Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39CBF920DC9F11EF90CB1A6B762E951A.roa
File: 39CBF920DC9F11EF90CB1A6B762E951A.roa (raw, json)
Hash identifier: tOzGfbcbASLcswaK5rtHeKnJj1KsbX6cIGhsrRNCGQA=
Subject key identifier: DD:9A:9E:35:BC:EE:63:34:83:5D:B6:F4:D3:20:3B:96:A7:45:3C:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39CBF920DC9F11EF90CB1A6B762E951A.roa
Signing time: Mon 27 Jan 2025 11:09:50 +0000
ROA not before: Mon 27 Jan 2025 11:09:40 +0000
ROA not after: Sat 08 Feb 2025 11:09:40 +0000
asID: 22773
IP address blocks: 154.90.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84937 (0x14bc9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:09:40 2025 GMT
Not After : Feb 8 11:09:40 2025 GMT
Subject: CN=6797697e-ce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:16:8b:50:0f:5c:2c:9f:af:3d:77:38:0a:3e:
4f:eb:c8:65:2b:bc:c2:2d:e4:d3:6b:bc:56:5f:65:
df:45:1b:83:7b:33:81:70:58:01:11:fa:33:7c:29:
fd:4d:e4:d2:91:64:8f:f1:46:87:8c:4b:8e:8e:34:
c7:af:4d:5b:cc:36:c5:36:53:e2:31:67:27:4d:29:
1e:80:cb:aa:ee:43:28:e7:6e:1c:b2:f4:a8:61:83:
c2:b0:a4:c6:16:78:84:ac:37:eb:42:21:6b:23:56:
57:f3:df:64:97:40:dd:8e:53:29:46:80:28:43:fc:
8c:93:6d:0b:96:c9:7a:39:77:e4:4c:c6:fc:1d:ad:
18:e4:d5:a1:a5:73:8f:c5:98:d5:ed:42:8b:53:3d:
26:6d:ff:43:da:17:47:73:17:3d:50:8c:47:e2:60:
56:0d:8d:98:36:da:41:69:d8:85:9f:fc:fc:8b:65:
cf:8b:b8:5a:19:8c:51:87:c7:97:fe:9b:fc:1c:1f:
8e:26:65:25:9b:64:35:1c:d4:ed:74:28:c7:35:4d:
fc:03:05:43:76:58:40:8e:bb:e4:19:c4:0a:b0:5a:
7d:b2:b8:42:b6:c2:b0:cb:a2:86:a6:93:f4:a0:ba:
14:d9:ea:32:be:c9:71:61:48:1c:67:0a:42:0a:d6:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:9E:35:BC:EE:63:34:83:5D:B6:F4:D3:20:3B:96:A7:45:3C:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39CBF920DC9F11EF90CB1A6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:12:73:93:4c:01:65:f6:d0:9b:8a:4c:1a:50:d0:2d:07:b2:
71:d7:ac:8b:8e:73:0f:67:bf:ea:1d:3c:4b:36:70:64:dd:6a:
c4:84:d0:b9:65:d6:61:4a:28:33:43:88:39:53:a8:f3:d6:f6:
7b:28:a6:f6:b7:5a:99:00:0f:bf:d3:c9:06:17:a1:15:2c:8a:
48:ca:76:fa:43:ba:12:7c:b5:66:6f:93:a5:ce:20:19:83:08:
84:1d:35:ea:52:5d:be:54:7b:6e:72:7c:83:81:44:0c:a0:ac:
29:9b:2c:29:68:49:af:8c:bb:ba:e3:fd:a3:e6:78:a2:a2:2e:
80:ef:39:21:dc:56:c1:49:5a:b5:3e:51:a1:1f:f3:d8:cc:f7:
da:ee:cd:0b:6b:b5:e4:65:af:5c:cf:4a:fb:68:ea:48:e7:0c:
bb:54:3e:16:14:c9:f8:09:18:6d:f5:85:06:0a:f1:26:c1:1d:
69:66:97:e1:80:25:d3:16:3a:ae:7a:11:f4:dd:0d:a5:5b:1b:
7b:87:12:92:cb:23:49:fe:8c:84:08:68:dd:e1:db:40:65:5f:
4d:33:9b:a5:8b:8d:9e:3c:d8:f1:f5:83:83:d7:27:8f:ab:16:
14:dd:fa:8e:56:29:26:b8:87:f2:6f:06:e9:5c:66:a5:41:81:
58:66:4f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:25:15 2025 by rpki-client