Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39ED0D30DFE311EFB833696F762E951A.roa
File: 39ED0D30DFE311EFB833696F762E951A.roa (raw, json)
Hash identifier: r5HzdFwPg742s0re6VoKCgsMgPLTPNGoVRRQ0lu+bSc=
Subject key identifier: A4:6D:06:68:28:70:10:5E:18:5F:73:0E:D8:F9:89:29:C4:5D:8C:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014DCA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39ED0D30DFE311EFB833696F762E951A.roa
Signing time: Fri 31 Jan 2025 14:54:09 +0000
ROA not before: Fri 31 Jan 2025 14:54:05 +0000
ROA not after: Sun 04 Jan 2026 14:54:05 +0000
asID: 211392
IP address blocks: 154.83.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85450 (0x14dca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 31 14:54:05 2025 GMT
Not After : Jan 4 14:54:05 2026 GMT
Subject: CN=679ce411-d8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:d8:fd:88:75:ee:e3:00:ac:5f:04:b1:c3:
a9:22:83:94:5f:90:2d:c4:25:c4:ee:16:50:e7:76:
33:9e:14:29:af:9e:3c:ee:18:77:23:bf:39:2c:7a:
45:58:0b:46:fd:05:11:49:ac:56:c3:cb:2c:ce:02:
aa:6e:8b:eb:47:17:4e:d6:40:92:b9:c7:2e:c7:44:
a1:4a:e9:5e:a6:9d:0d:0e:4d:6a:03:20:d1:b8:31:
96:9a:d1:2f:75:e2:b7:28:41:7f:b6:4d:da:8e:11:
cf:63:5c:62:7d:89:cd:e9:50:89:fd:7e:06:98:ce:
8a:b5:0d:6b:80:b7:8c:a9:08:30:ab:7e:a5:53:69:
8d:eb:6f:f1:83:33:20:53:68:ed:3a:91:92:d5:ea:
74:35:04:27:9f:75:d2:02:f3:5d:94:2c:02:a2:b9:
95:b7:b3:31:2a:13:4b:25:76:e4:cc:d0:64:3a:c7:
b5:24:fa:6f:df:0d:7b:fd:d7:3f:5f:e4:76:6b:75:
5a:48:d8:8c:14:49:37:37:ec:db:11:e6:95:f1:a1:
86:d3:6d:07:8a:97:73:82:22:a0:64:b9:58:ff:ad:
18:6d:7f:0a:53:74:d6:70:57:14:25:e8:1b:09:28:
16:42:af:53:49:0c:53:28:3c:a2:92:5b:43:9f:9e:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:06:68:28:70:10:5E:18:5F:73:0E:D8:F9:89:29:C4:5D:8C:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39ED0D30DFE311EFB833696F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:b0:45:0e:84:0b:17:df:cb:92:c8:b6:cc:ee:0a:e6:59:d7:
06:d1:dd:66:4d:ea:ec:00:29:e8:da:8c:55:08:b8:f1:36:de:
68:20:c7:ab:9a:9e:d3:8d:5a:6e:84:8c:33:cc:20:cb:5a:08:
8d:0e:13:02:94:9f:42:d2:e6:19:ee:e9:c6:cb:00:46:83:63:
e5:65:3e:4c:1b:47:a9:3f:b7:af:c4:9a:ad:75:b2:94:31:38:
49:18:92:cb:3c:7c:b5:ef:86:c7:f1:57:77:8d:2e:52:e5:4a:
1c:24:32:20:39:6e:7d:d2:08:b4:aa:72:f5:7d:cb:03:a3:12:
6d:e1:02:7f:d2:6f:8e:c3:f2:ea:95:e5:b4:63:ec:5d:d2:e7:
69:93:37:25:b0:47:8e:cb:67:f3:26:b2:5c:37:e9:52:20:42:
74:3c:64:31:32:70:aa:0f:34:bc:8a:cf:53:00:f3:72:16:05:
3f:4d:54:37:cb:ee:33:05:4b:42:40:6f:3c:14:38:e7:d0:a6:
53:2d:c2:4c:33:de:19:7f:50:1e:76:8f:c4:be:88:10:48:09:
b3:0c:d4:b8:7e:a7:f8:e1:19:cc:f5:2b:b0:e8:af:52:3b:32:
d3:5c:9e:a9:03:59:4e:5c:3f:8a:d8:41:29:e7:68:4f:84:11:
24:04:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:20:58 2025 by rpki-client