Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E79E792F3D911EFB58B4170762E951A.roa
File: 3E79E792F3D911EFB58B4170762E951A.roa (raw, json)
Hash identifier: qhaCHvIECyC6UcIkFvC0emFYHNszUyzMc/7KicI3YeM=
Subject key identifier: 0C:74:DD:82:8D:00:56:44:50:DB:F7:25:91:0B:A4:96:B8:98:AB:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01603F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E79E792F3D911EFB58B4170762E951A.roa
Signing time: Wed 26 Feb 2025 00:33:05 +0000
ROA not before: Wed 26 Feb 2025 00:00:02 +0000
ROA not after: Thu 19 Feb 2026 00:00:02 +0000
asID: 984
IP address blocks: 154.92.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90175 (0x1603f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:02 2025 GMT
Not After : Feb 19 00:00:02 2026 GMT
Subject: CN=67be6141-0240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:0a:e9:78:77:12:6d:1d:be:c2:d7:8a:55:
99:30:eb:97:1c:33:49:13:96:3e:65:6c:6c:98:53:
83:dc:5d:ed:78:de:be:30:2b:1e:01:2b:b3:6d:29:
bf:16:54:27:cc:66:dc:1a:a0:e1:df:dd:ba:3b:17:
db:76:1b:28:e9:bc:af:1b:a6:6d:51:8d:a2:2f:d5:
44:dc:a0:34:da:ae:8e:b3:f8:9a:ef:16:4c:92:87:
8e:3c:18:06:6f:ca:c5:f3:d0:b0:8a:06:a6:b5:0e:
44:1c:b3:f2:1d:1c:23:2a:59:2b:d2:cc:40:0e:77:
02:f0:51:db:f7:5b:bb:3a:f3:17:77:c4:12:82:de:
7b:19:5a:3b:f8:71:d3:d3:c5:b4:f7:39:26:f3:de:
96:2d:e8:5e:02:f7:e8:88:cc:b4:b9:5d:17:0b:18:
07:d1:53:b5:b3:c5:3f:cc:48:3a:c4:98:a3:1f:4b:
f5:bc:dd:ea:d6:a2:b3:5e:7c:9f:59:26:fb:bb:dc:
3f:47:52:69:61:ac:91:b4:a6:8b:20:50:68:63:70:
07:e1:29:40:37:1f:81:0a:46:ea:66:ca:d1:9a:8e:
0f:d0:84:dc:a8:c6:1e:8b:8f:19:3e:c2:bd:9b:b4:
2b:83:72:a0:3e:30:2d:ee:53:79:ef:9d:74:fd:57:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:74:DD:82:8D:00:56:44:50:DB:F7:25:91:0B:A4:96:B8:98:AB:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E79E792F3D911EFB58B4170762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.11.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fe:d3:1f:43:05:31:c1:45:00:4f:93:4c:13:d3:f4:38:34:
25:e7:56:35:c3:df:07:ed:60:50:b9:44:16:4c:b6:d1:93:dd:
07:e3:52:ca:41:4e:33:af:bc:75:73:3f:5d:29:00:70:02:a0:
c8:cd:ce:29:71:ce:42:12:b4:f5:c6:f6:b6:00:f2:81:89:4c:
06:94:09:d0:2c:7b:17:62:9c:8a:bf:f6:42:ae:0a:ee:98:7e:
14:99:a6:10:f8:ba:7e:8e:8d:e8:0b:0c:74:a0:bd:d5:30:b6:
17:7e:57:1b:eb:75:cd:c4:31:3d:37:82:c5:23:21:91:24:83:
ea:3f:e1:ee:b6:91:82:12:5c:43:1f:99:bd:03:58:67:92:71:
e4:8f:1b:b1:b4:30:cf:c6:9b:0b:18:03:20:a5:c3:6e:ba:2b:
d8:c3:60:15:76:13:0c:eb:e0:c9:2a:c2:bf:f6:e8:3f:e2:5b:
8f:18:22:48:54:01:0a:ea:96:f3:41:4e:76:bf:1f:0e:1c:55:
f9:a6:d7:97:5a:d6:5b:6b:16:6c:1c:25:dd:7e:23:99:42:87:
48:cd:ec:71:c7:bd:64:74:a3:d0:c5:ca:a7:eb:47:ba:ea:c4:
97:d0:02:3a:d5:33:10:3f:ff:c9:73:e8:3e:2d:3a:cb:61:b9:
4a:1b:76:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:28 2025 by rpki-client