Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3760C75EF4A211EF9C848F69762E951A.roa
File: 3760C75EF4A211EF9C848F69762E951A.roa (raw, json)
Hash identifier: Uyj1DsU36cC2sTkLAkIVGKh/uKH7m1WAroDP/IItoaw=
Subject key identifier: AE:5B:A3:FD:06:B4:DC:A9:46:AA:D8:05:63:CB:D5:A1:AE:F8:F0:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016607
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3760C75EF4A211EF9C848F69762E951A.roa
Signing time: Thu 27 Feb 2025 00:31:42 +0000
ROA not before: Thu 27 Feb 2025 00:00:38 +0000
ROA not after: Sat 19 Feb 2028 00:00:38 +0000
asID: 17561
IP address blocks: 154.94.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91655 (0x16607)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 00:00:38 2025 GMT
Not After : Feb 19 00:00:38 2028 GMT
Subject: CN=67bfb26e-1ac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:47:30:35:a0:82:db:67:b3:c2:11:49:09:
86:76:5f:d7:34:86:24:b6:1b:73:d6:b2:de:f8:cb:
99:f6:c1:2e:4d:29:be:4d:81:52:73:42:7a:74:fe:
3d:5d:4a:b5:1d:59:52:ba:54:b5:8e:ab:af:53:1c:
52:84:6f:9b:09:54:35:ca:96:b8:0a:c8:74:9f:a5:
11:4b:23:5b:6b:49:42:df:1b:ee:fd:79:f4:49:8d:
49:8b:68:88:c1:13:23:f4:66:e1:1a:f8:f6:c1:3b:
18:98:ec:b5:eb:6a:dd:31:fc:68:d4:9d:3b:ea:33:
16:4a:63:fd:ea:85:9e:52:9e:94:81:bd:ce:e3:36:
0b:c2:fb:95:d1:86:7e:d5:12:eb:41:54:72:d5:e7:
27:76:b1:02:3e:f1:29:9f:66:06:32:4a:9d:55:4d:
ce:fe:87:a5:7b:d0:8f:e7:3d:bb:63:25:4a:d3:17:
46:f6:24:e6:53:66:54:2a:74:bb:3d:00:6a:a0:f9:
88:30:62:14:09:bd:8e:e8:6a:7a:2f:3c:ef:57:bf:
74:f2:87:e7:1b:de:87:3b:d6:03:41:63:02:b7:26:
3d:84:38:b8:c9:aa:92:ea:ed:2f:63:67:89:b7:37:
b4:45:c5:90:c3:f6:e2:47:3e:52:c1:bd:7f:97:fb:
1a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5B:A3:FD:06:B4:DC:A9:46:AA:D8:05:63:CB:D5:A1:AE:F8:F0:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3760C75EF4A211EF9C848F69762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.246.0/24
Signature Algorithm: sha256WithRSAEncryption
27:3d:70:87:87:15:d5:61:9d:0f:09:76:f9:2d:4f:b7:f3:ac:
1c:c5:c1:05:34:69:e1:82:f8:f9:9c:28:ff:5d:c3:f9:27:bb:
05:fc:01:c6:ed:01:b6:d3:a8:3d:88:be:52:a0:40:91:c2:11:
01:47:e0:b5:69:32:9e:00:09:5e:0e:b6:de:3b:e5:3a:8c:50:
38:88:29:d1:e8:2c:cb:e1:18:85:8b:62:ea:c2:8d:6f:b9:10:
95:6c:d6:f4:ab:02:2b:dc:27:45:62:5a:0a:a6:5f:c3:c8:02:
71:c2:56:e1:3d:c2:b4:e0:60:ba:0d:a7:f9:9e:c6:b0:de:ca:
a1:4d:6a:05:2e:57:93:d0:91:d0:c6:f7:da:27:21:a8:66:fc:
7c:96:20:79:7b:f5:61:bf:23:ac:9a:ac:15:71:e7:14:b2:5a:
03:ec:54:36:57:0e:07:05:46:67:07:65:83:ff:80:17:83:e0:
55:f7:99:bf:26:06:ac:db:61:24:70:32:c7:d6:46:ad:30:83:
21:21:48:07:02:68:0a:09:f1:94:3c:b8:47:f6:31:0c:e5:4b:
5e:0d:34:b8:58:b3:6a:36:16:c6:04:ae:54:e5:37:36:f5:98:
4e:ae:67:02:69:bd:61:5b:75:72:9f:51:36:6c:33:00:a0:53:
0d:fe:bd:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:45:42 2025 by rpki-client