Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57628048D2E611EFB248DD9B762E951A.roa
File: 57628048D2E611EFB248DD9B762E951A.roa (raw, json)
Hash identifier: qx54+JsXLYJiRoQju9AaNLN5Awcq1YD8ZeJL7Wa2HRM=
Subject key identifier: E1:34:19:D0:B9:0A:17:9B:05:05:F9:00:1D:0B:63:B5:5C:A1:61:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013B94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57628048D2E611EFB248DD9B762E951A.roa
Signing time: Wed 15 Jan 2025 02:13:42 +0000
ROA not before: Wed 15 Jan 2025 02:13:39 +0000
ROA not after: Sat 03 Jan 2026 02:13:39 +0000
asID: 984
IP address blocks: 154.222.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80788 (0x13b94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 15 02:13:39 2025 GMT
Not After : Jan 3 02:13:39 2026 GMT
Subject: CN=678719d6-573f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:92:0a:4b:56:18:5d:00:35:b0:c6:8c:6e:6f:
b8:c8:06:47:13:bd:53:62:8c:ee:43:6e:da:fa:7e:
46:c4:ca:ab:0a:e8:9b:20:ab:ad:c2:ad:42:55:86:
4b:1d:bc:94:46:67:6a:db:5f:15:4f:bb:46:e7:1f:
fb:54:34:83:fa:cc:ed:0f:7d:c5:02:32:45:88:a8:
c7:91:06:19:60:39:26:2d:43:fb:b0:96:ea:39:6a:
14:d1:29:cd:a6:f2:5d:1c:6b:a2:8f:67:69:04:3c:
8a:ad:27:f0:0a:3c:18:a4:db:98:20:90:83:b3:26:
c7:d8:23:dc:56:fb:60:49:28:22:c0:b1:4c:cc:3a:
59:6a:ef:19:d8:66:c4:7b:5b:58:0a:69:6e:ef:fe:
8d:ed:d5:e9:df:c1:f7:06:a4:3c:10:9a:9c:dc:60:
48:03:37:b6:b9:89:f3:d0:c0:b5:d1:fa:1c:86:38:
12:9f:ad:c0:54:30:32:58:b4:f5:4c:a2:8f:af:9a:
7f:3e:88:33:87:e1:24:8a:04:bd:b3:83:06:8f:37:
a7:2d:e4:43:62:12:39:56:ff:ad:54:d8:70:72:27:
be:9f:00:00:fa:8f:30:8d:4f:91:1c:87:80:b4:f7:
84:c1:72:cd:09:c2:2d:7f:5f:25:bb:c2:bd:ae:cc:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:34:19:D0:B9:0A:17:9B:05:05:F9:00:1D:0B:63:B5:5C:A1:61:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/57628048D2E611EFB248DD9B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.130.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:80:25:53:c9:c5:af:8b:48:15:10:3f:4d:67:83:d4:c6:5a:
98:1b:16:74:c2:e3:86:1b:99:f3:f0:04:fe:37:57:c6:20:d1:
59:48:ec:9c:a9:08:7a:d9:d4:f9:2f:51:3b:9f:62:8f:4e:b9:
66:c0:b3:2a:69:35:da:67:a7:f0:94:56:cb:e1:f2:55:42:c7:
b6:0a:ea:15:6d:c4:5a:02:c1:b9:85:f4:99:bc:d9:66:49:d4:
67:87:73:4b:0e:dd:87:84:42:0a:8a:87:46:da:64:fb:ed:e7:
a1:c6:12:c5:e8:19:86:50:40:5f:db:5f:f0:73:43:4a:1d:3b:
73:d5:12:75:22:4c:ae:fb:18:35:cb:c1:bc:9c:99:c0:d0:a5:
fc:51:ce:ae:3f:14:8d:6b:c9:82:10:b8:2b:90:de:ad:eb:f5:
65:f1:09:66:b9:a0:ea:71:ff:8a:fb:5a:e9:f9:09:a0:a9:ad:
c9:f9:e1:51:67:2d:49:e4:3e:50:dc:27:9d:a7:d9:13:f1:9c:
da:59:48:a7:1a:4a:b9:60:4f:e6:83:81:87:2b:fc:e7:dc:96:
59:bc:a7:d3:50:0f:7f:4a:1a:f4:9e:88:0f:26:ec:07:a0:b0:
a3:3d:d7:85:10:5f:b2:93:88:c0:35:f3:8f:8e:fb:27:b2:74:
38:af:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:51 2025 by rpki-client