Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BA69CCAC25811EF940C3762762E951A.roa
File: 3BA69CCAC25811EF940C3762762E951A.roa (raw, json)
Hash identifier: tKrb4KjMedfQUONP/Ra/W2naT9WEWAQtSgp0wOrltlM=
Subject key identifier: 3A:15:40:53:1F:DF:F6:79:C7:3F:DD:B9:EE:DD:56:C8:1A:E0:EA:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01234B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BA69CCAC25811EF940C3762762E951A.roa
Signing time: Wed 25 Dec 2024 00:36:09 +0000
ROA not before: Wed 25 Dec 2024 00:00:05 +0000
ROA not after: Wed 10 Dec 2025 00:00:05 +0000
asID: 984
IP address blocks: 154.199.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74571 (0x1234b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 25 00:00:05 2024 GMT
Not After : Dec 10 00:00:05 2025 GMT
Subject: CN=676b5378-f6d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ac:27:6a:3e:63:b8:90:b6:57:53:2b:3a:a9:
41:c9:b8:2b:59:a3:cd:1e:7d:6f:68:d8:24:2b:8e:
eb:ea:0f:c6:86:5d:b4:7e:16:80:f0:3d:1b:74:51:
59:3d:eb:b5:a9:02:bb:8e:0a:d7:f5:33:68:f9:17:
09:e8:48:1c:ae:8d:fc:23:af:b9:4f:78:42:7b:6a:
26:35:73:a4:83:0f:ca:2b:a6:bd:88:e1:70:fa:af:
7f:10:3e:6f:1d:40:a0:20:cb:89:f2:61:70:11:d8:
27:50:4c:aa:4d:e7:80:e7:50:4c:e8:10:42:81:79:
1e:f0:c1:92:39:bc:fc:05:96:3b:af:8a:90:94:95:
f1:08:42:a4:80:82:c9:59:0a:41:f5:e7:4b:45:2e:
aa:ef:07:82:1c:14:35:5b:24:23:25:9d:0b:13:d0:
84:6b:ef:4e:c9:64:b3:82:cc:ab:40:ca:af:c3:56:
f8:04:e7:6c:d6:97:c9:b8:00:d4:77:2f:c6:fe:90:
89:7e:8f:d9:3a:e5:69:3d:b3:fe:df:a8:d9:34:a5:
06:fa:1e:e7:66:37:3b:78:ad:2b:e1:67:a0:8c:6f:
bf:20:7b:8c:8b:bd:e9:5f:23:94:ee:5b:90:39:22:
5b:f1:86:cf:ff:72:73:8c:ba:4f:9a:a9:7c:22:76:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:15:40:53:1F:DF:F6:79:C7:3F:DD:B9:EE:DD:56:C8:1A:E0:EA:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3BA69CCAC25811EF940C3762762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.51.0/24
Signature Algorithm: sha256WithRSAEncryption
38:97:f6:61:9c:8f:4f:1e:7a:d9:20:1d:1d:d7:b5:40:ae:62:
cd:e2:59:d1:43:ec:98:3a:be:21:ef:a0:57:78:5f:1d:4d:09:
3c:96:a1:07:41:18:b2:c4:4d:18:fd:c2:89:0f:ad:52:7f:14:
fd:4d:8d:4c:c9:b4:1a:de:9c:00:5c:11:d4:61:e0:9e:dc:0e:
38:c2:39:4b:04:49:38:0c:3a:17:75:01:f7:11:fb:65:4a:76:
f0:66:8c:3d:ac:d6:57:93:a6:3d:85:90:38:20:13:40:50:b0:
69:d7:e9:3d:c3:e7:41:9a:69:15:52:9c:3f:51:6f:0e:21:c3:
22:4b:d7:90:9e:ea:f8:75:f5:86:6d:cc:c7:74:0f:ea:92:43:
6d:97:57:d7:71:96:59:b3:2e:33:c6:69:c5:05:ad:9f:5b:5a:
ea:f5:bf:1c:a7:05:2c:61:c5:b0:d1:7a:b4:5f:7a:b1:5c:91:
a5:ce:3e:59:f7:70:97:dc:e6:2d:8f:df:77:35:99:fe:c8:70:
c2:2a:a4:cf:09:a6:e3:8a:db:ae:0b:a7:3a:aa:eb:e1:46:af:
51:e2:0f:87:18:9b:f0:e7:aa:7f:8c:4e:ca:0e:2b:df:33:54:
13:17:e0:c1:fc:a6:04:bc:8e:1e:6a:1c:56:8d:19:53:2d:92:
ac:f8:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:45:27 2025 by rpki-client