Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58699C1CDC0311EF95E4F54D762E951A.roa
File: 58699C1CDC0311EF95E4F54D762E951A.roa (raw, json)
Hash identifier: 9C8dQrYHCxmqeNhwwkYtMQtuJayspKycwWw3TbKbM6k=
Subject key identifier: CE:95:63:DD:E6:94:74:35:1A:92:5B:B4:BF:96:6A:70:3A:42:51:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58699C1CDC0311EF95E4F54D762E951A.roa
Signing time: Sun 26 Jan 2025 16:34:00 +0000
ROA not before: Sun 26 Jan 2025 16:33:56 +0000
ROA not after: Tue 01 Apr 2025 16:33:56 +0000
asID: 63139
IP address blocks: 154.94.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84718 (0x14aee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 26 16:33:56 2025 GMT
Not After : Apr 1 16:33:56 2025 GMT
Subject: CN=679663f8-aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:30:d7:4d:02:f3:d3:d6:76:27:b6:72:51:
b2:ff:0e:af:06:b8:f5:22:09:1e:2f:54:ef:b3:a9:
a5:7b:17:79:4d:3e:01:c4:4c:31:63:bd:ca:b9:b2:
f4:8b:e8:61:79:2b:93:c7:29:c9:97:9d:b5:f2:98:
70:31:43:73:f8:d2:87:be:4d:06:c3:fe:ad:59:00:
7b:de:78:28:f1:55:6e:27:e6:48:6e:89:71:19:cd:
18:3c:9b:1b:35:d5:c7:c4:21:49:9a:49:59:e3:6b:
49:07:2f:b0:0b:ba:ce:c1:ef:6d:ca:69:b8:8d:b7:
82:2b:6f:a5:d4:0f:1e:c7:7c:38:c8:c9:52:ce:76:
88:66:c0:eb:f4:23:19:df:d9:70:ce:56:f8:3e:05:
35:45:79:3d:0a:d9:e7:5a:14:1c:40:d6:c6:36:48:
ae:8f:df:34:3b:d6:32:e5:47:fe:11:a1:ad:dc:0d:
9d:8e:7d:80:65:47:76:79:e7:05:58:8d:3f:e7:c9:
0a:1a:24:bf:2b:34:04:c4:84:ae:20:67:55:69:00:
3a:1c:4c:2f:e3:a0:3b:fa:19:7a:66:22:c0:09:b0:
09:3e:9d:98:c3:9d:85:82:b5:06:a3:87:ce:9b:1a:
43:78:2a:0d:4c:4a:d1:b1:55:ff:78:a7:12:77:26:
b4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:95:63:DD:E6:94:74:35:1A:92:5B:B4:BF:96:6A:70:3A:42:51:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58699C1CDC0311EF95E4F54D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.79.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:05:bb:2b:05:b0:c6:f1:aa:d2:41:ec:32:42:71:d7:5c:e6:
2e:32:45:f0:c4:ed:c6:7d:5a:32:4b:3b:62:d9:1f:e9:b1:3d:
1a:e4:ea:0d:ce:37:1c:8b:06:e0:76:db:4e:8d:7b:d5:eb:7a:
29:c0:7f:76:81:61:25:88:d3:b2:8c:9c:e8:ed:57:e0:fc:69:
df:ea:ca:00:f1:26:a6:40:63:5b:de:c5:48:40:06:85:3b:18:
75:67:a7:a3:0a:34:be:db:65:78:bd:3e:7d:08:37:51:8d:ec:
b5:09:3c:74:8e:80:a5:24:f5:f2:8f:74:eb:c3:a5:18:c3:c0:
eb:b5:17:5e:d2:1e:c0:14:13:a4:17:93:42:2a:bd:18:d5:b5:
45:70:b1:9d:b9:ef:bb:76:1d:f8:79:4b:98:d4:1e:f9:16:de:
76:bf:4b:dc:e4:cb:79:bc:b9:c5:9a:37:3e:93:5d:8a:db:2b:
f2:88:0b:2e:05:10:0c:9d:27:0e:5c:66:06:e6:35:7d:28:01:
b3:db:80:47:40:19:70:8b:06:62:29:0e:39:f1:f9:34:cc:55:
ef:f2:86:71:62:3c:c2:10:db:97:f6:12:f8:48:93:5e:36:ed:
d3:47:06:f8:a5:bc:b4:fb:62:38:aa:c2:b5:e8:59:0a:31:88:
9b:6b:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:10:15 2025 by rpki-client