Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59A94CAEC26C11EFBE1C8E76762E951A.roa
File: 59A94CAEC26C11EFBE1C8E76762E951A.roa (raw, json)
Hash identifier: Jw3LvaXoUXsVS41atljpzMuBhz6mzHX3g06sbhSGbxY=
Subject key identifier: 84:51:50:A6:81:AF:0C:D1:C5:34:C9:B6:F2:B9:37:B8:7E:CE:29:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012430
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59A94CAEC26C11EFBE1C8E76762E951A.roa
Signing time: Wed 25 Dec 2024 03:00:09 +0000
ROA not before: Wed 25 Dec 2024 03:00:05 +0000
ROA not after: Wed 10 Dec 2025 03:00:05 +0000
asID: 984
IP address blocks: 154.211.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74800 (0x12430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 03:00:05 2024 GMT
Not After : Dec 10 03:00:05 2025 GMT
Subject: CN=676b7539-1b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:51:b7:aa:e4:a5:d8:2f:51:60:f8:55:57:2c:
29:c2:02:9c:80:8b:bb:75:00:95:a5:18:45:19:4c:
29:aa:69:d8:e1:04:3e:35:a5:8a:31:85:a1:5f:9d:
cb:b5:4f:b1:0b:e5:0d:09:1b:e8:a1:80:6d:49:44:
29:50:e9:21:38:41:8f:4f:d0:c9:0f:f2:74:17:0f:
55:e6:a8:99:6f:27:70:70:b4:39:e7:ca:fa:ec:df:
35:80:bd:39:78:3c:6d:fc:1e:69:dc:72:cc:35:04:
17:3d:87:74:bc:59:00:e5:68:fa:96:88:a6:a9:d1:
b4:80:2a:47:9f:d2:c5:48:94:30:e4:d7:e0:b5:ca:
de:bd:ef:ef:f1:88:35:04:e5:3d:77:b1:da:a6:58:
12:f1:bf:bc:2a:fd:a0:a3:56:ee:11:26:e8:b6:d7:
8b:b6:2b:73:e3:6d:4a:19:b1:33:ce:15:af:37:be:
98:5f:ff:c1:a4:54:18:30:f0:eb:99:a6:95:7b:8f:
18:bb:25:f2:55:c3:51:3d:c2:81:3d:74:22:31:d9:
fd:fa:87:25:eb:5b:a8:76:47:b2:98:06:cf:2e:f3:
d3:ea:d8:9e:7d:93:41:f3:2a:4f:40:51:38:cc:c5:
bb:09:25:dc:6e:87:0a:65:cb:8d:d6:c8:28:dd:d0:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:51:50:A6:81:AF:0C:D1:C5:34:C9:B6:F2:B9:37:B8:7E:CE:29:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59A94CAEC26C11EFBE1C8E76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.164.0/24
Signature Algorithm: sha256WithRSAEncryption
12:9b:6b:a4:04:e8:6f:29:78:64:da:43:93:cd:9b:23:53:26:
05:73:18:62:ca:78:ac:bf:15:12:2f:6d:99:2b:ca:17:0e:a4:
ff:38:ed:a0:04:42:c2:77:03:d7:ac:63:23:f1:77:d4:9b:d3:
a8:01:41:9f:df:6c:72:e5:3f:ec:d7:44:c0:6e:13:0e:28:63:
73:ac:ed:3d:ae:90:41:5a:34:0a:44:55:e6:c2:30:a4:57:87:
2a:f9:4c:5c:a3:d9:c0:24:07:89:b7:4c:a9:2f:5a:cc:68:a2:
44:a4:fb:95:a3:6b:31:b6:00:0d:fc:12:2d:dc:79:39:d6:ee:
ba:ae:c1:9f:75:b4:51:05:3a:1b:4b:bf:bd:db:2d:15:3a:d0:
08:44:89:ce:f8:82:ba:b3:3a:b5:b0:59:85:21:b1:cf:da:3c:
bb:dc:c1:6d:b5:cc:18:f0:d1:87:4b:a4:16:e0:88:82:f3:a8:
73:5b:04:bc:76:ce:ae:21:c0:23:7e:a3:0b:1b:35:f3:23:82:
bc:db:42:d0:ba:4c:91:68:1e:ee:67:7c:a2:c9:50:65:97:d5:
73:a5:ec:89:7d:5b:3f:d9:9f:b5:b3:e8:5a:f1:34:5a:d8:09:
5a:97:a0:f7:45:f9:32:2a:e9:23:4b:e8:e0:d7:66:bd:8a:f3:
87:4c:f1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:23:06 2025 by rpki-client