Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B17635EC35F11EFB5E4E379762E951A.roa
File: 3B17635EC35F11EFB5E4E379762E951A.roa (raw, json)
Hash identifier: 7fbBR+VqcmrQa7rQqTbM4GHba4WAMkMsTrteeQ0+01U=
Subject key identifier: 2C:71:FD:CA:46:40:20:26:E8:BF:B5:4B:6F:DD:B0:46:9B:96:C9:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01262C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B17635EC35F11EFB5E4E379762E951A.roa
Signing time: Thu 26 Dec 2024 07:58:45 +0000
ROA not before: Thu 26 Dec 2024 07:58:42 +0000
ROA not after: Fri 12 Dec 2025 07:58:42 +0000
asID: 984
IP address blocks: 154.90.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75308 (0x1262c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:58:42 2024 GMT
Not After : Dec 12 07:58:42 2025 GMT
Subject: CN=676d0cb5-0d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e9:25:de:ba:25:ac:40:c8:fb:37:bc:54:21:
02:18:a5:04:71:64:20:e9:50:c1:ad:d5:ff:fd:a9:
7d:54:b8:31:f8:ed:5f:8e:69:28:ad:ce:b3:f4:99:
6e:a4:7f:cd:43:4e:7d:6e:24:ae:92:2a:1f:13:af:
3f:c8:39:75:14:54:51:0e:43:31:e1:9c:38:62:8d:
a7:c2:33:ca:8f:30:45:b3:6c:8f:2c:4e:66:07:0b:
80:24:77:65:09:2b:91:04:55:60:28:2f:4c:41:98:
33:a0:fd:7d:09:a9:60:b4:26:b3:76:1a:0f:5d:bc:
f4:b1:cb:e1:e7:e6:26:a5:8e:94:c0:cd:8f:be:c1:
50:86:39:bd:08:7b:6f:1b:a2:28:da:c2:2b:4c:3e:
3a:64:68:9e:29:03:d9:38:f7:4b:8f:a6:8c:b2:9b:
22:5b:ce:23:57:ce:9e:4a:32:81:37:3f:72:e0:c2:
a5:8f:71:5f:aa:f3:c7:df:bc:30:f7:8f:65:75:8a:
79:cb:7a:30:96:62:5e:c8:52:70:a0:38:de:78:2b:
4f:cf:60:fb:49:da:6a:2e:96:41:61:a5:47:f9:e3:
c6:07:69:e2:95:ea:4e:fd:6c:ea:19:63:3f:1e:50:
2a:2d:55:66:78:01:10:2e:99:cd:3c:af:47:11:b1:
de:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:71:FD:CA:46:40:20:26:E8:BF:B5:4B:6F:DD:B0:46:9B:96:C9:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B17635EC35F11EFB5E4E379762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.29.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:54:22:86:93:d6:ff:1f:db:6b:5f:19:96:2c:e8:4c:56:fb:
7e:81:0a:20:2b:4d:cd:cb:e5:30:3e:56:e9:45:56:27:ee:3f:
a8:b1:36:dd:85:94:84:a5:44:d8:ae:8c:15:4c:07:1b:38:11:
03:68:13:2c:0d:3a:35:ec:da:44:67:fc:67:65:ea:da:71:cd:
8a:03:a7:3c:16:66:7c:a9:1a:8f:a8:6a:ac:22:42:d3:cb:35:
c0:7c:dc:7a:f8:d6:68:db:4e:f8:38:2f:43:27:1a:3c:ca:2b:
64:38:65:95:01:29:9b:58:0a:71:a0:b8:72:24:8b:cd:92:5c:
45:e1:a4:36:5e:c6:1e:fa:9e:55:11:47:04:3a:d1:7d:a3:6f:
c6:73:40:1f:b9:99:a3:2a:20:27:36:1b:e3:17:88:f8:93:87:
d5:1d:24:ef:18:e4:e3:c4:b0:dd:10:79:70:7e:16:5d:4f:8b:
ce:49:86:71:8e:84:41:ff:e0:27:92:a7:6e:13:9d:d0:55:82:
f2:de:b8:89:82:21:b4:42:36:bb:a8:b3:e0:2b:76:8b:ca:b7:
c7:1e:37:3f:3c:25:b8:f2:17:38:e3:e7:6c:65:0b:9e:62:e0:
b9:fc:f8:46:e3:64:dd:ee:4b:a5:c6:4c:c6:58:86:7c:bc:87:
7f:20:f5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:47 2025 by rpki-client