Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3146F148F56211EF9325B58F762E951A.roa
File: 3146F148F56211EF9325B58F762E951A.roa (raw, json)
Hash identifier: Z+uoSlIMw8ubcB9I+OROQ3rY9WovLjN9Y4Y85X97RpU=
Subject key identifier: 9C:DA:34:0F:04:5C:ED:21:25:FA:BD:1A:6D:D7:C0:F5:86:F1:B1:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0169A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3146F148F56211EF9325B58F762E951A.roa
Signing time: Thu 27 Feb 2025 23:25:56 +0000
ROA not before: Thu 27 Feb 2025 23:25:34 +0000
ROA not after: Fri 11 Apr 2025 23:25:34 +0000
asID: 63139
IP address blocks: 154.203.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92578 (0x169a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 23:25:34 2025 GMT
Not After : Apr 11 23:25:34 2025 GMT
Subject: CN=67c0f483-e5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ee:c1:d7:7e:56:49:29:c0:12:0d:e2:14:38:
2c:84:f6:c3:7d:e6:17:0c:4e:33:33:fd:19:1f:91:
c8:3b:3d:be:e4:ea:8c:3e:2c:43:f1:65:1e:e8:59:
8d:49:16:86:fa:9d:a3:97:32:59:b8:07:ab:8c:12:
45:31:eb:5e:df:f7:f2:20:b4:85:f3:2b:0e:c3:b3:
95:40:9e:dd:a1:d6:6f:17:41:9b:40:40:5e:e7:81:
6f:9f:0f:2c:31:48:04:c7:1a:ea:18:3d:ca:0d:40:
6a:a4:68:41:78:11:2c:55:8f:df:4d:45:6a:56:c1:
c2:ee:40:c9:c9:2d:22:99:a3:ec:00:45:49:6f:c9:
9f:70:05:d5:86:ba:f3:5a:5f:b5:0e:49:74:5f:fe:
17:10:39:b4:98:f6:07:b0:72:3a:24:43:dd:e5:b1:
90:9d:c0:d2:0e:44:8f:9b:67:85:aa:75:5e:2f:db:
1d:cc:be:7f:8d:d4:16:fe:23:15:2f:18:1e:f8:c7:
78:f3:07:5a:24:9c:3e:8f:3c:06:6d:96:8d:fc:00:
15:b5:5a:d2:6f:65:0d:39:23:89:31:7f:6c:74:c8:
51:18:58:d4:b1:c2:82:b8:34:05:a6:b9:dd:82:92:
cc:f1:12:5c:f3:51:cf:9f:d9:e2:29:06:c6:78:dd:
4c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:34:0F:04:5C:ED:21:25:FA:BD:1A:6D:D7:C0:F5:86:F1:B1:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3146F148F56211EF9325B58F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:64:56:37:91:88:1d:01:c7:b2:c3:4c:d9:80:ba:e9:9b:13:
73:c8:0c:fc:15:d1:69:61:72:86:6f:41:2c:7e:e6:de:77:41:
bc:bd:72:70:c2:0c:81:4d:2f:74:01:a7:af:75:0a:2e:e5:14:
30:60:25:83:13:4b:4a:27:a9:01:f8:11:45:49:b3:85:2b:90:
f8:5d:5b:81:e9:ba:1a:d1:8a:d0:8e:25:41:71:ee:7a:c6:5f:
5b:9c:ba:00:07:4f:35:bd:60:0d:77:be:d6:f4:8b:87:c2:66:
14:72:83:35:0c:6d:82:87:15:8d:32:ed:dc:0f:62:96:84:72:
2d:0f:54:1a:3d:21:48:a6:20:78:07:4a:21:5c:76:81:33:98:
c6:61:e7:9e:67:83:42:e6:be:ff:c5:3b:0c:5a:65:ad:ea:3d:
2d:c3:ee:44:3d:ef:3a:d4:99:44:6e:6b:0b:7f:6c:85:3c:a0:
59:31:51:ea:da:f2:18:c3:73:01:74:dc:ca:61:f3:f0:04:4e:
9f:fb:22:ae:92:6b:40:6f:c7:f2:c9:81:f4:36:ca:18:1d:f5:
3f:2e:eb:30:28:e4:c9:18:c6:b8:56:91:8b:b5:ae:7c:00:6f:
9c:73:3f:24:13:7a:df:57:93:9a:f4:b0:b6:3b:75:fd:cb:c6:
33:bd:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:03:35 2025 by rpki-client