Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD697C4F47A11EF9541E85B762E951A.roa
File: 3FD697C4F47A11EF9541E85B762E951A.roa (raw, json)
Hash identifier: k2vB50gRQldsHliXlqiDPKDE+olBjW4LADDVI/BQawo=
Subject key identifier: 0F:B4:94:58:ED:55:64:BF:FA:A5:B5:57:3B:4C:2B:F7:26:BD:B1:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0165C0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD697C4F47A11EF9541E85B762E951A.roa
Signing time: Wed 26 Feb 2025 19:45:37 +0000
ROA not before: Wed 26 Feb 2025 19:45:33 +0000
ROA not after: Sat 19 Feb 2028 19:45:33 +0000
asID: 17561
IP address blocks: 154.94.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91584 (0x165c0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:45:33 2025 GMT
Not After : Feb 19 19:45:33 2028 GMT
Subject: CN=67bf6f60-9218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ed:0a:d8:1d:81:20:06:4d:a7:01:37:e1:a3:
ae:f2:3b:c5:79:2a:32:92:87:e2:f8:7e:0b:ed:62:
20:be:71:9c:3d:d7:e8:ac:2a:28:62:e9:e8:32:76:
2d:0c:b5:99:91:02:a8:d0:4b:b2:ca:a3:7e:cf:7a:
d3:b8:f4:77:84:5f:7d:cf:03:0f:55:9c:e7:e1:d8:
23:a9:23:56:22:e3:c3:14:a4:ba:30:c2:ed:c3:d2:
37:70:d0:b8:a3:43:f1:d3:00:b2:ec:d5:ea:5e:28:
9e:78:c7:c5:de:a8:29:14:7f:93:b8:9a:d3:13:61:
84:66:71:f9:58:2d:95:33:78:b0:f8:54:a2:12:c1:
3f:6f:63:b0:fa:a7:bb:d2:e8:f8:0f:38:cd:31:2e:
80:61:8a:78:89:1d:7a:4d:d4:05:3e:72:03:25:15:
45:34:89:5f:a2:a1:14:f3:39:5d:f0:f0:61:1e:4c:
ee:33:93:c7:46:b3:bd:1b:dc:0a:4c:8b:1a:13:68:
b4:04:24:18:ac:ab:dc:72:39:9e:0d:ce:e9:31:a8:
22:7c:32:d9:74:64:a4:e1:d9:c9:32:7c:c5:54:a0:
d6:7e:b3:6d:49:b0:cc:6a:58:16:1d:95:d1:90:ee:
19:7a:dc:5e:7f:43:59:a9:17:6b:81:02:38:60:2e:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B4:94:58:ED:55:64:BF:FA:A5:B5:57:3B:4C:2B:F7:26:BD:B1:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FD697C4F47A11EF9541E85B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.17.0/24
Signature Algorithm: sha256WithRSAEncryption
00:6b:a0:87:54:3a:2b:87:95:8c:c7:e0:fc:c7:33:70:e8:21:
78:7c:92:42:a8:f3:39:82:39:9b:c5:cb:8d:bc:8c:a7:d4:6f:
67:b8:7a:2a:f4:26:4e:2f:2f:7a:a4:29:e6:4e:1b:33:a3:cc:
f4:53:83:d6:8a:c4:d1:9f:5b:b2:22:e7:48:99:f4:84:c4:be:
11:e4:37:85:9b:fb:25:37:c7:cf:05:a3:ae:0f:65:fc:14:02:
fa:79:aa:c1:60:e4:32:9b:a0:e6:bc:5c:ff:f4:07:63:aa:56:
24:43:2f:c1:de:ce:8d:c2:4a:5b:c6:00:a7:38:52:de:24:17:
e2:e8:b8:22:c0:24:eb:88:a8:be:66:cc:ab:b9:e8:0f:6d:a5:
17:de:59:53:60:3d:1c:4c:83:eb:ac:b8:63:13:a0:9b:10:01:
9a:25:09:ea:32:de:a4:36:62:eb:11:80:ee:1d:19:11:f8:7f:
60:d8:71:9a:88:42:f9:16:6d:a9:a9:00:a2:96:4a:34:3a:a8:
96:28:3f:20:3b:f9:35:e9:80:52:b8:f2:3f:8a:06:3c:0b:4d:
a9:5b:5b:f9:7e:3d:df:71:b7:4e:1a:dc:68:31:9d:d5:5c:9b:
1e:c9:01:e6:96:ab:5b:fc:be:54:b8:c7:f7:d9:b0:31:a3:dc:
b6:74:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:39 2025 by rpki-client