Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235A1B48C35111EF88A2449F762E951A.roa
File: 235A1B48C35111EF88A2449F762E951A.roa (raw, json)
Hash identifier: 36CKbs1HHr2pl/CuwgaTJu83iaIOSiVrk7kzSJaROj0=
Subject key identifier: AC:69:16:59:55:88:38:23:D0:BE:A2:03:05:6E:39:F3:81:68:59:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125A9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235A1B48C35111EF88A2449F762E951A.roa
Signing time: Thu 26 Dec 2024 06:17:52 +0000
ROA not before: Thu 26 Dec 2024 06:17:49 +0000
ROA not after: Sun 12 Dec 2027 06:17:49 +0000
asID: 17561
IP address blocks: 154.95.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75177 (0x125a9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:17:49 2024 GMT
Not After : Dec 12 06:17:49 2027 GMT
Subject: CN=676cf510-240c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f1:0d:7a:3f:ff:28:96:f2:7f:ff:07:60:78:
81:d6:4a:89:6b:ac:89:02:e8:3b:46:25:b7:2f:55:
d9:37:ad:55:da:19:cd:8f:4a:66:7f:cd:66:8f:ad:
d5:65:c0:2f:67:86:af:dd:52:ab:47:6f:77:3d:03:
0d:b6:d6:f3:c1:fb:50:6e:c4:73:09:69:aa:cc:d9:
34:fa:07:78:82:64:46:d0:c4:a3:20:2b:38:a3:0a:
6f:4c:d5:44:49:82:64:39:0a:74:9f:eb:16:a7:ca:
c8:02:37:46:0e:da:d2:aa:8d:ac:a9:e3:fd:0a:a9:
f9:5a:eb:81:fd:c3:82:58:c9:29:12:a4:9a:45:c4:
95:0b:d0:ca:9b:18:b4:55:6e:b6:0e:4f:ea:4d:1b:
b5:07:32:04:ca:6b:98:c3:b5:66:4b:5e:58:53:ba:
05:e6:47:82:82:95:77:2c:03:21:4b:3f:a1:2c:1e:
48:b1:34:a4:9a:1e:7c:41:82:d1:8f:54:e1:90:cb:
e7:3a:c2:5f:15:c4:c7:71:16:a0:39:5d:52:00:ea:
09:af:97:f0:c1:3d:0f:50:6e:6f:b0:a4:1f:98:e5:
ab:fc:9f:37:21:ce:15:cb:55:c0:de:3c:c9:f2:89:
cb:ca:fa:3b:2a:67:16:c2:22:bd:3e:a0:48:3a:27:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:69:16:59:55:88:38:23:D0:BE:A2:03:05:6E:39:F3:81:68:59:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/235A1B48C35111EF88A2449F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.49.0/24
Signature Algorithm: sha256WithRSAEncryption
07:cb:e7:44:c7:f2:b3:49:50:db:6e:55:7b:49:e7:ec:ec:88:
c9:b5:b5:02:49:3d:de:bd:a9:fd:c4:a9:00:9d:b1:89:a4:00:
30:a9:fa:37:2e:0e:1b:18:4e:24:2e:2f:60:a3:07:fd:66:db:
08:c8:05:39:d4:9f:f2:cc:ed:6f:e5:74:f7:b2:7a:74:c0:42:
6a:52:19:e5:bf:57:18:b7:b8:28:5a:0c:f0:fc:71:f5:97:e8:
78:b4:b9:d1:2d:fd:d0:45:26:12:af:8a:08:18:6e:d4:a3:6d:
13:6a:23:7c:0e:b4:92:e4:b4:cd:a5:23:7c:67:19:ed:c8:a1:
a2:c1:32:8e:65:c1:e3:56:45:b2:5b:00:8f:60:5b:4e:04:f1:
e0:27:7f:90:09:66:d1:cc:a3:ec:a5:05:25:e3:b4:ea:16:1f:
4b:ce:25:c4:ce:fe:68:84:70:b7:4b:7c:14:78:02:5c:76:ce:
88:ce:2f:a5:35:56:6e:1a:2c:8e:36:fc:db:ab:e5:89:51:d9:
99:41:70:b8:0b:e1:48:9f:70:8b:18:86:b7:0a:36:84:bf:37:
1e:c1:82:ac:a2:f0:34:fd:70:0a:90:48:e6:01:3b:6f:6e:1e:
90:84:0e:a5:d9:93:1b:fe:be:4f:e3:c2:44:cc:38:b6:a7:38:
6d:ee:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:50:49 2025 by rpki-client