Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFF3EFCDCCD11EFB6FEAA9D762E951A.roa
File: 3DFF3EFCDCCD11EFB6FEAA9D762E951A.roa (raw, json)
Hash identifier: 4dEDXqjxDeHzt1vfoJq6dZztwq//V9WSvkm4LXq+s84=
Subject key identifier: 92:AA:0C:56:51:02:47:0C:20:1B:7F:0E:F7:92:5B:ED:14:6C:A9:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014C81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFF3EFCDCCD11EFB6FEAA9D762E951A.roa
Signing time: Mon 27 Jan 2025 16:39:14 +0000
ROA not before: Mon 27 Jan 2025 16:39:10 +0000
ROA not after: Wed 12 Feb 2025 16:39:10 +0000
asID: 135097
IP address blocks: 154.212.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85121 (0x14c81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 16:39:10 2025 GMT
Not After : Feb 12 16:39:10 2025 GMT
Subject: CN=6797b6b2-a67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:b5:11:95:f5:12:5a:2d:eb:6b:b4:ab:3c:
a0:20:ca:74:c8:bd:31:f7:40:ad:eb:67:35:de:f7:
f0:01:1e:d2:85:c1:e4:c1:b6:e3:08:63:8f:c3:c6:
ea:8d:a2:93:dc:8c:23:67:c0:eb:5d:2e:46:10:07:
89:c7:34:29:4d:9f:1f:63:ed:45:37:d9:be:d8:e0:
85:a2:0f:0f:14:5c:75:ac:5b:2a:ac:b4:de:f3:ce:
bd:4e:f5:e3:ef:c6:2c:3d:b9:03:6e:92:58:4f:59:
74:c1:17:ce:84:a3:5c:65:0b:46:b3:23:4d:59:21:
66:a3:d1:b4:4d:13:0f:9b:00:c6:65:8e:0b:3e:5e:
92:02:e5:cf:b8:24:31:fb:32:02:7d:4e:b8:ba:b6:
4b:9e:e4:13:23:ab:1c:23:2c:cc:4a:ee:ae:69:98:
be:68:74:3b:45:44:d0:05:26:78:84:6b:9c:54:97:
fe:7e:40:f5:11:b3:6a:94:5b:18:87:3d:57:aa:b2:
5b:95:13:2c:30:18:80:c8:50:f3:34:f0:2f:4b:4f:
97:55:a4:73:8e:aa:9d:0c:98:5c:af:3d:c9:b7:02:
b0:4b:3a:43:37:b5:fd:3b:d7:63:02:0e:01:4a:85:
24:05:4a:6d:62:07:a6:89:6b:39:5a:df:da:6f:a4:
5b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:0C:56:51:02:47:0C:20:1B:7F:0E:F7:92:5B:ED:14:6C:A9:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3DFF3EFCDCCD11EFB6FEAA9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.164.0/22
Signature Algorithm: sha256WithRSAEncryption
74:57:65:c8:81:36:44:b7:95:20:22:17:cb:b2:e5:a5:5f:d9:
10:5f:d1:69:3c:52:59:71:c5:d3:38:80:53:c2:86:c9:1b:7d:
2e:82:d8:20:6c:ef:33:a0:1e:2f:0c:a7:d1:e0:03:4a:2c:53:
b5:da:66:db:07:68:e0:6b:86:1c:e7:c5:8e:c4:52:9e:5b:15:
e0:21:51:34:f4:1a:1e:00:f7:a0:5f:45:1d:85:a7:42:9c:c9:
8b:e3:d1:45:a8:79:3f:65:77:07:a5:9d:40:6c:da:db:51:05:
ae:5a:6d:43:b4:0f:19:79:10:61:80:07:b1:42:39:bc:ba:f2:
57:cb:6d:98:36:61:cb:78:ba:69:a9:e2:4c:fb:bc:81:1a:e8:
9a:57:40:41:cf:1e:35:64:bf:73:fa:4d:0b:f1:e4:19:c9:d8:
74:cb:ad:1e:d7:8a:d2:56:cb:d6:9f:6a:7a:07:be:0b:42:68:
37:c9:5e:64:be:6c:58:0e:c8:77:ad:e7:42:fb:59:55:66:e0:
19:36:16:47:ca:a5:88:9b:15:c6:ab:2e:2f:70:4a:28:b9:3f:
5c:73:3a:da:bc:1b:1a:23:ec:47:a5:95:78:88:51:2d:2d:67:
0a:e1:43:10:c8:52:d0:cb:f0:98:36:f7:c5:fd:7f:39:70:0c:
dc:96:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:54:07 2025 by rpki-client