Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/595B2DD0E2D811EFBE11C562762E951A.roa
File: 595B2DD0E2D811EFBE11C562762E951A.roa (raw, json)
Hash identifier: /4X91YeIR/o/MVRtbwNnFYAK9imBIG9ovyC+9LoH+Jg=
Subject key identifier: C6:8A:D9:5C:C6:9B:15:6B:88:24:FA:56:46:11:90:53:8C:7F:FB:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0150CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/595B2DD0E2D811EFBE11C562762E951A.roa
Signing time: Tue 04 Feb 2025 09:13:51 +0000
ROA not before: Tue 04 Feb 2025 09:13:47 +0000
ROA not after: Wed 30 Apr 2025 09:13:47 +0000
asID: 18229
IP address blocks: 154.210.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86218 (0x150ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 4 09:13:47 2025 GMT
Not After : Apr 30 09:13:47 2025 GMT
Subject: CN=67a1da4f-2a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:95:22:1c:e0:0e:dc:c5:2f:13:05:5b:4c:
96:c5:6d:83:41:4c:b8:7b:ab:e5:6e:e4:84:a6:d1:
7e:32:8f:70:91:67:0c:3f:78:8d:92:66:d9:40:6e:
67:89:93:ae:08:2e:f4:d0:91:7e:bb:a2:7c:34:eb:
e8:98:7c:fa:fe:63:57:03:d3:e6:81:23:06:4c:57:
00:31:fc:53:31:34:4a:a6:c6:86:3a:59:30:44:4d:
6e:66:21:23:28:15:98:3c:5b:45:92:c4:36:bc:45:
de:3b:18:9b:82:39:34:b9:71:ae:2e:26:95:35:7f:
9f:8e:6b:de:ca:9e:5b:e5:13:15:bb:ee:43:84:7b:
f3:4b:71:f9:e8:17:0c:a9:ec:ee:db:bd:0b:11:19:
fe:bc:8a:d7:a0:d5:17:b8:8a:88:d7:f6:89:da:45:
d6:0d:39:3e:52:4a:eb:8b:6f:91:ce:e7:67:3f:e2:
ba:b2:8a:5d:d7:dc:44:92:94:d0:d1:bc:22:7f:11:
3d:95:27:d7:06:38:48:2d:fa:96:ac:34:d0:7c:2d:
fe:50:98:d8:84:38:1d:3c:e3:8a:95:35:7f:4d:0e:
3f:1a:be:a5:6d:d6:bf:0b:4c:99:2c:24:78:67:c8:
9c:6d:bd:64:ce:6f:68:d7:ed:00:d7:e1:de:e8:c0:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8A:D9:5C:C6:9B:15:6B:88:24:FA:56:46:11:90:53:8C:7F:FB:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/595B2DD0E2D811EFBE11C562762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:20:87:65:52:96:06:97:da:55:b5:cb:2a:ed:0c:16:6e:16:
0e:61:7b:de:26:7c:e5:20:55:4e:8f:ea:de:ed:94:7a:a8:61:
2d:a5:ac:bf:1d:3d:e2:01:c7:06:19:2a:0b:b3:69:ff:7c:21:
fc:f7:fc:7d:4a:06:ec:90:9a:53:7c:e8:57:19:39:54:e8:b2:
fe:18:4a:10:71:ef:4e:84:1e:b4:12:f0:e3:40:be:00:92:3a:
b1:74:de:10:4f:a6:0a:b5:a9:d5:2c:08:0d:6c:8f:34:34:ec:
3f:16:93:7c:98:95:46:5e:20:56:d9:91:53:98:0f:05:93:e2:
67:d3:16:f9:80:a3:e5:16:fa:c2:9e:19:e4:10:68:ca:6b:ba:
80:32:a2:bc:ad:a7:7a:4d:12:9e:a4:2b:97:7f:dd:9e:2e:f5:
e7:3c:37:c3:a4:80:97:20:a5:4d:4a:32:56:f9:d2:35:4f:94:
30:e6:0b:4f:f2:f8:d4:9b:0a:5d:fb:f1:37:28:bb:45:32:ee:
50:f8:20:bf:12:11:a4:5f:b3:9a:9d:c6:ca:4b:04:0a:f0:f7:
32:a7:89:fb:46:0e:74:61:aa:be:6c:3e:28:7a:d0:96:66:70:
77:de:91:aa:ef:f5:07:92:8a:f1:8d:bc:17:bc:16:d7:ee:f3:
f8:e0:0f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:23 2025 by rpki-client