Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38951F34C61D11EFB39EDE5C762E951A.roa
File: 38951F34C61D11EFB39EDE5C762E951A.roa (raw, json)
Hash identifier: oN45GaEDVKtHUY0QQ4lcrYLzxv5Y+/tuawH45xHtH9s=
Subject key identifier: 27:30:19:1B:88:39:5B:E4:97:A1:25:81:8F:D9:33:97:0B:FD:2C:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012F4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38951F34C61D11EFB39EDE5C762E951A.roa
Signing time: Sun 29 Dec 2024 19:43:48 +0000
ROA not before: Sun 29 Dec 2024 19:43:44 +0000
ROA not after: Sun 12 Dec 2027 19:43:44 +0000
asID: 17561
IP address blocks: 154.217.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77644 (0x12f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 29 19:43:44 2024 GMT
Not After : Dec 12 19:43:44 2027 GMT
Subject: CN=6771a674-8cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:11:dc:40:d9:be:15:bd:ca:e9:52:70:40:
9f:7f:26:58:d3:0a:e7:be:1b:03:2e:e4:42:67:3f:
b0:67:ed:2d:87:00:b0:02:8a:56:e6:09:b1:cc:7e:
1c:f6:22:d3:a1:c8:79:6c:b4:c8:b6:ee:c9:ba:cf:
d5:73:19:73:08:23:3f:f2:5d:7c:82:9f:a6:ba:cd:
a5:0c:42:b3:01:64:c8:95:7b:fb:d7:3b:98:6c:25:
0d:9b:be:63:7d:2f:f6:3b:be:58:9f:a3:7c:b9:c9:
c1:7b:2b:70:05:ca:68:dc:42:fc:9a:ac:f6:38:da:
ba:38:cb:b7:81:99:f1:89:67:64:96:42:e2:17:9f:
64:50:dd:e4:3b:b2:49:44:81:4a:79:6a:fa:22:26:
e0:db:f2:cf:c5:c7:b2:1c:dd:74:e3:70:07:5b:16:
49:6e:76:48:3e:2e:bb:34:20:e2:85:c6:22:0d:14:
16:8a:91:60:cc:25:85:58:47:b8:03:8f:40:9e:fd:
b5:82:e2:93:59:73:77:a3:92:2f:05:7d:6c:28:78:
ff:fe:bb:7e:d8:c5:6c:3c:b0:bc:20:36:f0:0a:4c:
fb:e7:ce:d1:12:86:53:d2:9f:6d:f0:d5:6f:fe:cd:
58:6e:d2:15:25:01:ea:61:a4:f1:7d:67:a6:f5:d8:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:30:19:1B:88:39:5B:E4:97:A1:25:81:8F:D9:33:97:0B:FD:2C:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38951F34C61D11EFB39EDE5C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.137.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a1:6a:6a:60:ad:14:67:8a:69:19:c5:9d:96:68:64:09:a2:
ad:13:dd:cc:53:07:7e:00:b5:1e:a2:96:cd:a4:65:fd:f4:23:
64:38:ef:cf:e2:e0:a3:50:46:eb:7c:57:99:1f:df:ce:19:47:
9a:4d:59:70:ae:3e:a2:c8:b2:82:a5:f4:21:e2:cc:d6:08:5a:
ce:5d:46:59:d1:19:66:1e:d5:54:36:54:b5:4e:1c:82:25:a8:
50:db:c1:27:57:fe:a4:1e:8c:17:f0:cc:07:42:a1:15:61:7e:
25:fd:65:90:a8:86:5a:e7:e9:a3:0e:93:7b:43:12:04:27:8c:
f0:62:12:7c:ab:37:e4:bc:5f:29:e7:07:75:68:dd:ff:18:7b:
13:18:39:b3:79:96:1d:3e:56:09:75:51:9b:b8:42:3b:90:9f:
26:28:2d:b1:30:be:8d:f2:80:7c:e4:aa:40:55:29:b3:82:b5:
9f:ef:92:08:92:60:01:51:41:d6:8a:5b:e7:5f:e7:8c:7a:f5:
73:69:e6:6b:c7:97:d8:e6:49:0f:ae:86:46:1a:de:5c:a2:70:
90:56:1e:73:3d:f9:5e:b9:58:79:2b:ed:38:0b:f1:25:54:c1:
93:3f:4d:7b:5e:3b:16:9a:e7:88:e3:40:95:72:e5:ab:4f:b5:
73:2a:05:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:17 2025 by rpki-client