Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0355A75CFF2B11EFA8A7E797762E951A.roa
File: 0355A75CFF2B11EFA8A7E797762E951A.roa (raw, json)
Hash identifier: U7gSIyXTopFG8FeOds3wttrFQzWAvSMExKaz0C8IVj0=
Subject key identifier: 68:23:EE:1C:1E:9A:2B:0D:4D:FE:8A:59:D9:12:77:18:40:FF:26:11
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0355A75CFF2B11EFA8A7E797762E951A.roa
Signing time: Wed 12 Mar 2025 10:16:08 +0000
ROA not before: Wed 12 Mar 2025 10:16:03 +0000
ROA not after: Thu 24 Apr 2025 10:16:03 +0000
asID: 138195
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95201 (0x173e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:16:03 2025 GMT
Not After : Apr 24 10:16:03 2025 GMT
Subject: CN=67d15ee7-0574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:46:77:9d:1d:ab:6b:08:18:de:15:c5:b1:00:
c7:07:a3:a0:fd:b8:1e:a5:c5:11:ff:a2:a3:11:9d:
cf:91:72:85:d2:1a:31:cf:7f:f8:f5:84:c4:83:8a:
f2:a8:5d:18:7d:c2:73:79:36:51:c8:f2:92:7e:d5:
2b:82:14:b6:94:fb:40:8b:1c:80:be:58:a6:df:99:
67:5b:26:a9:6f:a3:f7:2b:2b:87:df:5c:90:e7:de:
e3:66:72:d6:00:db:8f:95:25:2d:03:1b:99:70:03:
c6:3b:60:67:2a:bb:2d:5b:92:b2:e0:e1:2a:c7:c7:
f0:72:f0:b4:5f:78:ec:8b:45:02:3a:22:c8:1f:c1:
44:86:87:47:b2:59:fe:83:d6:32:fa:ec:ee:09:c4:
86:bd:80:5a:62:a7:d5:4a:da:f5:3d:03:eb:cd:bd:
28:c9:05:b4:91:d0:12:72:72:29:05:3f:ca:d8:d0:
4f:9a:d0:5c:7d:e8:61:43:e9:71:b6:0c:00:9a:2b:
1a:6d:ef:f7:8b:cd:9d:bb:c7:6b:64:6f:4f:f8:8b:
d7:3c:62:16:e9:7a:b6:15:52:e1:0f:0e:04:21:0c:
78:08:46:f5:10:84:bf:3c:7d:81:66:cd:34:ef:ca:
4a:65:06:97:5e:58:bc:77:ff:a9:f0:3e:3f:2b:c4:
af:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:EE:1C:1E:9A:2B:0D:4D:FE:8A:59:D9:12:77:18:40:FF:26:11
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0355A75CFF2B11EFA8A7E797762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8d:fd:b0:25:63:62:f0:75:ab:c9:27:20:f6:cf:e4:d4:37:
fe:02:be:f8:ff:5e:e9:5c:7a:fc:d4:7f:f5:50:ea:3b:f0:6d:
eb:fb:44:85:17:ca:ba:be:4e:78:1d:a4:3f:f1:17:be:c2:c0:
80:cd:4f:f7:40:14:bf:97:16:13:70:64:93:92:38:14:ad:40:
0a:d6:30:b1:86:bd:f2:ee:a4:98:ce:0f:1b:ed:35:42:3c:36:
ce:3e:da:65:b0:5e:8f:11:91:4f:b2:cd:ae:9c:47:a3:07:25:
41:71:29:37:6a:ad:9b:fb:d7:b2:f4:63:f1:8b:3a:7c:94:d3:
e1:1e:9e:19:db:30:96:c7:89:c9:14:d4:a1:5a:ed:1e:3a:f5:
2d:cf:4c:f6:35:17:57:04:06:25:b8:f4:1c:c0:ef:85:90:18:
a6:11:2c:63:70:66:f4:98:64:5c:d2:5d:eb:e7:cf:fd:7b:43:
39:a9:ea:ca:57:bf:96:39:3d:64:49:4e:83:76:e1:24:d2:ba:
e5:e1:61:c6:f2:a2:3b:d3:4e:be:45:98:fd:47:40:4a:b0:c3:
62:d9:2f:dc:a2:57:4f:1a:68:5c:b2:1d:57:ab:78:7c:78:4e:
6c:12:65:61:b7:44:fe:5c:01:42:6b:61:cc:af:c2:9e:60:a4:
1d:97:02:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:04 2025 by rpki-client