Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A05EBF2AC25911EF89BBA76B762E951A.roa
File: A05EBF2AC25911EF89BBA76B762E951A.roa (raw, json)
Hash identifier: jxqgBMW0mYh6AlIxVVW3TQhlWkyjskn+vL8iLno8jos=
Subject key identifier: AB:65:FC:F0:04:9E:9B:34:A2:4A:A0:FB:99:7F:31:D4:6B:ED:74:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01235B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A05EBF2AC25911EF89BBA76B762E951A.roa
Signing time: Wed 25 Dec 2024 00:46:07 +0000
ROA not before: Wed 25 Dec 2024 00:00:03 +0000
ROA not after: Wed 10 Dec 2025 00:00:03 +0000
asID: 984
IP address blocks: 154.199.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74587 (0x1235b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:03 2024 GMT
Not After : Dec 10 00:00:03 2025 GMT
Subject: CN=676b55cf-f0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:b7:b7:6e:c6:f3:8a:a9:75:6c:80:5d:52:
d0:1d:7b:8c:d0:cf:be:e0:fe:97:5f:2e:6e:e3:71:
82:fe:f9:6f:9d:b0:c9:a9:96:5a:3c:a5:e6:65:5e:
43:a3:d3:47:64:66:af:ec:b5:4f:42:c0:04:61:af:
fc:6a:32:a8:b4:44:be:2c:b8:0c:63:f7:43:1a:69:
17:ff:cf:71:4c:ae:7b:7f:fa:d1:f3:05:5d:dd:1d:
c9:4c:37:08:93:1c:8e:8a:86:18:0b:5f:3e:8e:09:
2d:fe:40:bc:88:15:a5:b0:6d:4d:1c:e7:8a:6d:e8:
1c:24:f8:4b:e5:66:98:c1:55:bb:12:4f:6c:8b:c0:
20:d2:1d:c8:17:d1:d6:c4:80:1f:43:ed:0e:4b:88:
f9:9b:23:33:3e:49:75:39:c4:bb:80:0c:21:89:42:
9e:62:02:e4:14:af:8b:a3:e2:f0:c6:b8:8a:5b:ab:
0e:2f:a7:60:a1:e9:d1:9c:a9:6a:67:a3:2c:05:a8:
c0:a7:46:66:fe:c4:d4:d7:d7:c1:d7:a3:48:af:96:
b7:40:b0:13:f7:a0:b5:37:21:1d:64:2f:19:54:8e:
cf:eb:11:78:6a:2b:66:9f:68:19:37:88:b1:1f:df:
33:26:a3:23:0a:a0:7a:7f:95:79:33:19:98:8e:2c:
3c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:65:FC:F0:04:9E:9B:34:A2:4A:A0:FB:99:7F:31:D4:6B:ED:74:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A05EBF2AC25911EF89BBA76B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.59.0/24
Signature Algorithm: sha256WithRSAEncryption
67:99:23:31:22:16:51:94:66:ea:5c:85:f6:54:73:a7:03:37:
16:f7:2a:d6:31:37:62:93:4a:22:36:c5:22:13:9c:64:d6:15:
7b:89:63:3a:6c:ea:9e:9e:0f:c2:45:81:d0:ef:a4:e4:64:b0:
6e:ff:38:97:82:4f:8e:9d:04:c0:26:6f:81:9b:3b:e7:3e:73:
4b:ad:2e:8e:61:19:85:23:95:80:19:6d:57:9f:ef:bf:fb:be:
b2:c4:22:53:91:a3:ea:6c:6e:61:61:68:c3:4d:3d:c7:c1:a1:
6b:3e:f5:4c:76:b5:97:17:d3:24:c7:54:f9:a4:18:b2:3d:1f:
cf:e5:8a:9a:7a:c3:f4:51:43:82:79:06:2e:5a:1a:87:2e:ea:
10:2d:ee:50:54:57:65:e4:47:4a:d8:29:8e:cc:b2:8a:db:5b:
8e:36:4a:5c:1c:e1:00:ce:22:2d:8f:d2:7d:16:0c:48:4c:13:
e2:d4:df:a8:58:e8:34:8e:f4:d9:75:e3:98:56:b7:4c:e4:c3:
29:c7:6b:65:a4:0d:57:62:27:db:15:2f:f0:d9:3f:ef:5b:cd:
f2:7c:a1:e0:6d:a8:05:03:39:d1:9a:19:7b:20:84:9d:c8:7f:
77:7e:54:e1:f3:bf:bb:73:65:1a:99:0c:b1:d1:4e:03:ec:65:
e1:5e:90:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:23 2025 by rpki-client