Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EEBC144BEB611EF91015B78762E951A.roa
File: 3EEBC144BEB611EF91015B78762E951A.roa (raw, json)
Hash identifier: qqNLP0lgmwHF9Nz+yD1C7PT1VvogsRkkwem/cUo+/jQ=
Subject key identifier: 33:13:FE:BC:40:36:14:80:C9:31:FF:AE:1E:54:3A:4E:6D:25:91:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011CBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EEBC144BEB611EF91015B78762E951A.roa
Signing time: Fri 20 Dec 2024 09:39:02 +0000
ROA not before: Fri 20 Dec 2024 09:38:58 +0000
ROA not after: Sun 02 Feb 2025 09:38:58 +0000
asID: 202656
IP address blocks: 154.222.40.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 72892 (0x11cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 20 09:38:58 2024 GMT
Not After : Feb 2 09:38:58 2025 GMT
Subject: CN=67653b36-52bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:1e:4c:94:cb:4c:cd:29:34:7d:44:bf:c7:
4f:b5:4f:5f:e1:f4:67:11:53:2a:fb:1f:dd:8d:52:
43:28:a8:c6:d5:2c:e0:30:7c:08:c4:5b:2f:88:6b:
63:53:94:9e:78:1e:5c:10:8a:aa:ae:23:15:a7:b4:
8e:e8:83:9d:8f:9f:1a:44:61:4b:21:93:49:36:99:
f1:5e:c7:7d:10:d9:9f:92:3e:de:4f:61:20:5f:08:
79:6c:60:48:6e:f4:3c:76:09:60:7c:ed:13:06:46:
ea:78:40:87:21:a6:5a:83:d6:e8:9e:ea:b8:ee:d6:
09:5a:57:f0:b5:b6:3d:dc:9f:6b:61:8d:b5:07:8c:
3b:d0:1e:6b:92:cd:7e:f6:61:ae:6c:ad:41:92:9c:
15:37:99:d4:96:59:58:e7:f8:ea:92:60:76:40:6d:
1c:62:dc:fd:aa:2a:9b:12:a9:10:51:1b:4f:43:77:
e5:a9:66:97:2c:bf:33:d1:bf:2f:d4:bb:28:70:70:
92:b3:54:9b:65:c1:18:9e:e8:27:c1:73:c0:4b:52:
1b:cd:91:23:0e:57:d1:6e:c9:84:38:08:13:58:41:
3f:a9:fe:3e:bf:0a:5e:c7:21:32:0e:0e:ad:e0:27:
ad:a5:9a:f2:ce:88:c5:c7:d2:b6:96:8c:60:16:58:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:13:FE:BC:40:36:14:80:C9:31:FF:AE:1E:54:3A:4E:6D:25:91:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EEBC144BEB611EF91015B78762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.40.0/21
Signature Algorithm: sha256WithRSAEncryption
c6:78:17:1a:b9:47:e3:0d:28:2e:74:61:ce:72:6c:53:76:65:
86:83:9b:33:69:67:95:fd:82:99:19:14:cc:7f:9e:9e:98:21:
8e:23:bf:f4:19:ad:d7:ea:b7:f3:e6:f0:53:c1:01:c7:63:32:
2f:05:b4:a1:55:b7:5e:bc:5a:79:20:0e:8a:ec:5b:33:bd:ef:
95:d5:4b:9c:8e:f9:22:ed:fe:fa:52:a4:06:36:2c:97:9c:28:
92:2d:2e:00:2a:4b:83:e7:5f:bb:be:f1:3f:62:45:a4:ba:5d:
31:38:52:d5:f3:e6:be:e7:63:24:bc:34:c6:a2:f9:59:39:1b:
fe:d5:6c:da:8d:c2:a4:4e:75:e3:e8:c7:51:fc:0f:a8:f5:9e:
e3:ea:3c:9c:38:ea:b1:0a:d9:90:35:f3:05:e5:52:d7:a5:38:
c9:02:85:5f:80:6e:cc:9d:c9:09:91:c3:1a:88:25:da:4b:dc:
be:96:db:85:6e:ca:38:1c:ca:bb:05:82:8e:17:d1:ac:20:47:
aa:bc:45:01:f0:5f:c2:69:f7:c9:91:b2:c2:40:88:8c:ed:5e:
38:86:0f:7b:32:80:a9:37:51:a6:17:21:af:9d:07:5f:ec:8a:
c9:f8:eb:22:65:ee:62:34:a8:b1:7f:f2:a2:cc:cb:88:40:f8:
c2:d6:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:34:58 2025 by rpki-client