithRSAEncryption
44:79:59:bb:2a:6c:b9:85:d8:81:52:a3:79:3f:f7:52:69:0e:
65:35:aa:9c:00:a5:27:4f:44:f9:81:bf:06:90:ff:b6:96:46:
b3:f5:3a:e2:f0:87:e8:85:a5:2a:7b:a2:c0:7d:69:1c:7a:ff:
32:69:ad:4f:2c:3d:f5:7a:a9:41:99:dc:e5:70:03:23:19:13:
b2:4c:e4:d6:3f:e5:b6:b7:f1:a3:7a:00:84:99:23:df:89:0e:
41:ff:cd:3c:12:59:88:2d:d9:a0:02:fe:db:41:bc:c9:93:92:
8e:05:08:73:67:39:3e:e9:a4:b8:a3:1d:bb:89:03:a0:c2:bf:
18:85:f8:df:ea:fe:80:1a:e3:58:6c:28:bb:f8:2d:6e:5e:3f:
30:06:8e:96:ff:0d:a8:24:b2:c0:5f:24:58:f1:79:77:8d:e0:
ae:49:d2:3f:7d:3c:1e:4d:06:59:99:50:94:38:24:f5:e0:b5:
cc:fe:45:4e:0d:20:06:55:20:27:19:09:83:98:55:bc:88:c6:
bf:17:59:3e:36:85:c8:b5:48:e1:0b:00:3f:18:9c:1f:4c:cc:
91:81:09:e6:db:03:84:60:f8:47:9c:f9:ec:ab:10:58:bd:96:
3d:f4:fa:32:f2:fd:bf:46:e0:25:a6:41:b9:6b:0d:f0:b8:51:
cb:2d:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:07 2025 by rpki-client