Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/138F421EFF1611EFAD333C92762E951A.roa
File: 138F421EFF1611EFAD333C92762E951A.roa (raw, json)
Hash identifier: MfFGisZ8CJroRDXqc2lpS9dOdHSzygV9162hekGPziw=
Subject key identifier: 3C:0C:85:96:CC:5C:F4:C4:7A:B8:F0:64:B9:CB:2E:7B:C7:CF:61:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/138F421EFF1611EFAD333C92762E951A.roa
Signing time: Wed 12 Mar 2025 07:46:15 +0000
ROA not before: Wed 12 Mar 2025 07:46:11 +0000
ROA not after: Mon 05 May 2025 07:46:11 +0000
asID: 398478
IP address blocks: 154.90.224.0/19 maxlen: 24
154.92.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95139 (0x173a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 07:46:11 2025 GMT
Not After : May 5 07:46:11 2025 GMT
Subject: CN=67d13bc7-f309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:3f:6c:ae:56:a2:19:2f:d9:6b:fe:d1:59:
03:94:26:cc:18:7b:5d:24:56:12:c3:3f:91:cc:6e:
5e:2c:39:1d:4f:0a:07:f3:53:ac:72:5e:d6:23:3b:
cc:55:9c:94:3b:a4:62:bc:44:4e:51:05:81:aa:8f:
ef:ff:61:f4:b9:3e:4b:f2:7b:91:46:c0:f2:3a:b4:
1a:f4:45:22:14:f8:0b:4b:b4:2a:e0:21:2a:a4:a7:
cc:e3:2d:f5:52:81:3c:0b:48:81:73:88:f9:53:aa:
f5:c2:cf:45:12:68:1a:f0:a0:48:b5:73:75:4b:9e:
a0:5f:0f:2b:35:fa:3a:03:a2:d7:d3:84:8d:4f:fa:
ae:c3:27:88:0b:87:b9:ff:13:22:2e:70:a4:a7:2e:
7a:5e:25:8f:21:74:9f:7d:7e:fe:62:20:6c:62:1e:
20:5a:db:04:72:81:3f:e1:ea:47:e1:8d:73:be:e1:
64:4e:1d:22:a8:1e:44:23:f2:39:c3:20:4b:8a:b1:
a7:d2:71:72:2c:18:57:2b:d0:8c:44:37:2c:5f:ca:
5d:72:f6:32:39:62:31:b3:b7:36:05:ab:2a:96:d9:
e2:58:39:5a:dd:bb:e7:4e:86:d8:a9:4e:fc:b4:1b:
4d:2f:7a:60:9b:9c:ac:9f:ed:6f:cb:99:c4:63:5f:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:85:96:CC:5C:F4:C4:7A:B8:F0:64:B9:CB:2E:7B:C7:CF:61:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/138F421EFF1611EFAD333C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
154.92.176.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:ee:4c:9b:8c:3d:73:8f:0a:17:24:f3:b6:71:b3:31:d6:67:
62:14:ce:8f:4a:97:e7:7d:40:2c:2f:6e:e6:a5:d2:60:05:48:
e8:b3:4b:11:1f:e8:bf:2b:62:d3:86:19:39:a7:82:ad:03:b0:
e3:9c:af:9c:b4:c5:e0:4f:a8:98:d9:f3:c7:33:8e:76:c7:5b:
97:66:a7:ae:7f:78:9d:61:f9:e5:8c:1b:9a:24:00:0f:6a:2b:
43:1f:fa:70:ed:b0:1a:35:4d:77:d1:61:77:cb:0b:81:24:9e:
76:83:f6:79:94:a1:34:ba:91:97:b2:72:be:46:dd:cf:12:8d:
4c:de:4f:64:e0:1b:a7:d4:d4:53:81:d5:b0:f5:3e:d5:5e:a2:
34:43:5b:64:4d:01:2b:71:af:aa:c0:58:06:4e:c5:45:ea:4d:
1d:7d:32:d8:f7:8a:90:c1:09:a6:74:83:05:01:b4:90:18:c5:
5d:20:f1:ba:cc:06:c2:69:ac:38:97:c0:d7:ad:36:4d:89:19:
c0:d5:58:e7:e5:90:f1:32:30:f9:77:ce:97:ef:3f:35:e5:c7:
be:53:58:5b:17:46:f3:cf:af:98:91:ca:02:82:1f:1e:ba:0d:
8a:e2:da:bb:fa:25:c7:06:50:d0:15:82:cd:b6:8c:63:ed:2f:
6b:bd:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:13 2025 by rpki-client