Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E262ACC9C811EFBA374B44762E951A.roa
File: A3E262ACC9C811EFBA374B44762E951A.roa (raw, json)
Hash identifier: Mf0u4WNLQnffxbbX93tOSZKUuPMY4rkwlquAMNjrHkc=
Subject key identifier: AF:82:F2:3B:AF:42:5B:EC:C1:6B:74:93:C0:1E:BA:D6:AC:53:2F:CB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E262ACC9C811EFBA374B44762E951A.roa
Signing time: Fri 03 Jan 2025 11:48:25 +0000
ROA not before: Fri 03 Jan 2025 11:48:22 +0000
ROA not after: Tue 04 Feb 2025 11:48:22 +0000
asID: 203020
IP address blocks: 154.202.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79032 (0x134b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 3 11:48:22 2025 GMT
Not After : Feb 4 11:48:22 2025 GMT
Subject: CN=6777ce89-4589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6e:82:84:6e:11:db:57:e9:2e:25:a0:ad:47:
9c:18:ee:49:6d:d2:6f:49:1e:65:58:33:97:aa:2e:
fc:66:a0:d2:8e:1e:11:35:ff:7b:d9:39:e9:ea:fe:
3b:5c:e5:5b:3c:36:14:8b:50:db:b0:47:54:1c:14:
30:db:a0:94:96:5b:a6:6c:31:64:f8:ab:b4:a2:9e:
6e:5e:b8:d7:35:41:4f:44:5e:85:91:54:02:9b:a8:
b8:ba:71:7d:e0:b3:b2:4f:08:65:55:9a:58:10:10:
0d:4e:7a:7a:55:73:2a:71:13:0f:70:fd:95:0a:dc:
71:65:27:8a:7a:0f:d0:cc:2b:a8:be:79:8e:15:6c:
81:38:65:c2:6a:f1:1c:a0:c6:8a:80:55:e2:ac:d8:
11:fa:02:c1:c4:36:06:e2:92:03:d6:cb:90:13:12:
ed:90:04:6b:c3:df:02:c9:d5:8f:cf:d2:4c:f9:09:
1f:ad:b7:18:16:b5:77:5f:a5:a2:d0:8b:36:02:8b:
a8:b1:35:dd:bf:0e:37:fe:96:b7:93:c3:35:69:d8:
77:a5:f7:8b:19:a9:50:f0:49:19:81:79:12:84:bb:
dd:84:f2:4c:ac:d4:ab:22:bb:63:5f:b2:e5:c7:7d:
8e:d5:d9:0b:c7:4b:8f:90:9d:5b:c3:e1:3e:c3:6a:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:82:F2:3B:AF:42:5B:EC:C1:6B:74:93:C0:1E:BA:D6:AC:53:2F:CB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A3E262ACC9C811EFBA374B44762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.86.0/23
Signature Algorithm: sha256WithRSAEncryption
38:c1:db:ee:ac:62:8c:8b:de:4f:84:05:6a:ee:3d:4a:e1:54:
2d:68:3e:51:1f:26:c6:c8:8d:11:2b:6d:84:36:53:db:16:be:
27:01:50:cb:ea:97:68:76:3d:ce:ca:a7:68:a5:c0:da:90:b6:
8a:3a:6d:9f:a0:db:cc:72:4b:da:d6:60:39:cb:b3:18:2e:e5:
35:52:2a:13:d2:c6:60:8b:03:79:bb:41:8d:f6:25:7e:43:14:
0e:29:fb:d6:92:97:ce:8f:5a:a3:33:1e:17:c4:01:61:b3:3d:
4a:59:f8:ec:35:d4:f6:04:9e:f9:9a:74:27:df:31:2c:3d:e2:
37:dc:38:0c:40:cf:e5:ea:67:dc:a3:fc:bb:e8:53:57:09:f2:
61:c4:3e:13:35:b9:f7:be:3d:f7:39:ab:54:cd:27:94:77:89:
cf:3d:99:b9:90:61:84:e7:fe:cb:15:02:ec:42:e0:ba:42:42:
06:7c:7b:44:ac:96:c9:6d:1d:8a:05:de:87:6e:97:c4:ee:e3:
a1:0c:dd:15:28:67:27:13:be:2c:6e:60:b7:0b:24:fa:a1:d1:
c2:14:98:5a:4b:ca:89:2b:1e:73:5b:3a:6f:ec:47:f9:76:de:
92:7a:71:42:24:e4:5f:43:3e:22:b4:83:e4:e5:cd:77:8e:76:
9d:65:0b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:54:12 2025 by rpki-client