Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C435C960F5CC11EFA655C978762E951A.roa
File: C435C960F5CC11EFA655C978762E951A.roa (raw, json)
Hash identifier: Dt3qnGIOMoF11lDrVKh4rELoXvGfnj+7G2ERviNaPxE=
Subject key identifier: C2:3E:7A:12:13:71:F1:B2:68:1F:7A:F1:85:AE:41:EF:5C:FD:8D:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016B12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C435C960F5CC11EFA655C978762E951A.roa
Signing time: Fri 28 Feb 2025 12:08:49 +0000
ROA not before: Fri 28 Feb 2025 12:08:45 +0000
ROA not after: Fri 11 Apr 2025 12:08:45 +0000
asID: 138915
IP address blocks: 154.203.146.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92946 (0x16b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 12:08:45 2025 GMT
Not After : Apr 11 12:08:45 2025 GMT
Subject: CN=67c1a750-f838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:dd:c5:ea:03:e8:8e:8d:b4:a7:6a:a9:ca:
05:cd:34:32:fd:d2:12:39:bd:d1:38:2e:52:76:ae:
b7:99:e1:8f:51:67:22:08:0f:cf:22:4c:f1:da:46:
66:eb:8b:4c:40:a7:3a:3c:9d:61:4c:19:4e:e6:c6:
fc:7a:b0:d0:bf:a3:f6:c3:64:13:11:d7:c0:41:e7:
f7:20:ab:28:e5:7c:c8:35:08:6b:1a:a4:22:ca:ef:
b9:dd:b9:7f:68:b2:64:a7:f9:a2:57:05:b7:88:44:
6a:09:09:5d:99:8a:b9:a7:a2:2a:73:d8:d3:69:79:
d1:83:56:09:5d:ba:d9:41:a4:5c:4a:23:2b:dc:0d:
3c:89:f2:f4:a7:a0:80:f9:1e:06:7f:ef:ba:dd:26:
fb:b0:48:5d:83:aa:bc:03:4b:bb:ed:76:97:65:a7:
3d:83:99:2b:a5:7f:e7:ac:ee:ea:af:a3:0b:b7:f1:
b7:2f:19:44:69:6e:0f:e4:aa:ee:9f:43:a4:e9:06:
48:19:81:b0:6e:97:5f:73:a3:28:8e:29:99:36:cc:
fa:41:a6:ef:94:f2:6d:b2:32:cb:5b:38:6b:09:3e:
43:28:d9:e5:31:ef:02:a4:f9:cc:0b:55:44:38:1a:
3b:9f:8e:91:89:d5:cc:e5:d0:46:84:7f:7e:26:f5:
ef:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3E:7A:12:13:71:F1:B2:68:1F:7A:F1:85:AE:41:EF:5C:FD:8D:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C435C960F5CC11EFA655C978762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.146.0/24
Signature Algorithm: sha256WithRSAEncryption
06:ff:df:e4:5a:99:ad:30:17:c9:a7:51:fb:cf:50:7f:c7:40:
d1:ec:bc:e7:cb:45:98:01:04:09:04:9f:c6:4b:36:bd:01:97:
39:b1:62:3d:fa:73:ee:0e:32:e0:9f:4c:90:f5:69:73:75:be:
5a:de:12:00:6c:d4:86:5f:77:f4:75:00:03:a4:b0:80:3f:6e:
7d:fe:ed:48:24:0b:e9:e7:c8:03:a2:dd:7b:de:e4:f9:bb:3a:
9c:b3:31:e2:94:37:fe:7c:5b:9f:1c:d9:f5:e1:c1:91:51:0b:
83:41:55:65:98:fb:50:08:8c:4a:10:11:68:c0:29:a6:7c:5b:
63:d6:47:e2:9c:4f:39:b9:db:89:e2:d8:09:74:2c:95:f5:2f:
7c:9e:14:d2:cc:ac:64:79:7f:b7:01:db:26:f8:7b:23:fc:bf:
7a:6e:02:37:96:b3:45:a5:bd:5f:aa:61:ff:ce:96:c3:ed:54:
2d:7c:cd:5a:15:91:e9:22:70:c3:79:af:8d:92:57:9e:34:3b:
e0:ce:a1:e6:86:c9:9e:e3:2a:e7:de:2c:c7:39:53:cd:d7:ff:
89:6c:d8:af:ec:1a:09:1c:f5:2e:0f:61:74:d1:42:c9:10:eb:
9c:9d:eb:0b:37:7e:fd:3b:76:47:99:0e:26:6b:2a:37:b7:96:
03:ab:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:36 2025 by rpki-client