Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3318DCF5D111EFA5286D99762E951A.roa
File: 7E3318DCF5D111EFA5286D99762E951A.roa (raw, json)
Hash identifier: 5SmF/TPAww4WH5n6EVcxcWWPREGvpSSkQLjsPa4Jlvo=
Subject key identifier: D3:34:B9:03:6A:22:E6:C1:16:F6:34:BF:37:69:CE:6D:53:2C:1E:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B35
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3318DCF5D111EFA5286D99762E951A.roa
Signing time: Fri 28 Feb 2025 12:42:39 +0000
ROA not before: Fri 28 Feb 2025 12:42:35 +0000
ROA not after: Sun 30 Mar 2025 12:42:35 +0000
asID: 203020
IP address blocks: 154.200.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92981 (0x16b35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:42:35 2025 GMT
Not After : Mar 30 12:42:35 2025 GMT
Subject: CN=67c1af3e-4286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:70:68:71:1d:f6:20:ea:69:44:a2:11:23:
d5:34:5d:b1:7f:c9:51:d4:4b:61:3b:fa:e6:9d:40:
dd:20:9e:76:d6:54:4a:50:04:ce:81:e4:00:24:a2:
55:b3:e7:de:72:3d:5d:c6:d6:e6:24:9f:eb:f1:98:
a9:22:c8:10:03:53:d0:c7:72:aa:85:68:f9:b0:20:
d7:06:b7:bb:45:fb:e1:23:83:32:8d:87:5f:0c:1d:
f4:29:73:f0:b6:a3:2a:b5:89:68:c1:d8:c9:ba:c3:
ef:32:76:4b:2b:04:59:d2:70:07:e3:db:86:2d:ec:
03:4c:b7:c3:46:84:b9:b5:ed:77:25:8e:0b:ac:8e:
a8:42:50:f5:55:fc:8b:22:a8:85:31:5f:bb:f5:76:
ad:d5:d4:33:e9:84:9a:b7:e9:69:8a:6d:a6:9b:f7:
5e:29:64:2c:ad:6b:de:95:ce:22:ef:83:35:61:c4:
b0:8e:31:13:a0:ca:cf:2e:1a:66:87:d2:58:d6:bb:
2b:ca:ef:16:a4:d1:41:f8:bc:2b:49:96:01:f1:8d:
aa:77:32:30:97:d2:a7:15:92:d4:88:ed:22:32:2e:
cf:66:ca:66:19:d6:ae:c6:7c:71:57:cd:c8:f9:2c:
14:16:31:7d:67:d3:7b:8c:86:3f:6c:e4:cc:65:cb:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:34:B9:03:6A:22:E6:C1:16:F6:34:BF:37:69:CE:6D:53:2C:1E:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E3318DCF5D111EFA5286D99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:51:75:72:72:e8:0f:0f:81:63:12:ea:e9:39:e7:93:3d:47:
8e:ce:b9:9f:2b:80:18:02:da:e0:c1:a3:a6:3e:68:e5:58:dd:
f2:21:f9:61:76:f5:1e:9f:8a:73:b4:67:b2:2f:f5:37:ba:fb:
a7:1d:81:a1:b0:97:b5:ae:33:2f:80:dc:98:8d:8e:d7:25:05:
55:06:3e:2b:53:76:1b:e4:93:87:d7:1c:d6:38:98:78:b9:66:
24:32:4e:33:a1:0f:72:3f:4d:b9:f6:1d:4d:8f:ac:28:14:1e:
11:71:3d:aa:9f:e4:21:17:c2:bf:89:d9:52:7d:db:b8:e1:32:
48:db:fa:93:cd:7e:a5:4c:78:0f:42:9d:90:32:cc:30:ab:9a:
12:d2:38:5c:3a:01:fe:08:a0:a7:95:60:eb:22:b1:6a:ad:7a:
f6:e3:9a:66:22:3d:17:2c:b8:df:11:9e:8a:39:31:24:ec:73:
22:1e:02:aa:72:2c:a2:38:ae:22:c1:d4:3e:cc:04:67:ea:d2:
2d:4f:1f:77:63:de:35:6a:b7:5f:56:93:82:a4:13:cc:55:b5:
6e:54:17:36:37:5c:7e:ad:41:7a:93:7d:6c:9c:d6:95:db:f8:
83:fe:88:03:1e:63:ef:22:ee:7f:97:3b:39:43:38:0b:5e:55:
80:65:b4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:03:49 2025 by rpki-client