Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B9B3F34CF2211EF9C11CD4F762E951A.roa
File: 3B9B3F34CF2211EF9C11CD4F762E951A.roa (raw, json)
Hash identifier: ddzz3s2d0jCKReZI6CbV1GBn6y6lmHKIZsthuWwpHtI=
Subject key identifier: 06:72:B8:4B:CE:E7:11:4B:21:69:E2:3B:55:C9:5B:B3:5E:3B:1D:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01399F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B9B3F34CF2211EF9C11CD4F762E951A.roa
Signing time: Fri 10 Jan 2025 07:12:21 +0000
ROA not before: Fri 10 Jan 2025 07:12:17 +0000
ROA not after: Fri 14 Feb 2025 07:12:17 +0000
asID: 203020
IP address blocks: 154.203.32.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80287 (0x1399f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 10 07:12:17 2025 GMT
Not After : Feb 14 07:12:17 2025 GMT
Subject: CN=6780c855-d586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:2c:7f:c6:f7:7a:c7:ba:30:97:d6:90:d6:
d0:81:5a:e6:f2:c7:78:9e:07:61:d1:96:10:5d:42:
8d:b6:ba:29:88:e2:c8:e8:d0:97:83:62:73:e4:45:
3c:f3:e5:6d:6e:42:8c:2a:7b:01:5b:9e:98:55:ff:
8c:03:95:11:14:59:c9:bb:35:39:ee:25:8a:c2:1f:
04:cc:d8:f1:f8:b1:d0:29:90:66:25:73:c2:c4:54:
97:d0:cf:66:f1:5e:15:32:99:62:98:f6:d7:56:78:
bd:cc:0d:ce:37:fc:0d:a5:ba:6a:c8:a3:fe:bb:09:
a6:2b:5d:9b:60:0a:e2:78:60:d0:6a:bd:b9:d3:7c:
72:cd:a1:f7:e9:aa:c1:67:18:79:53:75:8e:ac:dd:
f2:64:47:81:ce:8d:fa:a9:3c:b3:91:72:cd:de:23:
ad:b1:75:14:05:5d:72:b8:8f:05:3b:cc:52:a0:12:
f9:3b:16:41:c7:3f:31:a1:23:17:b0:bb:dd:28:cb:
28:0d:9e:78:65:f7:62:72:56:b9:55:ac:0c:b9:76:
21:74:d1:b0:5b:ce:02:4d:ba:2a:d5:c9:d6:cc:85:
30:eb:b4:81:c6:90:3a:c4:f8:86:68:1b:9c:92:6f:
ea:7b:41:4a:2a:22:1e:e4:ac:c7:52:8e:d4:7f:61:
99:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:72:B8:4B:CE:E7:11:4B:21:69:E2:3B:55:C9:5B:B3:5E:3B:1D:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B9B3F34CF2211EF9C11CD4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.32.0/21
Signature Algorithm: sha256WithRSAEncryption
17:19:20:86:5b:79:58:76:e8:92:f8:41:72:5b:a1:bb:6f:41:
33:76:73:41:3c:8c:1a:a7:94:38:2c:c8:a2:04:e6:49:e5:d9:
21:ca:0e:1e:9b:43:68:9d:aa:60:59:92:8a:49:75:09:71:32:
fa:89:3c:1c:b8:5e:8f:f6:06:69:00:3d:73:5b:1a:fa:38:bb:
56:5a:15:55:7f:02:0a:5e:45:84:5f:20:5b:74:43:28:9b:96:
e3:18:63:b8:ca:3c:a2:ef:27:9b:ef:83:c4:33:ad:21:19:13:
6d:e1:8a:45:e8:e4:ed:74:c8:29:b5:da:90:74:02:d1:f8:96:
bf:a6:c7:83:76:ad:1a:66:ec:de:66:81:23:8f:55:89:42:c5:
fa:98:5a:fc:00:cd:6e:5f:4c:3e:2d:55:ec:a3:7e:ea:d7:5d:
bb:b0:a1:8f:20:92:9d:da:1f:24:88:51:bd:03:e0:c8:f6:7f:
a9:5b:8d:f7:09:24:01:a3:08:5f:d1:c5:57:aa:c9:61:58:e4:
6c:ac:47:f9:93:eb:23:a9:19:78:78:27:78:95:f1:46:4a:b6:
0a:ae:2d:61:79:8d:bb:c7:3d:b6:30:4f:99:50:db:43:db:83:
ff:d7:51:c8:24:40:46:1f:c2:d7:a0:17:93:1e:a4:2f:e8:43:
f7:d6:8c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:36:48 2025 by rpki-client