Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339200EED97111EF8E9A8275762E951A.roa
File: 339200EED97111EF8E9A8275762E951A.roa (raw, json)
Hash identifier: vA4nqFie20j4uR4ZKBIAVOatbOnVeRI8vj8pJXDyC3Y=
Subject key identifier: 49:84:C7:8D:EB:E5:27:CD:09:9B:D6:28:A8:1E:76:1D:2B:86:D6:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01410E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339200EED97111EF8E9A8275762E951A.roa
Signing time: Thu 23 Jan 2025 10:02:49 +0000
ROA not before: Thu 23 Jan 2025 10:02:46 +0000
ROA not after: Fri 28 Feb 2025 10:02:46 +0000
asID: 62240
IP address blocks: 154.194.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82190 (0x1410e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 10:02:46 2025 GMT
Not After : Feb 28 10:02:46 2025 GMT
Subject: CN=679213c9-a9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6b:c6:bd:ba:2a:f0:c7:d8:32:23:ab:d9:7b:
e6:ae:ed:0b:4a:95:a1:a7:99:3b:00:da:a1:35:03:
8d:97:91:39:44:1e:12:6c:d9:17:22:06:3f:9d:7a:
42:75:31:2e:70:e3:41:b9:f0:9c:03:ca:d0:d7:5a:
5c:92:72:24:a4:12:9e:90:7d:d6:c5:ca:80:26:4c:
fc:fa:f3:f2:b7:6a:fa:d0:73:56:56:c6:20:5d:7f:
11:b7:66:c0:21:10:6f:d3:95:99:35:6e:2a:07:e6:
62:f6:1d:59:66:8b:be:23:19:14:7b:df:a9:3d:2c:
c2:7b:23:51:14:f2:fb:7a:78:c1:61:89:95:86:b7:
02:44:b6:51:ba:3c:7b:32:95:d5:c8:e3:40:f9:ac:
b4:93:59:38:a8:a6:d7:84:ea:89:59:be:2b:ff:56:
90:72:ac:a9:3a:0a:8c:50:ee:41:aa:57:0e:e5:b2:
84:2a:8b:a1:17:6b:25:50:12:00:d3:78:7a:b5:ad:
fe:a8:f0:08:4f:9e:9e:bd:cf:88:86:24:7d:f9:1c:
54:d1:dd:4a:33:6c:cf:03:f8:fb:1f:86:95:44:9f:
32:5f:da:a6:4d:7e:73:f8:3a:0c:48:ba:3b:29:65:
57:49:7a:16:70:07:4c:2f:3e:38:ab:58:e5:bd:33:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:84:C7:8D:EB:E5:27:CD:09:9B:D6:28:A8:1E:76:1D:2B:86:D6:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/339200EED97111EF8E9A8275762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.38.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4f:ea:bd:0b:35:7b:29:2b:a0:4a:12:dd:29:40:32:e3:0e:
29:2e:41:37:60:ff:78:31:0e:47:2b:7d:6a:bc:a2:90:35:71:
d9:b6:8c:f4:75:da:75:18:b9:7e:69:c8:08:f2:ae:bf:1d:28:
a3:77:22:6e:a3:50:30:ef:34:5b:58:a4:08:01:a5:04:f6:03:
06:9a:9e:7d:c0:20:47:0e:01:8c:49:99:aa:79:b7:fd:bf:2a:
f8:10:25:e0:ff:68:1d:d4:ca:c5:1a:1f:3f:3e:05:f2:9a:b0:
ec:16:fb:07:1c:05:03:c2:a3:4b:91:81:a9:04:ed:66:cd:52:
ce:12:d3:58:1f:39:e8:01:27:18:36:03:48:6a:5e:e4:42:a2:
b8:32:c2:7b:41:77:f3:df:40:e9:04:07:4b:60:80:58:95:d5:
44:93:cc:6e:3d:85:e2:27:a1:e6:47:71:cc:32:78:8a:65:75:
a2:de:74:33:bb:2b:7d:4a:89:d7:af:d1:f2:42:5b:96:69:50:
70:ac:a5:f6:ce:b4:50:89:84:d0:b2:36:e2:db:68:fc:8d:7e:
bc:b4:a2:c1:bd:f1:d8:f3:8e:0e:f5:3a:8a:e4:e3:82:30:8d:
a2:fa:17:fc:93:22:66:d4:e2:87:ee:82:58:ea:40:cd:3b:4f:
f9:ed:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:10 2025 by rpki-client