Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AC08EC8D9D811EF8B90FE9C762E951A.roa
File: 3AC08EC8D9D811EF8B90FE9C762E951A.roa (raw, json)
Hash identifier: HXNNftcLgmrLn2k2wd5H6lWXFJd0rgNw/hXL9IdB+H8=
Subject key identifier: F5:BF:C6:10:6C:6F:16:BC:EB:23:55:FB:1B:17:8C:87:67:90:D8:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014345
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AC08EC8D9D811EF8B90FE9C762E951A.roa
Signing time: Thu 23 Jan 2025 22:20:19 +0000
ROA not before: Fri 24 Jan 2025 22:20:15 +0000
ROA not after: Sat 01 Mar 2025 22:20:15 +0000
asID: 44559
IP address blocks: 154.205.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82757 (0x14345)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:20:15 2025 GMT
Not After : Mar 1 22:20:15 2025 GMT
Subject: CN=6792c0a3-7247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e6:6d:2a:87:f9:57:cc:76:d8:4e:a5:3e:33:
9f:dd:51:05:8c:26:11:ea:f0:df:3d:08:20:a2:88:
3c:5f:57:cf:5d:98:0f:42:db:59:f5:31:dc:a9:c9:
8d:05:3b:38:39:3d:04:83:8d:6c:54:70:ba:40:24:
f2:2a:2e:11:e4:c1:d0:71:ef:2c:fc:46:14:6c:2e:
3d:de:bc:de:d0:57:00:a3:85:f5:5e:02:76:42:c4:
04:6a:e0:ce:ae:ca:44:10:3a:ef:cd:b7:d9:74:50:
80:a0:09:9f:28:12:13:a5:10:82:68:23:12:c9:ab:
5a:1c:94:c8:c3:5e:32:e7:d9:66:76:cd:04:27:bf:
8c:2b:be:01:7b:fb:ba:56:fe:48:e9:b4:69:01:5f:
a3:bc:6a:20:17:50:e4:b7:94:c2:3e:01:01:1e:f8:
5e:30:fd:28:03:76:89:cb:ac:76:95:81:38:c5:56:
43:a0:78:5d:06:8c:17:ad:4c:1c:19:ac:4c:d1:ef:
fe:aa:b8:20:cc:64:cf:2e:27:40:9a:95:29:d6:da:
82:58:78:76:c5:09:c9:82:de:48:f8:fd:0e:76:6a:
8d:ba:37:ed:9b:87:ee:41:01:51:f8:5d:97:75:d6:
56:95:06:a8:ef:d5:96:3b:b3:6e:8c:a0:5c:66:e7:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:C6:10:6C:6F:16:BC:EB:23:55:FB:1B:17:8C:87:67:90:D8:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3AC08EC8D9D811EF8B90FE9C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.233.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e5:6a:34:38:59:e0:31:b1:c3:13:0f:7d:22:52:87:1c:f1:
0e:ac:58:50:11:bd:52:4a:d6:9d:60:53:86:cc:11:1f:39:c7:
97:a4:7c:5c:ce:96:04:ac:a0:0c:61:ca:2b:36:a9:42:8f:f1:
cc:52:e4:7c:78:bc:9a:bc:6b:05:62:23:75:5c:d7:c6:e5:9c:
b9:62:0c:29:95:b3:87:81:ab:d1:85:58:55:5c:13:00:a9:50:
5f:0d:7b:97:46:bc:b3:74:32:ec:95:0d:3f:14:c7:d9:0f:23:
5e:25:81:09:93:5f:cb:f9:22:d9:61:9f:7c:8e:dc:fb:09:26:
70:e6:f4:d0:cb:45:77:0c:a2:3b:8d:82:18:f3:06:83:de:e1:
30:c3:a4:a7:f0:06:70:07:0f:df:8e:39:2a:0d:78:60:d8:0d:
8d:83:50:20:89:fa:6c:57:f7:38:f6:fb:98:18:ba:d2:aa:cd:
c7:10:a6:ca:04:a5:61:f5:52:5a:f7:b9:4d:16:f5:f2:0f:e5:
a4:3c:c2:d4:13:bd:1f:79:9a:79:4b:62:82:8c:2d:c9:e7:39:
86:9e:7f:6d:32:16:2f:08:b1:a8:61:d1:d6:d6:28:9d:69:eb:
62:82:2d:90:26:37:bb:ea:7b:6a:4e:96:fc:28:42:37:3e:1f:
a1:4a:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:58:45 2025 by rpki-client