Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAF1C32F47511EFA2AE97B8762E951A.roa
File: 6FAF1C32F47511EFA2AE97B8762E951A.roa (raw, json)
Hash identifier: EKyEUK/D2qOl2AKnI9UIe93KnUa1vd9k6OSoxHvb53M=
Subject key identifier: EF:F9:7C:34:EC:D8:2E:7C:06:B8:DD:2D:03:23:62:CD:DF:B7:05:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01657E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAF1C32F47511EFA2AE97B8762E951A.roa
Signing time: Wed 26 Feb 2025 19:11:09 +0000
ROA not before: Wed 26 Feb 2025 19:11:06 +0000
ROA not after: Sat 19 Feb 2028 19:11:06 +0000
asID: 17561
IP address blocks: 154.218.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91518 (0x1657e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 19:11:06 2025 GMT
Not After : Feb 19 19:11:06 2028 GMT
Subject: CN=67bf674d-2799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:a2:1d:1f:9f:1f:cc:21:be:17:a7:34:af:
7a:90:a7:6c:3e:e2:64:67:81:40:83:ab:d5:0b:3c:
d6:8e:00:ef:5e:0e:62:a5:18:0b:df:b4:12:44:d0:
06:ea:4f:51:31:f6:75:d8:7a:d5:6e:c9:6f:bd:bd:
63:27:08:d4:29:fa:f6:1d:b7:9e:b7:92:ed:96:7b:
ca:6a:02:de:45:62:b8:a6:50:7a:ab:b7:68:87:07:
e9:c3:b1:6d:a2:75:01:fe:b9:57:81:3f:e4:15:d8:
9e:b5:16:14:7b:63:b4:4d:f2:54:36:9c:c6:65:ba:
4e:91:75:be:bf:de:c1:3e:36:e8:f0:93:7f:ad:7d:
e5:a4:e0:86:0e:44:cb:61:e6:58:65:3f:a7:0e:ac:
03:37:c9:af:b6:0a:43:dd:2a:03:95:09:a2:a0:77:
3e:28:ce:44:e9:28:4c:37:44:86:29:04:67:6b:e9:
8b:e4:1a:91:f5:05:44:ac:84:31:af:cd:bd:72:e7:
5f:df:df:41:1e:78:53:7e:39:47:13:bf:8d:9d:6c:
e5:95:49:ad:25:97:20:a4:90:af:0c:be:90:3c:e6:
78:56:c7:b4:61:77:4e:58:0a:e6:80:39:df:fb:d5:
c3:50:5c:da:79:a1:a7:76:9c:71:ae:29:1c:c8:7a:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F9:7C:34:EC:D8:2E:7C:06:B8:DD:2D:03:23:62:CD:DF:B7:05:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FAF1C32F47511EFA2AE97B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:5c:5d:fa:91:ef:41:51:83:43:ca:7e:75:fd:26:74:cb:9f:
57:40:b2:b5:95:92:d1:c3:f9:80:1b:77:4e:88:6b:f6:27:04:
a9:4b:1b:9b:ec:33:71:4e:06:94:47:bd:e8:f5:de:1d:03:1a:
4c:fa:df:e0:9c:b1:f7:fa:8f:78:ce:22:30:ea:43:8f:d2:c6:
27:ff:a8:d1:5a:0a:e3:48:18:ff:e2:dc:70:03:68:51:04:14:
e7:fa:d4:6a:42:fb:7d:0a:dd:f8:73:20:c7:3b:b1:ee:2a:8b:
01:39:71:cf:82:75:d8:ba:3d:d9:c0:8a:52:e0:bd:5b:43:d4:
4a:c1:06:8e:5c:8f:76:47:12:b2:53:71:84:02:07:db:e7:7a:
5e:b5:63:c8:64:b5:6c:72:dc:a7:57:56:6e:b0:52:c4:84:88:
b1:16:fc:71:a8:d3:b1:c6:97:82:cb:d6:c9:27:fe:16:b7:82:
7e:c6:40:93:c8:4f:49:f2:65:ff:46:f0:d0:9b:c3:b2:47:60:
95:25:ed:35:f0:44:b2:dc:54:8f:10:76:97:34:18:76:3c:26:
3b:fb:9c:38:49:a0:82:50:07:d0:b2:fc:c7:40:00:f4:3f:51:
c5:e8:01:44:38:b9:cc:13:e9:7a:04:3b:1c:78:fb:a4:45:74:
36:15:60:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:48:19 2025 by rpki-client