Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/590F1A88F87E11EF8AB82245762E951A.roa
File: 590F1A88F87E11EF8AB82245762E951A.roa (raw, json)
Hash identifier: CLLB4mL7ZOSDOcXZGEYgKFS79mYe90GLsNUamkAlyCQ=
Subject key identifier: 1D:07:16:E9:B0:FC:70:3D:D6:E9:9D:D8:DB:16:CA:4D:FE:E5:B0:C4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01714F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/590F1A88F87E11EF8AB82245762E951A.roa
Signing time: Mon 03 Mar 2025 22:25:01 +0000
ROA not before: Mon 03 Mar 2025 22:24:58 +0000
ROA not after: Mon 07 Apr 2025 22:24:58 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94543 (0x1714f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 22:24:58 2025 GMT
Not After : Apr 7 22:24:58 2025 GMT
Subject: CN=67c62c3d-c307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:58:90:7a:6d:e8:8f:f6:b1:aa:ac:8f:e1:
ce:55:2d:bf:af:d9:35:1e:d0:dd:3a:7c:86:4d:aa:
93:ae:a1:dc:75:b1:33:d7:c4:eb:b7:b9:95:e5:21:
cf:05:6e:a5:1b:90:d0:73:65:29:ac:dc:e3:d6:48:
24:93:0f:37:c1:8e:98:ef:4c:ab:6f:52:14:17:20:
47:21:dd:72:d2:55:fc:a5:6e:cc:9a:11:89:50:03:
f9:ba:b7:2f:d5:7b:78:81:64:80:bc:35:43:07:01:
a8:b0:ab:08:1b:77:b8:15:a1:9c:6e:8f:22:89:4a:
5c:1a:b9:f8:94:21:3f:7c:d9:49:5b:e0:ac:5a:19:
7c:0e:ae:38:a1:dc:bc:26:b6:94:d7:44:b8:af:3f:
2d:4a:f0:3d:2f:df:5e:84:52:37:19:69:21:ec:1c:
da:75:8e:01:ee:95:ec:54:65:c2:9e:ab:10:c0:3e:
6d:a1:f3:98:da:f9:55:dc:31:14:14:35:b3:9e:ac:
f7:90:f8:10:07:59:ed:46:12:ee:bb:3c:ac:9e:75:
7f:4a:d8:b8:4a:18:e1:0e:68:39:40:19:12:48:64:
53:82:b1:56:39:a6:98:6b:5c:24:32:06:fc:b0:0f:
ad:cc:b3:eb:ee:d6:0c:64:91:8e:0d:ce:27:e9:3f:
89:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:07:16:E9:B0:FC:70:3D:D6:E9:9D:D8:DB:16:CA:4D:FE:E5:B0:C4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/590F1A88F87E11EF8AB82245762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3f:d1:61:eb:d1:56:cc:b0:49:77:e0:f3:13:cf:32:ba:8b:
6f:01:c9:e7:5b:be:0f:eb:c7:09:37:49:b6:3f:f1:81:16:d8:
ce:1b:4a:21:37:5c:7a:7f:ff:05:ae:dc:6c:39:15:f7:ef:78:
76:b6:4a:36:33:27:ed:ab:43:d9:93:ca:08:c3:1e:a6:26:a1:
3a:16:4a:7b:a7:ad:8f:33:98:4e:95:6e:dd:14:b0:59:0a:2b:
a6:13:e1:5f:74:3d:ec:6a:fe:cc:55:44:e2:af:76:65:c5:14:
c1:ce:28:5d:41:7b:ff:24:88:7a:c7:10:aa:68:6f:77:bb:9c:
01:47:d4:da:27:6b:36:20:59:cf:0a:aa:fe:80:15:70:61:85:
ef:02:21:ea:52:95:a7:c2:fd:8a:ed:35:b7:ae:f3:3f:37:05:
29:5b:5a:51:8b:e2:33:27:38:35:c0:d8:da:ad:d4:1c:a3:b2:
ef:b9:64:e8:b6:ed:ec:af:ed:4a:21:fb:fd:aa:08:7e:7d:9f:
3c:9c:35:62:1e:56:0b:f6:1c:48:a3:5d:21:c0:ec:ae:ab:34:
a6:66:96:4f:d3:7e:a8:7c:ac:0a:cd:17:e4:52:df:94:5f:f9:
8c:ed:f9:91:ca:82:35:6d:b1:d6:c3:35:81:27:d8:63:f7:e5:
0a:a0:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:22 2025 by rpki-client