Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69AC5A92C35211EF9FC6C0A7762E951A.roa
File: 69AC5A92C35211EF9FC6C0A7762E951A.roa (raw, json)
Hash identifier: XkbkuLQcTQrPj/AoB71UTj5VJYy+1XxoW5WAS6YWly4=
Subject key identifier: 36:82:60:75:F9:8C:53:59:43:9D:1E:4E:2B:B4:D8:19:C6:08:BF:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69AC5A92C35211EF9FC6C0A7762E951A.roa
Signing time: Thu 26 Dec 2024 06:27:00 +0000
ROA not before: Thu 26 Dec 2024 06:26:56 +0000
ROA not after: Sun 12 Dec 2027 06:26:56 +0000
asID: 17561
IP address blocks: 154.88.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75191 (0x125b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:26:56 2024 GMT
Not After : Dec 12 06:26:56 2027 GMT
Subject: CN=676cf734-6a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:cc:fe:1d:85:2d:e9:40:5f:fa:ec:a1:b0:
91:ba:f1:b5:79:33:59:63:57:df:38:20:8a:19:f9:
12:2c:8b:79:08:de:41:b9:b5:e5:aa:15:fc:9e:a0:
57:43:42:16:26:be:d0:24:e6:55:ce:b8:0b:3c:29:
63:a0:58:05:de:c5:c7:7a:a6:f2:16:f1:a7:f6:fe:
42:44:1a:e9:bc:a3:11:a3:39:b9:5e:c7:a8:02:c9:
40:cc:03:8a:7c:28:f5:dc:11:17:cb:4e:23:72:f4:
57:1f:c5:0a:32:9e:f6:3d:c7:66:b5:a1:2d:76:06:
91:a7:64:07:05:bc:9e:84:9a:72:57:52:03:d4:fa:
8f:6c:e4:89:3d:50:4b:44:7f:b1:79:aa:4f:78:09:
cf:e3:1d:95:69:0d:a3:fd:6e:ed:12:30:67:52:63:
eb:6c:93:96:6a:bd:9f:69:48:79:23:bf:b0:90:3c:
eb:ba:16:1f:ee:2b:86:88:02:a9:a9:41:67:85:71:
57:a9:d9:74:9c:ba:b1:78:ed:77:af:b2:37:b9:74:
66:37:ba:89:3c:aa:ea:81:12:25:27:6d:3d:ff:03:
86:fe:3b:8e:5d:be:7c:6f:20:fa:74:1a:95:7b:f8:
d8:62:2b:67:9d:e6:c3:61:e7:b6:60:01:1f:40:34:
ed:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:82:60:75:F9:8C:53:59:43:9D:1E:4E:2B:B4:D8:19:C6:08:BF:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69AC5A92C35211EF9FC6C0A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.3.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:a1:fc:9f:62:ae:23:30:8b:2c:28:e2:48:fb:4b:da:66:4d:
02:65:5d:3e:15:97:4c:28:7d:56:4b:72:cb:9f:7f:ef:0a:39:
27:52:da:35:68:f5:bc:2c:02:47:69:53:1a:17:ae:74:f5:bc:
1d:e0:42:f9:bf:56:99:57:d7:23:ab:29:24:0f:ec:63:fe:6e:
98:4b:21:a3:cc:96:d6:0c:40:2b:af:9c:9b:80:34:75:d8:a2:
a0:2b:c2:fd:06:21:5f:fb:7e:8d:a7:4c:6b:a4:95:40:8a:a8:
db:c2:4e:f5:cf:e1:d5:0a:88:c6:2e:06:41:99:b6:45:e0:4d:
bc:8d:ca:db:70:1b:29:87:f3:d7:d1:28:7f:e3:85:a0:49:54:
5a:a1:1e:04:09:22:e4:dd:7f:43:a5:87:e0:1c:89:0b:e6:69:
14:d0:b9:ab:0b:55:b4:26:9b:09:62:8f:e9:13:2c:e9:c6:31:
10:f6:f3:34:97:a1:76:d8:92:ed:cd:26:e6:ac:7d:59:8d:32:
a2:ee:15:b7:08:a4:15:f0:f6:16:7e:98:67:c0:a8:57:5d:d4:
44:75:fd:78:40:10:b4:2c:c8:5b:0e:cc:67:fe:6c:4b:4c:44:
00:fa:83:6a:8b:4c:d4:20:01:26:58:07:07:52:80:b1:65:37:
0b:6b:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:53 2025 by rpki-client