Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DCD7584E6DC11EFAFC201A3762E951A.roa
File: 8DCD7584E6DC11EFAFC201A3762E951A.roa (raw, json)
Hash identifier: QIIAcnDhOWNQ1/S+rBdlDqebkn5wEjA+ii19LEcTDzQ=
Subject key identifier: 23:05:EC:D6:E0:5F:47:0B:89:B9:12:11:87:37:08:2F:61:D9:ED:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015513
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DCD7584E6DC11EFAFC201A3762E951A.roa
Signing time: Sun 09 Feb 2025 11:54:02 +0000
ROA not before: Sun 09 Feb 2025 11:53:58 +0000
ROA not after: Fri 11 Apr 2025 11:53:58 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87315 (0x15513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 9 11:53:58 2025 GMT
Not After : Apr 11 11:53:58 2025 GMT
Subject: CN=67a8975a-4a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3a:04:cf:0c:b1:11:14:53:82:0c:5d:9d:3f:
cf:8f:2f:ae:19:84:8f:6e:59:f8:c2:16:42:c3:45:
bf:47:f3:4e:cc:1c:35:cf:1a:be:d7:fe:09:b9:c1:
e1:3d:c4:99:46:97:cb:79:09:23:71:dc:b1:75:43:
47:45:35:c6:ac:2a:d0:b0:b5:c0:e9:dc:98:1d:04:
84:38:ae:d3:ef:c0:19:0f:27:42:e5:4e:8a:56:76:
08:55:c6:31:91:dc:d1:21:7a:65:4b:2f:c0:15:04:
41:d2:44:22:31:0e:ca:b2:d3:b7:87:37:ba:31:c9:
ce:5e:ec:b0:6b:d1:d9:95:c6:b2:21:21:27:af:ce:
69:c1:43:bb:21:64:54:86:cf:43:a1:73:a0:67:78:
ea:3f:57:f7:cf:c5:a4:8b:a5:e7:0b:90:eb:ed:3d:
89:8a:9e:18:58:41:48:5c:48:6e:36:8d:8a:35:0e:
3e:0a:b4:33:4f:7a:4c:3d:e4:10:5b:35:0e:09:96:
e5:eb:ba:40:4a:a9:b9:7a:27:1a:c2:a7:6f:50:a7:
65:43:c5:2e:38:8c:ce:72:29:0a:00:fe:77:1d:95:
8c:73:e2:ce:d6:68:57:ad:63:58:19:1e:b7:b5:ed:
b1:54:76:30:9f:41:4c:6e:39:14:12:d8:0d:6b:67:
5a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:EC:D6:E0:5F:47:0B:89:B9:12:11:87:37:08:2F:61:D9:ED:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DCD7584E6DC11EFAFC201A3762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:68:ad:7d:88:3b:5d:bc:59:c3:81:c7:40:5c:e7:30:35:25:
76:e3:92:85:3f:ea:d6:b8:43:a1:b8:ad:97:d6:a7:49:24:57:
6f:97:68:8a:76:a9:ae:f8:54:13:43:fd:fb:02:bd:0c:ab:4e:
a6:48:f0:f7:e1:95:00:2c:7d:a8:10:96:95:4d:42:81:fb:c6:
18:70:51:4b:aa:d3:66:72:f3:bc:b3:5a:ce:90:a1:cc:0d:2d:
49:fa:14:83:60:12:f4:48:86:28:b9:fa:f4:c1:3a:bb:ce:d0:
45:f3:5b:fb:80:d2:80:8c:a2:90:8a:fd:72:c0:44:4c:c1:e4:
25:2b:9f:cf:c7:5b:e5:31:c0:00:6e:b2:0d:bc:c8:f8:95:b4:
85:90:a4:b6:f3:b7:83:31:80:8e:1c:bc:2a:4d:a2:ad:b5:74:
bd:e1:c5:f8:a7:57:9c:19:a9:13:ec:5c:e4:5a:56:5a:7e:f7:
84:f4:af:c1:45:5d:c6:d1:ac:3b:6b:37:28:ab:b9:68:db:c0:
9e:be:4d:25:50:e0:de:71:0e:a5:44:be:4c:0a:16:41:96:14:
9f:63:db:cf:28:dd:97:0b:1a:3e:72:36:7c:3e:4c:53:d7:22:
ce:0b:ff:81:f6:b4:f9:6e:6f:ff:a4:be:d3:29:79:c6:61:0f:
18:c7:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:05:46 2025 by rpki-client