Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F07EBFECDE211EFBFD85951762E951A.roa
File: 3F07EBFECDE211EFBFD85951762E951A.roa (raw, json)
Hash identifier: xtTuB3dzW5hLKuZiDAfEXjTgJXAdiwIyIVb+MdkXhAw=
Subject key identifier: CB:26:12:23:5C:09:52:AF:7D:4C:37:2C:1C:45:85:43:93:7C:FA:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F07EBFECDE211EFBFD85951762E951A.roa
Signing time: Wed 08 Jan 2025 17:01:48 +0000
ROA not before: Wed 08 Jan 2025 17:01:44 +0000
ROA not after: Sat 03 Jan 2026 17:01:44 +0000
asID: 984
IP address blocks: 154.89.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79817 (0x137c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:01:44 2025 GMT
Not After : Jan 3 17:01:44 2026 GMT
Subject: CN=677eaf7b-555d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:46:a6:b9:5f:46:90:0b:f7:14:3d:79:7a:
55:1f:79:ed:9d:df:81:db:fd:cf:78:03:52:1e:bc:
71:54:e9:fa:dd:8b:e9:d5:ff:a1:ad:43:47:f0:6c:
94:ad:50:f8:fb:18:9f:a8:17:6a:0f:d1:3b:ba:db:
43:a8:0a:05:57:03:68:61:80:df:05:7f:52:9f:91:
42:9d:5e:8f:6f:97:3e:a5:d7:0a:92:62:48:92:81:
8a:4d:60:f6:2e:71:1d:27:01:ad:c1:84:d9:f4:a5:
f8:43:4c:1f:4a:3e:cf:38:a6:23:66:b4:56:ee:81:
7c:c0:78:3b:76:2a:eb:21:cc:88:ea:53:cb:e0:f3:
c9:6d:34:75:35:ba:c5:7d:df:45:05:f6:b7:34:2e:
b5:4c:1d:95:f6:b8:28:fd:d9:65:f7:5c:86:83:51:
22:ff:a1:a7:50:07:ea:77:57:6f:45:1f:de:b0:2d:
89:7a:37:ff:cc:47:0d:78:61:a4:b4:7c:44:d1:cd:
f8:44:b5:69:74:f4:ed:2a:9a:e9:e6:b2:7d:fe:48:
5b:74:8e:87:4f:03:95:0f:c2:84:7d:37:14:65:aa:
aa:37:b7:2a:19:18:48:e7:4d:ba:72:58:e0:ee:b0:
04:b0:7a:00:35:eb:d6:14:61:a5:1a:3a:40:b1:b6:
05:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:26:12:23:5C:09:52:AF:7D:4C:37:2C:1C:45:85:43:93:7C:FA:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F07EBFECDE211EFBFD85951762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.179.0/24
Signature Algorithm: sha256WithRSAEncryption
39:2f:55:97:cb:de:f5:c7:7c:40:a8:bb:84:00:fd:a9:1a:73:
f1:42:f4:c0:61:e8:e5:01:fc:81:6c:bd:8f:b5:40:17:36:7c:
b5:e3:1f:fd:f3:ba:71:b2:ae:2c:f6:43:cb:91:ab:15:8b:fb:
07:3b:48:31:62:b0:2b:07:8a:38:12:6a:e6:98:d3:1a:b2:6b:
b9:08:9b:b6:49:b5:e2:28:7c:6a:8a:de:b3:10:86:c8:77:fb:
29:93:26:74:d0:c5:77:be:91:8d:d7:8d:b7:ab:c6:84:55:d0:
dc:bc:d8:c2:59:11:e1:a6:64:03:b6:6c:d1:99:12:95:87:9c:
10:57:c8:46:02:e3:52:85:f1:00:f9:49:53:0c:f7:18:91:4b:
9c:46:33:dd:3f:39:77:3e:7b:b7:3f:eb:ed:c9:75:6a:ad:7e:
23:b9:a6:1c:44:3b:d5:0e:f7:f1:b1:db:9d:b6:be:21:ef:34:
71:0c:34:43:64:71:95:2e:aa:57:39:6e:90:43:9f:2b:26:32:
44:89:1e:3b:53:e2:e3:8f:80:11:5c:06:ef:54:70:48:af:03:
c0:cb:0e:88:d2:6a:b1:cd:af:21:b1:ce:61:26:a7:d2:da:33:
b6:60:f6:7f:82:09:ff:8a:87:88:c2:0a:4c:4e:9a:6c:52:7f:
1e:08:83:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 18:37:25 2025 by rpki-client