Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45976F14CF5C11EF9F9D83BA762E951A.roa
File: 45976F14CF5C11EF9F9D83BA762E951A.roa (raw, json)
Hash identifier: 73HC2pwh+Q4G83xlSL18hAf/5N2qu+j/mlfMmVt1g+M=
Subject key identifier: 3F:DD:76:23:83:37:9D:DE:5F:B1:41:55:32:C0:6D:39:43:03:8D:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45976F14CF5C11EF9F9D83BA762E951A.roa
Signing time: Fri 10 Jan 2025 14:07:48 +0000
ROA not before: Fri 10 Jan 2025 14:07:45 +0000
ROA not after: Wed 10 Dec 2025 14:07:45 +0000
asID: 984
IP address blocks: 154.199.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80369 (0x139f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:07:45 2025 GMT
Not After : Dec 10 14:07:45 2025 GMT
Subject: CN=678129b4-4df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:a5:78:fe:f8:9d:bd:6b:ec:22:b2:cf:9c:
6c:0f:40:6d:ae:04:40:61:29:90:70:0f:db:f0:b8:
86:1d:23:70:6f:61:a0:38:47:67:b0:2d:2e:a2:76:
50:06:a1:e5:ef:7e:b2:18:1f:94:e6:89:d5:2e:87:
4a:78:32:24:8e:a2:dc:07:f2:2a:fa:ee:93:33:9a:
37:b0:9e:09:bc:5d:14:75:8f:44:42:0a:eb:59:28:
20:4d:76:a7:e7:13:a0:1d:aa:1a:b6:4a:d6:78:8b:
b0:36:37:45:1b:8b:91:5d:11:51:d1:c7:9c:da:13:
fc:7a:37:ec:91:05:78:1d:8c:5d:21:11:e8:b0:64:
fe:89:7d:b0:65:89:57:a5:08:49:dd:ee:8a:2e:da:
79:cf:a9:87:ce:85:92:11:bd:1c:1d:4b:46:95:f0:
75:b4:ae:a7:a6:d1:34:4d:09:98:e5:ff:01:5a:ad:
c1:31:68:f0:ae:d1:63:c4:ad:9e:8e:b5:c3:f2:33:
6c:13:7a:2c:96:c9:fb:77:47:90:83:23:bf:30:58:
8e:69:da:7d:5e:c7:a5:12:2f:9e:14:1f:4a:84:98:
fc:7c:f8:82:8f:77:81:dd:ec:68:0b:bb:c5:a8:72:
03:74:e1:95:9e:63:90:59:37:49:ea:5a:89:b9:5e:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DD:76:23:83:37:9D:DE:5F:B1:41:55:32:C0:6D:39:43:03:8D:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45976F14CF5C11EF9F9D83BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.38.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b2:de:12:92:16:2f:6f:3f:cb:f6:ad:f3:cb:df:07:38:4e:
72:81:22:5a:2f:c7:3e:aa:2e:8c:e4:56:2d:be:ff:99:c3:60:
3c:ad:5d:53:42:2c:50:59:9e:15:ad:6c:05:59:8d:b6:19:d6:
77:f6:67:fc:3b:5f:79:87:aa:75:bc:fd:97:c8:b9:72:6a:2e:
a4:be:40:cb:b8:b3:b8:7d:95:e8:60:21:af:33:e5:ab:b8:fa:
3a:23:6e:a5:a6:4a:4d:d7:05:4a:5d:87:f6:67:e5:68:d9:31:
78:60:71:d9:ac:d5:69:b2:2b:93:eb:50:1f:db:3d:37:e8:14:
24:87:00:cc:07:26:0c:59:0f:a7:2b:bc:43:be:59:6e:a9:86:
79:6d:a4:9b:12:b5:ea:90:1c:29:7d:97:2f:70:f9:4a:07:05:
e2:8a:db:60:ab:bb:19:4a:4a:e3:df:1f:b5:84:22:11:0a:b1:
e7:e2:12:9c:b8:92:0c:d0:dc:ca:3f:87:bd:56:98:cc:8f:07:
12:5c:3d:b5:6d:69:90:2d:73:f0:80:ae:cf:66:4e:9d:39:fe:
c2:3e:3c:54:b7:49:f9:bb:d4:13:cb:ed:4a:00:53:9b:b6:da:
84:95:b2:ed:8e:80:91:bb:ae:39:69:89:d9:e5:ce:f8:30:b9:
8b:4d:67:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client