Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E679F1CC5F211EFBDD31650762E951A.roa
File: 2E679F1CC5F211EFBDD31650762E951A.roa (raw, json)
Hash identifier: 3wt05KE2mjVJe4/m2msZVc1Bvx9hwD3BxEw4QvbQAC0=
Subject key identifier: 90:BE:05:2D:05:E6:5A:CA:0D:F4:F5:43:53:42:92:7E:6C:19:8F:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012DE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E679F1CC5F211EFBDD31650762E951A.roa
Signing time: Sun 29 Dec 2024 14:35:42 +0000
ROA not before: Sun 29 Dec 2024 14:35:38 +0000
ROA not after: Fri 12 Dec 2025 14:35:38 +0000
asID: 984
IP address blocks: 154.211.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77280 (0x12de0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 14:35:38 2024 GMT
Not After : Dec 12 14:35:38 2025 GMT
Subject: CN=67715e3e-13df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:59:e5:a8:7b:67:79:3b:60:3c:55:70:d9:5f:
dd:7a:6c:50:5a:9f:25:96:67:46:74:ba:52:b7:46:
5f:67:13:e8:12:2e:9e:28:9c:1f:56:ac:cc:83:95:
00:fb:3e:96:1b:97:e9:e3:fd:23:2c:81:99:f6:c3:
50:ad:59:b7:9f:28:39:ff:89:5c:66:7f:b4:ee:e3:
44:f8:57:98:5e:c1:e7:d8:dd:fd:4c:39:b6:a2:5e:
3f:da:0c:7a:0a:7d:b4:a2:41:8b:85:eb:c4:06:bc:
62:e0:c9:aa:31:34:2e:d9:0c:b9:bd:af:29:0f:77:
ca:7a:68:ac:71:9d:9f:29:24:ed:a5:22:b3:02:24:
80:e1:ff:9e:96:32:b7:82:40:e9:f9:a5:e2:50:79:
4d:25:23:29:09:f5:b5:62:99:93:ba:63:a9:a1:8c:
bc:b9:a0:a6:df:f0:17:bb:33:b5:57:1c:bc:16:7f:
d6:bd:0c:3c:12:77:ef:dc:8e:d6:bb:be:0b:7c:ce:
f8:ef:ba:45:9c:13:63:d0:54:97:96:5a:e9:57:cd:
0a:0e:b8:43:91:e7:6b:3b:c2:bf:e8:fb:cc:ce:1e:
33:2c:fd:e0:3f:67:2b:6f:e0:28:13:d7:a2:c3:fe:
f4:02:d7:21:ad:1a:0e:d2:2e:d0:46:44:c2:25:24:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BE:05:2D:05:E6:5A:CA:0D:F4:F5:43:53:42:92:7E:6C:19:8F:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2E679F1CC5F211EFBDD31650762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.58.0/24
Signature Algorithm: sha256WithRSAEncryption
40:77:e9:d9:9f:c7:8b:93:33:c3:ef:1e:58:78:7d:9a:1b:cd:
7a:53:8b:f1:a0:07:18:2a:8e:f8:7a:5c:49:6c:f9:f8:d9:71:
c7:86:35:c4:dc:95:11:1d:ad:dd:27:29:a8:9b:d2:82:07:ed:
26:22:ff:bf:c3:af:ba:6b:eb:8a:c5:e9:11:79:c2:60:ec:52:
b6:0b:72:23:14:61:57:38:1c:45:da:c5:92:cb:2a:82:32:25:
23:72:16:33:12:78:de:29:f2:5f:b7:1c:f2:fd:50:f9:9b:06:
5f:6d:73:96:e6:d9:e5:f3:6d:83:46:52:69:29:8b:4c:e2:3a:
fa:2b:79:71:68:9f:08:81:8e:fd:98:8b:ee:7b:ab:4e:ef:ed:
de:1b:b7:8b:00:ad:3d:0a:e7:ca:2e:9c:38:31:83:31:3a:fd:
89:33:98:32:e0:ff:d2:76:52:87:f8:03:c8:31:8f:18:0e:15:
fc:b1:99:b4:54:7e:4f:b7:45:a1:d4:8e:24:dd:5b:de:69:24:
f2:db:c8:17:c8:6f:73:ee:17:23:65:d1:3e:02:bf:be:6c:14:
45:71:b6:83:6f:3f:c3:28:5b:db:cc:66:11:39:ff:47:09:8f:
38:fc:d4:93:92:24:0c:81:b0:37:de:bc:34:2e:17:29:93:30:
42:1e:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:30 2025 by rpki-client