Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E688B90D97C11EFBFA0D0BC762E951A.roa
File: 3E688B90D97C11EFBFA0D0BC762E951A.roa (raw, json)
Hash identifier: W6ngwLN0baJQZRAudXINY+C/g1/X+s5d9gNTmrdcq7E=
Subject key identifier: 70:32:40:5D:36:29:60:74:A6:C3:48:89:C8:1E:51:EC:FD:9C:32:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014190
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E688B90D97C11EFBFA0D0BC762E951A.roa
Signing time: Thu 23 Jan 2025 11:21:52 +0000
ROA not before: Thu 23 Jan 2025 11:21:46 +0000
ROA not after: Thu 13 Mar 2025 11:21:46 +0000
asID: 63139
IP address blocks: 154.203.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 82320 (0x14190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 23 11:21:46 2025 GMT
Not After : Mar 13 11:21:46 2025 GMT
Subject: CN=67922650-96ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7f:c4:a1:05:22:d1:e7:f4:80:9f:0d:a7:67:
d7:3c:82:f7:49:de:e5:a5:8c:75:bd:2d:21:b4:21:
01:15:0a:07:ee:e5:18:79:35:97:5e:e7:a3:70:2f:
2a:51:fb:ef:92:47:08:44:f4:9d:3d:77:a5:98:70:
43:b9:e8:2a:75:8d:f0:52:85:7c:88:7c:6c:ca:c9:
27:c1:36:f4:a6:98:38:df:a5:d0:9a:91:bc:03:7b:
d0:f9:f3:d0:4d:cd:52:ca:b0:1a:5f:ad:a2:e3:60:
81:f4:4b:81:1c:d3:2b:ce:17:2f:27:9e:e4:25:d3:
58:13:4b:dd:b4:1b:e8:7d:22:6c:96:00:9f:99:80:
ae:ca:18:a7:ba:ea:c7:e0:d8:48:68:9a:76:24:52:
95:ff:cd:0d:92:d2:ee:fb:60:09:e5:4d:5b:1d:fe:
e5:84:39:04:0c:4c:d9:14:35:8b:68:bf:2f:e6:e2:
b8:a7:77:d0:78:f2:b1:98:b6:7c:82:e3:9c:63:73:
91:b2:9c:b1:87:37:ee:06:f7:b0:c9:b2:18:cb:0e:
c0:11:c0:1b:2d:32:87:df:69:b9:50:a7:2c:96:7e:
45:26:0b:b8:c4:3c:f6:c3:76:de:2f:7f:a8:a0:28:
1e:23:76:9e:52:65:8a:55:42:71:21:37:ef:b2:54:
71:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:32:40:5D:36:29:60:74:A6:C3:48:89:C8:1E:51:EC:FD:9C:32:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E688B90D97C11EFBFA0D0BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a5:7c:06:20:31:34:84:f9:30:dc:c7:83:69:b3:13:e6:c2:
31:32:6d:66:4f:e3:4b:42:2e:01:f2:34:89:fc:4d:04:be:01:
e4:99:31:7f:13:52:87:65:1d:6e:d7:ef:64:e6:0f:d0:8c:52:
27:00:1d:4e:72:a9:41:91:9a:f5:8c:76:9a:ec:2a:31:29:75:
5b:d8:c9:c4:f0:4f:74:ab:b2:2c:d5:2b:37:c6:ff:6c:f3:a6:
24:6f:11:b7:cf:0b:60:fd:f6:9e:2c:76:42:66:ef:c9:0d:63:
91:0b:b6:cd:cf:88:3e:9a:bd:1c:86:67:df:0d:f3:1f:f2:ea:
91:6b:cc:93:51:77:ac:56:66:4b:94:3a:13:45:a9:1d:80:01:
b1:52:e3:c5:5f:ce:04:78:96:76:59:1e:42:36:7b:78:6b:66:
0f:2d:90:d5:9f:37:cf:17:b3:d1:2a:19:65:09:4c:07:6b:df:
8d:6a:bf:56:27:7b:e9:d1:87:25:fc:6f:d3:ff:bc:eb:84:ce:
39:27:60:78:25:49:a7:6e:a5:5d:ae:95:8d:cc:f5:b0:7d:4f:
59:26:8c:83:b2:37:3d:27:ec:50:da:b8:18:5d:51:ae:44:2c:
eb:ce:78:18:29:6f:3d:2d:c9:39:a6:fb:53:c3:d1:68:7b:eb:
07:16:38:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:01 2025 by rpki-client