Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3274524DB3611EFA3561C6D762E951A.roa
File: F3274524DB3611EFA3561C6D762E951A.roa (raw, json)
Hash identifier: ix07FE+u7YPgaszg08C/SUGBmsCYyVRKIv4S5EmxUUM=
Subject key identifier: 04:8F:DF:51:97:4E:59:26:01:79:4F:73:47:4D:8C:4A:02:27:A9:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3274524DB3611EFA3561C6D762E951A.roa
Signing time: Sat 25 Jan 2025 16:10:53 +0000
ROA not before: Sat 25 Jan 2025 16:10:49 +0000
ROA not after: Fri 07 Mar 2025 16:10:49 +0000
asID: 63139
IP address blocks: 154.223.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84516 (0x14a24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 16:10:49 2025 GMT
Not After : Mar 7 16:10:49 2025 GMT
Subject: CN=67950d0c-76b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:70:af:5c:e0:4e:af:b3:50:2a:d3:f1:cf:4e:
2e:0d:db:72:a4:65:30:b1:d8:55:d6:7c:26:a6:97:
b0:4a:09:74:55:58:c1:e0:aa:5c:ac:a7:58:11:ec:
f1:26:3b:28:c8:15:80:ad:d5:6e:89:c8:52:31:78:
82:a6:e8:8c:49:89:71:12:d5:54:01:7d:4e:eb:00:
c7:55:09:31:10:7a:b0:88:7e:a2:49:ba:87:e8:da:
f3:c1:55:38:d6:f8:db:62:ed:2a:0a:f4:c9:30:29:
d8:d4:ad:fb:b5:7f:f5:c4:de:f1:a5:f2:31:9a:e3:
a9:f9:b2:86:a0:0e:d6:13:43:9d:a3:73:55:51:b7:
65:3f:b9:50:20:84:43:61:c9:16:f6:fb:25:1e:97:
f9:6e:25:f7:49:9a:4b:e3:45:e5:1d:e9:1d:02:33:
3a:3c:e0:6e:b3:c5:40:88:e7:36:b9:c1:2b:78:ee:
3b:ef:74:05:10:e3:21:95:34:2a:49:77:2a:2c:69:
f8:f7:80:b5:0c:d8:08:a4:48:84:4d:fc:71:2a:7d:
e6:7f:0f:58:5d:1d:f6:93:8f:69:6b:bf:fd:b1:a9:
df:89:56:a3:b4:a8:04:d5:72:2a:a6:ae:d2:06:f8:
3f:26:17:5d:85:0a:c1:db:84:7d:a5:ed:22:37:13:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8F:DF:51:97:4E:59:26:01:79:4F:73:47:4D:8C:4A:02:27:A9:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3274524DB3611EFA3561C6D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.39.0/24
Signature Algorithm: sha256WithRSAEncryption
91:48:e0:3c:09:7a:88:dc:6d:6f:04:ba:2b:c0:75:a7:02:ea:
72:8e:0e:c4:e1:d0:b7:41:ad:43:97:a9:a6:0c:ec:a1:21:0a:
86:1f:a9:7e:69:79:a9:72:25:66:65:d1:9d:f0:ba:96:f5:73:
85:5f:6c:95:50:61:88:95:47:fc:25:c5:e6:68:da:02:8f:73:
22:90:d5:da:f3:0b:f0:7a:1f:f3:4a:27:12:e9:9d:aa:a2:6f:
6a:76:37:e4:cc:6a:6c:bc:4f:6b:d1:3e:c7:d8:c3:c3:62:1d:
41:fe:be:6f:e4:75:55:50:9e:a7:70:37:9e:dd:83:0a:5c:03:
99:05:ca:61:dc:e8:37:b0:c0:76:48:b6:bc:1f:95:28:a1:62:
f3:c2:21:8b:08:6d:62:6b:f0:e8:f7:f4:ed:fe:4f:f6:05:b4:
0e:6b:60:bb:a4:dc:b2:5d:6a:cd:8a:07:ee:1c:81:f8:53:26:
5c:5e:82:7d:c3:48:ae:ba:ac:b8:fd:4f:ca:e4:ee:df:95:9e:
71:7e:92:68:b1:5a:1d:44:40:e3:f7:81:32:91:4d:d1:26:30:
0d:a1:14:89:31:10:c8:76:d3:28:df:fb:93:c7:cb:bb:b3:de:
0f:32:35:d0:2a:b0:dc:ee:18:09:4f:48:39:29:9e:c5:e0:c0:
de:92:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:27:52 2025 by rpki-client