Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B13B92ADA5211EF95375B63762E951A.roa
File: 3B13B92ADA5211EF95375B63762E951A.roa (raw, json)
Hash identifier: SySmgR9/Ele4Y32qQtCqMtSGkbnNGEp0Hd3X0jleTrA=
Subject key identifier: 52:F3:AF:C0:A6:27:85:94:B8:6F:BA:7A:42:C3:63:9B:5A:CA:36:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01471C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B13B92ADA5211EF95375B63762E951A.roa
Signing time: Fri 24 Jan 2025 12:53:39 +0000
ROA not before: Fri 24 Jan 2025 12:53:35 +0000
ROA not after: Wed 05 Mar 2025 12:53:35 +0000
asID: 44559
IP address blocks: 154.209.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83740 (0x1471c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 12:53:35 2025 GMT
Not After : Mar 5 12:53:35 2025 GMT
Subject: CN=67938d52-185c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d9:da:98:99:30:61:50:e9:51:5c:0b:8e:45:
63:5d:f2:2a:28:46:ab:da:10:5e:9a:1d:c5:99:a4:
79:52:1e:05:57:93:ca:46:67:68:cc:dd:05:a3:81:
5c:69:0b:57:35:fc:a0:19:2c:25:63:f4:4b:5a:93:
a1:1d:8b:d8:aa:51:57:05:e2:00:06:5e:20:77:e7:
cd:cd:e6:4c:72:46:74:13:7f:17:ab:30:f8:80:c9:
15:68:c1:e9:c7:69:d4:d5:77:a9:ef:44:93:00:7e:
e1:bd:f6:0b:93:15:3b:cd:29:09:4a:00:46:8f:67:
3a:29:8b:23:9b:07:ec:7c:f5:a3:4e:0e:dd:2a:4a:
b3:a3:77:99:a0:ca:f6:6a:14:d9:31:1d:c9:66:b3:
6c:f2:00:11:33:52:28:c9:b8:1c:30:b2:61:6f:68:
63:39:6c:5e:1a:aa:ae:2c:f4:4a:45:81:18:66:95:
db:66:c1:70:98:ca:84:eb:8f:ba:15:4c:97:da:b5:
cc:23:28:2d:73:f2:1c:91:77:f7:7a:1e:1f:a4:fd:
17:a9:cd:d5:e7:10:c9:a0:17:35:30:32:04:96:c5:
b8:90:f0:93:d8:1d:6d:f6:05:ce:34:0c:42:ff:d7:
c3:98:6c:6e:95:4d:06:23:39:5a:01:e5:e3:3e:16:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F3:AF:C0:A6:27:85:94:B8:6F:BA:7A:42:C3:63:9B:5A:CA:36:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B13B92ADA5211EF95375B63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.150.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9e:81:ef:56:c6:61:02:d3:f8:ed:eb:46:25:c7:b4:49:9b:
a0:79:b6:10:75:24:15:e2:d9:16:68:19:79:35:59:7a:13:a5:
c5:ca:59:e4:2f:61:5c:c5:78:e1:86:b1:57:f8:70:a0:f7:83:
ad:43:68:96:eb:31:61:8e:b5:33:5d:fd:50:b6:a8:34:e1:ca:
99:4d:f4:81:34:96:79:fa:06:cc:49:56:90:69:bc:5e:c5:76:
40:78:7a:92:c3:12:11:10:40:d5:f7:0d:03:c7:fc:36:0d:c8:
c8:24:37:5b:2e:50:e5:d0:35:4f:6a:41:33:c9:8d:5d:40:99:
0c:ca:b6:82:c3:f1:25:70:23:45:6a:86:b2:75:ad:b4:db:87:
e4:6b:a1:3b:32:99:0d:51:64:79:02:11:90:aa:ea:ef:b9:55:
01:c4:6a:1c:25:5b:c0:52:13:3d:f6:23:e9:2b:65:ff:82:cf:
9b:a1:31:55:e1:e8:73:23:05:3c:2a:c0:c6:e5:de:3a:a4:7a:
12:b9:93:83:15:28:b8:ae:e4:d1:5f:43:fc:97:51:94:3c:17:
f1:ba:d5:22:05:d3:4c:44:0d:43:30:86:5b:00:11:ff:a3:6f:
34:a6:b8:13:b1:f5:86:8a:a7:d5:36:35:0a:e4:ed:d8:ce:df:
40:3b:84:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:07:35 2025 by rpki-client