Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34F03754F2E311EFAD100770762E951A.roa
File: 34F03754F2E311EFAD100770762E951A.roa (raw, json)
Hash identifier: fU/iS5g2If56rkeQuOBZSKfQ5VL2GjjwnJWev3LeXS4=
Subject key identifier: A5:56:6D:41:AC:1C:04:05:67:25:74:D3:D4:AC:0E:3A:10:61:12:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015CDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34F03754F2E311EFAD100770762E951A.roa
Signing time: Mon 24 Feb 2025 19:11:53 +0000
ROA not before: Mon 24 Feb 2025 19:11:49 +0000
ROA not after: Mon 07 Apr 2025 19:11:49 +0000
asID: 138915
IP address blocks: 154.223.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89308 (0x15cdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 24 19:11:49 2025 GMT
Not After : Apr 7 19:11:49 2025 GMT
Subject: CN=67bcc479-b485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:e2:0f:a0:14:75:bb:73:b3:cd:c3:9a:4e:
5d:0b:67:16:3d:47:2e:ab:82:2d:77:ea:58:40:a8:
6c:7f:8e:e7:cf:dd:f4:34:91:b5:fb:00:07:4a:4b:
91:86:11:12:b9:be:1e:81:3e:11:ff:9b:34:3e:c9:
87:27:4a:13:2d:d1:46:9a:12:1b:e0:71:75:26:3f:
ca:ce:9b:d7:3a:8e:6f:df:8f:f7:91:9d:13:4d:8b:
ec:3e:2a:cf:a1:71:c0:cb:99:03:48:a3:22:76:a7:
5d:57:dc:51:0f:ec:54:dd:ce:cd:07:fc:2c:cf:e1:
42:02:46:d1:2e:1f:52:63:17:8d:96:f3:0e:11:59:
5e:e3:04:97:2c:76:e5:44:35:0c:24:e5:b6:70:2b:
86:ec:5d:c2:ec:77:2e:78:10:d2:e7:e4:ff:96:93:
5d:a0:5b:c9:3e:6d:98:7d:2a:9d:61:a6:2c:96:90:
fc:4a:17:68:5c:c0:b2:96:27:1a:9e:48:bf:59:7b:
10:a7:f1:c2:20:e3:cf:5a:d3:84:8b:ab:a9:30:e3:
8f:f0:5c:b3:7b:74:21:aa:41:fe:c2:40:df:37:9c:
ba:f6:8b:ec:9f:ff:a9:38:ee:59:b6:0e:50:e2:77:
a5:a2:b5:67:b1:2a:65:f2:fa:a3:d2:6a:54:6d:85:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:56:6D:41:AC:1C:04:05:67:25:74:D3:D4:AC:0E:3A:10:61:12:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34F03754F2E311EFAD100770762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.42.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:63:31:b1:33:73:a3:81:79:bd:d8:20:c4:da:e8:93:8f:4c:
4a:1b:fe:ed:96:de:9f:a3:ce:5b:a2:0f:aa:74:a2:bd:39:fc:
3c:d9:39:ad:50:8a:88:9f:43:14:94:1d:80:16:b7:cb:b0:5a:
52:cf:42:0d:7d:27:65:4d:a1:87:db:2b:fc:30:45:6e:24:9d:
21:ab:f0:b1:be:65:b3:66:d1:01:ee:0b:6c:7f:7e:21:98:dc:
14:f6:07:b6:58:b2:25:30:d0:09:fc:ba:4c:07:8c:0b:b2:3d:
e9:66:2a:7d:7f:30:f7:86:0e:66:4a:e1:dc:d6:47:d4:c2:31:
01:fb:71:57:0b:5b:92:3d:c7:04:88:02:c7:d8:e8:57:a9:e5:
05:99:00:bf:12:67:a9:50:2d:99:64:42:9e:01:65:89:2b:0c:
48:bd:cb:3d:09:1d:f8:ee:7a:89:60:ad:0e:ee:17:3f:2b:05:
af:54:14:72:97:ac:23:00:dd:f7:d1:6d:d9:72:cc:98:2a:79:
5e:0c:84:10:47:a3:9e:be:c1:8b:56:af:08:d9:d8:25:1d:80:
7d:53:a1:02:0c:64:6b:37:d9:18:0e:26:95:24:dd:cd:9f:e3:
63:12:48:cd:97:ad:d2:7e:ac:50:b3:97:8c:c1:0c:de:c1:07:
6d:6b:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:05 2025 by rpki-client