Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3869CDB4F3FB11EFA5CFD46A762E951A.roa
File: 3869CDB4F3FB11EFA5CFD46A762E951A.roa (raw, json)
Hash identifier: 5QU63y4f/N32qM71a0XAlsg0A4f3LlZIju0TBN6d/o8=
Subject key identifier: 5F:88:1B:C5:5E:B3:52:E8:4C:59:B3:AC:E1:08:5D:49:13:15:57:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0160DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3869CDB4F3FB11EFA5CFD46A762E951A.roa
Signing time: Wed 26 Feb 2025 04:36:18 +0000
ROA not before: Wed 26 Feb 2025 04:36:14 +0000
ROA not after: Thu 19 Feb 2026 04:36:14 +0000
asID: 984
IP address blocks: 154.203.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90331 (0x160db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 04:36:14 2025 GMT
Not After : Feb 19 04:36:14 2026 GMT
Subject: CN=67be9a42-a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e3:c7:69:41:fd:26:47:98:4c:c2:e3:50:b3:
14:cf:08:8a:51:b2:f6:f7:28:8b:e9:6a:2f:79:b9:
96:f5:fb:98:b6:1b:9d:ba:24:69:88:fa:61:10:1d:
5d:6a:58:69:f7:54:16:d2:39:00:88:e0:f7:c6:f7:
23:44:a4:0e:bc:03:19:36:48:b8:cd:dd:a5:3e:94:
15:7f:c6:c3:27:c3:2c:30:3a:29:e6:16:97:0a:2c:
f3:70:cf:f3:5f:46:00:02:0b:9f:13:d8:94:bc:68:
a9:32:a8:82:34:57:6b:a8:8b:32:cf:ce:6d:02:36:
12:c9:9a:14:24:12:91:68:f4:cd:1e:42:06:7c:b8:
70:8a:ae:f7:f9:63:85:7a:75:8e:d8:a6:c9:94:b8:
da:b7:c1:28:7d:53:60:93:08:c6:b4:9f:d5:7b:b9:
b4:88:f1:c5:9e:28:a4:b8:6c:e7:b1:00:6d:c6:c2:
af:97:86:af:01:80:c3:4d:fa:74:d6:e1:8d:f4:74:
66:f0:b1:0a:81:b9:aa:6f:eb:db:a6:c5:c3:14:48:
68:63:ef:ee:1e:4e:b8:0a:33:d6:62:d2:ad:af:f1:
42:7e:d0:e7:8b:d4:e0:14:00:7b:f9:12:d8:02:21:
22:75:86:b7:69:11:10:af:0d:f4:b6:75:da:ec:9d:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:88:1B:C5:5E:B3:52:E8:4C:59:B3:AC:E1:08:5D:49:13:15:57:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3869CDB4F3FB11EFA5CFD46A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.209.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c6:c3:bf:49:87:82:c3:87:90:20:f1:bb:06:b1:fd:a3:67:
5d:94:ea:c7:2b:b3:43:dc:39:17:69:3d:0d:c3:81:29:1b:e8:
9f:0a:fb:a3:af:bb:b0:fe:0e:27:9e:ce:65:38:27:12:16:df:
4c:77:2f:77:8f:0e:a7:84:52:0a:95:a1:c1:c2:93:c2:a8:db:
7c:89:67:22:6a:7b:a0:92:03:25:c6:6c:4c:b8:9e:28:fa:d3:
8f:ff:6f:92:b4:c9:87:6b:ba:db:c3:7c:59:12:f6:2e:4f:fb:
c4:cc:ab:84:ab:5a:e1:86:9c:1c:68:cf:ce:44:6b:79:6a:4d:
cb:38:7d:67:8c:9e:5c:ef:bd:b0:86:4d:98:54:1b:2d:eb:28:
b8:e0:43:bb:00:ea:7f:28:d8:db:82:fe:0e:2c:b2:34:f7:d3:
cb:96:5f:17:b4:a1:56:b4:40:0b:e2:35:16:b2:de:69:e9:1d:
df:30:13:c7:00:96:6b:11:35:5b:b7:bb:b7:3f:35:d9:45:38:
26:90:11:ab:bc:2c:b6:17:5b:39:e8:7e:28:8b:f5:2c:c2:e2:
54:5c:d0:9f:c2:cd:cc:53:f0:49:fe:15:64:b4:59:d1:8e:7c:
b7:3a:b5:32:0d:3f:e4:49:53:02:dc:51:ee:29:66:8f:56:65:
fe:a2:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:25 2025 by rpki-client