Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3769939CF45311EFBB0B8F4C762E951A.roa
File: 3769939CF45311EFBB0B8F4C762E951A.roa (raw, json)
Hash identifier: ZXHBqDGUzP/JVHk/6nhYe+lCzKt1CwWkIToKsf1MtZ4=
Subject key identifier: 73:D6:6E:6E:42:6D:60:F4:DB:B5:B8:F6:0B:2E:3A:B5:5F:AD:22:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0164A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3769939CF45311EFBB0B8F4C762E951A.roa
Signing time: Wed 26 Feb 2025 15:06:12 +0000
ROA not before: Wed 26 Feb 2025 15:06:08 +0000
ROA not after: Sat 19 Feb 2028 15:06:08 +0000
asID: 17561
IP address blocks: 154.82.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91299 (0x164a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 15:06:08 2025 GMT
Not After : Feb 19 15:06:08 2028 GMT
Subject: CN=67bf2de4-cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:97:a0:24:4c:4d:ff:24:b4:56:b9:20:3a:d4:
d6:0e:0f:19:cd:be:cb:32:64:9f:39:62:37:35:6a:
47:8e:b0:12:a5:d6:3e:37:8f:6b:99:1a:15:67:c2:
8e:45:8e:2b:d6:34:65:73:42:63:24:9b:41:2e:80:
bc:21:cc:f9:96:36:b3:47:31:af:e4:7b:25:4c:2d:
33:e3:57:dd:d6:99:36:05:e5:f9:ad:21:ee:31:d1:
5e:40:59:89:7b:0c:05:f2:76:ad:e0:82:21:8b:fc:
e8:0a:91:63:e7:80:2d:3c:f2:53:07:96:ec:4a:1c:
58:09:69:7f:88:d4:49:5d:d3:b6:a8:71:38:d9:b8:
55:9c:96:4e:da:c3:e9:a6:a8:56:10:39:49:09:ab:
a4:32:5c:c5:d3:d4:6d:09:33:47:72:6c:60:2f:98:
f6:fd:79:26:a1:94:c5:40:e2:e9:57:40:a3:b0:b9:
ff:ee:db:84:c7:05:ca:73:cf:5c:d1:79:94:a3:ce:
ad:82:2a:fa:65:06:c8:d9:d4:ca:cc:e2:8a:18:d2:
ec:d0:e1:84:f0:0b:59:68:43:bc:e2:6c:a3:c7:56:
e6:82:c5:98:35:4a:ac:1b:0e:fd:22:b4:4c:89:eb:
79:ee:7d:a1:c5:14:5e:9d:46:be:b9:9c:26:db:6a:
fa:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D6:6E:6E:42:6D:60:F4:DB:B5:B8:F6:0B:2E:3A:B5:5F:AD:22:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3769939CF45311EFBB0B8F4C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:8d:a1:39:e1:33:5a:fb:34:9b:f8:6b:90:8c:28:f9:24:7e:
2d:f9:ce:00:ff:7b:08:62:7d:d5:bf:f1:be:b5:88:95:00:d9:
96:4b:a4:00:4c:e9:b5:69:f0:e3:16:38:15:d1:5c:84:01:53:
69:8f:bb:f6:bd:05:ab:28:90:bf:31:95:6d:ee:c4:5d:2a:ae:
5f:fb:07:0d:2b:27:f7:06:cf:8a:d7:c1:89:21:fd:f6:71:fa:
e9:dc:fd:3e:96:57:dd:06:6e:ef:8e:65:84:4e:a8:87:17:b9:
74:54:70:4a:5a:2d:86:94:8b:2c:73:79:f9:a7:f3:51:97:96:
eb:b8:32:73:6b:4e:91:f9:4c:e9:52:d5:6a:6e:d5:e7:6a:1e:
49:fe:a2:94:75:d6:a9:39:12:ab:f0:3e:91:a1:0e:ec:e6:64:
30:e9:17:98:b8:df:02:aa:6d:dd:5a:a6:92:42:12:67:3f:34:
64:0f:43:50:02:c2:60:87:33:dc:41:4a:22:95:12:3f:68:8a:
73:fb:be:d3:56:43:a6:d9:0d:3d:63:4f:a6:a4:95:c0:a8:95:
d5:7d:cf:3a:a7:89:2f:10:0c:82:46:22:5a:72:99:49:db:13:
ad:90:cd:96:cc:d8:57:77:6b:c0:42:a5:c8:c7:f3:ac:b5:76:
a5:4a:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:55 2025 by rpki-client