Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3574AC3CC9CB11EFA67DD353762E951A.roa
File: 3574AC3CC9CB11EFA67DD353762E951A.roa (raw, json)
Hash identifier: opM9qD2zSgYPv//Xjc1FoGH9IeeSBkBZTry+2lPtb6Y=
Subject key identifier: E2:9F:29:0F:FF:92:97:FF:39:F3:E6:AD:12:DD:98:47:CD:3A:69:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134CC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3574AC3CC9CB11EFA67DD353762E951A.roa
Signing time: Fri 03 Jan 2025 12:06:49 +0000
ROA not before: Fri 03 Jan 2025 12:06:45 +0000
ROA not after: Tue 04 Feb 2025 12:06:45 +0000
asID: 203020
IP address blocks: 154.207.240.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79052 (0x134cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 12:06:45 2025 GMT
Not After : Feb 4 12:06:45 2025 GMT
Subject: CN=6777d2d9-0660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:6b:22:fd:fe:08:f6:ac:78:d0:0b:68:d0:
a1:87:17:f2:e9:07:aa:d1:da:9d:fc:5e:87:98:b9:
ff:78:77:4e:54:4c:09:12:25:09:39:5d:86:9b:ef:
25:98:e8:e7:fb:0a:89:17:1b:82:a0:30:d4:1e:85:
3f:e3:e6:7b:bb:33:45:96:59:53:93:9f:c6:b6:bc:
a1:5c:58:91:fc:11:80:c1:62:09:9c:bd:0a:39:1e:
31:50:57:d1:5f:96:b6:7b:80:4e:a3:e7:10:b5:eb:
34:00:aa:b2:a6:e3:8d:66:6e:72:2f:d3:9b:56:33:
0c:7b:3b:64:c9:0f:44:d0:a4:ed:97:4d:cd:03:b1:
03:cb:df:27:6c:63:9b:7a:b5:1e:41:2c:64:2f:77:
8c:8d:d6:9e:0a:af:78:c6:0a:0c:dd:cc:89:d5:f0:
c4:36:f1:56:5b:86:cd:f5:84:13:c2:c0:38:16:9f:
95:20:bd:1f:8a:d3:fd:19:3f:c6:ba:0f:88:9e:b0:
2a:31:21:b3:0f:63:9c:2d:42:96:3d:b2:90:03:ce:
76:84:74:b5:98:b3:b5:c8:c2:fe:85:1d:d6:77:53:
a7:db:da:9f:53:08:1f:da:3f:df:35:37:5e:99:b7:
bb:ae:b7:a0:2c:ce:fb:7a:ec:14:ed:27:f3:ad:0e:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9F:29:0F:FF:92:97:FF:39:F3:E6:AD:12:DD:98:47:CD:3A:69:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3574AC3CC9CB11EFA67DD353762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.240.0/21
Signature Algorithm: sha256WithRSAEncryption
16:5c:17:90:a7:cf:a3:b6:e1:85:5d:1e:49:44:99:79:58:65:
43:23:68:38:eb:57:52:ed:73:a4:ad:5d:37:65:8d:b9:72:05:
23:51:50:4e:12:8a:dc:9b:6b:20:7b:ba:97:13:46:c5:a9:88:
4d:0e:51:f7:f9:81:4e:a4:78:3c:17:98:81:af:90:be:37:e6:
6b:0e:db:1a:bd:ee:d8:6f:cf:62:87:54:77:79:21:ad:26:12:
e6:e8:f5:71:54:99:91:58:3d:8f:d9:77:cd:79:8e:5d:00:1a:
66:44:cf:f4:29:a5:53:de:74:b3:53:b4:a5:90:b3:a8:fc:e2:
9f:93:e7:ff:31:cc:26:1d:bd:64:27:fe:94:2c:18:44:5b:93:
6c:b8:bc:92:ce:dd:b4:e0:9b:c0:15:fc:25:07:54:38:df:80:
d0:55:d7:8d:bc:e5:07:5b:8b:d9:cb:65:4c:2c:fa:7a:c0:22:
b6:2a:1a:27:ff:dc:ae:2c:a8:55:ed:cb:51:8c:ba:2d:4e:01:
56:28:d1:56:53:39:df:c9:4f:84:ee:7b:65:e4:90:9f:4d:61:
3b:77:52:f0:40:b8:75:48:e3:6d:46:9b:2a:0d:91:fe:3f:99:
5f:b9:1a:e4:bf:f7:15:29:35:d1:3c:46:cd:fd:ce:40:5d:63:
a0:4e:12:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:28:56 2025 by rpki-client