Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA0B5BCC35C11EF998D886A762E951A.roa
File: AEA0B5BCC35C11EF998D886A762E951A.roa (raw, json)
Hash identifier: ZTEiYoIBp7uSyUBtTYmID6DYYlXnXS1IA8dLFnnGpnw=
Subject key identifier: 46:63:6C:ED:F5:3E:1B:A8:60:5E:1D:2D:C9:33:EE:0C:16:0F:07:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA0B5BCC35C11EF998D886A762E951A.roa
Signing time: Thu 26 Dec 2024 07:40:31 +0000
ROA not before: Thu 26 Dec 2024 07:40:27 +0000
ROA not after: Sun 12 Dec 2027 07:40:27 +0000
asID: 17561
IP address blocks: 154.88.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75261 (0x125fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:40:27 2024 GMT
Not After : Dec 12 07:40:27 2027 GMT
Subject: CN=676d086e-b0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0d:9d:38:09:47:a6:66:50:61:2b:15:6b:9c:
17:05:46:20:18:8d:66:40:86:a1:02:e8:d8:06:8e:
d4:83:2b:4d:e5:a2:12:38:2f:d2:9e:60:dd:02:7e:
10:71:60:a1:3f:8e:d2:f2:84:55:6a:ae:aa:38:f1:
c2:df:53:15:4e:0e:b4:bc:f3:42:1a:90:3d:12:ac:
b2:0c:63:5b:d5:a8:91:1c:aa:d9:f0:f3:e3:eb:1d:
6a:a6:66:d2:df:e8:90:26:05:37:af:60:84:f7:de:
8f:31:df:2a:7a:33:3d:09:77:ed:7b:f7:d7:1c:93:
e2:da:3d:26:0a:fa:97:2b:7e:d5:79:b6:e4:ac:be:
d9:8e:86:ce:75:72:91:ca:24:17:8a:c5:8c:b9:56:
79:64:00:b8:3f:91:06:52:b2:0f:0f:7d:9d:f1:d3:
4a:fb:2a:dc:8b:d1:23:a3:18:5d:6f:56:89:df:fb:
c8:c0:61:ba:65:0d:4e:a4:1b:50:6d:ab:c1:96:4a:
63:97:87:eb:8e:10:ce:a0:e4:e4:93:52:2f:00:fa:
96:fb:3f:10:53:8c:13:0b:bf:ee:19:76:92:10:12:
f3:e2:2a:a5:c4:c4:14:36:fa:53:23:cf:af:3d:3d:
72:14:4b:48:98:b8:8e:7d:33:aa:81:c1:7b:04:01:
ca:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:63:6C:ED:F5:3E:1B:A8:60:5E:1D:2D:C9:33:EE:0C:16:0F:07:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA0B5BCC35C11EF998D886A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b8:82:7e:5a:af:72:61:e8:ec:2d:17:a7:b3:9b:70:3d:82:
f2:cc:1d:53:04:12:89:b3:8e:6a:ae:d8:a9:ba:16:8a:da:ef:
91:d9:64:f5:af:c7:84:52:d6:e3:af:dc:38:b5:60:b6:c3:07:
91:da:36:59:01:95:51:7e:bc:30:24:f9:c4:61:90:cc:38:68:
98:52:a7:ae:d0:a1:2e:4e:a6:92:98:a6:eb:94:fd:23:56:29:
97:a0:ee:6e:3c:5a:ee:21:cc:14:b2:64:a9:e3:c0:a0:b5:74:
81:49:af:c6:2e:44:f4:2b:e7:2f:82:65:9f:ab:da:a3:3c:72:
6c:f8:59:11:c4:4f:61:17:d2:5e:ef:5e:8a:65:f0:d7:6d:45:
5e:6a:7e:79:62:9a:c1:65:54:92:e7:53:a9:d8:dd:fe:a2:7c:
63:e4:43:a1:40:8e:a8:9b:49:ff:e5:b2:28:86:5c:2f:36:df:
11:32:58:74:35:36:5f:e0:24:cb:ba:e3:aa:fa:ec:bb:4a:2f:
7a:89:b6:c8:06:51:b6:96:43:aa:46:b5:cb:f4:85:5e:5e:e5:
86:10:a3:6d:db:c2:e6:77:21:e5:20:92:bf:82:c0:84:09:e9:
02:be:a4:88:84:55:c8:6e:6f:bc:06:9a:8b:11:0c:cb:02:ad:
77:ef:14:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:04 2025 by rpki-client