Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37742328C34F11EF84144894762E951A.roa
File: 37742328C34F11EF84144894762E951A.roa (raw, json)
Hash identifier: r83OLdH17Xz+T8u4uWOypBrkpAk/Ot/ioELd2ez+pbw=
Subject key identifier: B4:BD:2E:D8:D5:A5:BD:7F:37:D1:3B:42:CF:64:66:9A:6F:0B:63:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012595
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37742328C34F11EF84144894762E951A.roa
Signing time: Thu 26 Dec 2024 06:04:07 +0000
ROA not before: Thu 26 Dec 2024 06:04:04 +0000
ROA not after: Sun 12 Dec 2027 06:04:04 +0000
asID: 17561
IP address blocks: 154.95.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75157 (0x12595)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:04:04 2024 GMT
Not After : Dec 12 06:04:04 2027 GMT
Subject: CN=676cf1d7-1ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:ff:f8:2f:31:86:d9:11:e2:5b:1e:bb:7a:
9f:5d:2f:73:ba:d7:a1:a7:9f:4f:9f:f1:98:aa:82:
a2:ab:e1:52:34:31:be:51:6c:92:d0:5c:7c:fb:99:
cd:51:e8:be:bf:ec:1a:19:0e:74:c2:32:8f:29:62:
30:09:0d:37:1c:55:c7:20:77:47:a5:3a:2b:34:3b:
4c:22:15:c9:d8:80:1e:a0:e2:67:c7:a7:c8:e0:c5:
21:f8:5c:22:6d:c2:86:62:8a:89:9a:db:c2:f7:a6:
1a:c4:37:68:d5:31:ee:55:ff:ed:c1:02:ea:b5:a1:
03:37:8d:a2:0d:f7:f6:a6:d2:af:43:7e:b5:42:67:
7c:81:cb:a7:8a:b2:5f:86:01:cf:de:e0:ca:90:77:
3d:e2:e5:8b:10:66:85:83:38:c7:35:4e:7e:24:97:
bf:d0:63:a0:85:b6:50:10:b3:97:56:ab:0e:8c:41:
ad:a7:62:3b:2f:36:06:0d:62:86:16:97:11:1a:7b:
20:bc:4f:91:9a:f5:d4:30:93:e7:3a:1d:70:29:cd:
5c:49:1b:eb:8d:a3:02:5f:f4:a6:cd:bc:e6:68:7f:
79:3c:9c:b3:07:fd:82:e2:5a:ac:86:a4:7e:c8:fc:
33:b2:bb:0c:f8:9b:e9:d4:f9:4b:3f:44:2e:e4:46:
72:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BD:2E:D8:D5:A5:BD:7F:37:D1:3B:42:CF:64:66:9A:6F:0B:63:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/37742328C34F11EF84144894762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.19.0/24
Signature Algorithm: sha256WithRSAEncryption
23:df:17:1a:be:d1:84:dc:06:34:13:fb:2f:79:c0:bf:4a:03:
af:e3:2d:d5:f4:7e:84:a3:92:1a:38:f8:dc:96:04:d6:e0:8d:
93:fd:e9:b7:6c:07:77:3b:12:93:64:ef:eb:c5:7e:ca:3f:53:
4d:43:54:b1:08:8a:73:5d:31:f3:8a:52:94:8d:60:29:9d:f6:
32:55:8c:cc:34:28:d8:a8:be:63:c1:a9:77:7b:04:54:da:d5:
ce:bc:82:b8:d3:ad:79:9d:35:58:13:16:ab:4d:2c:45:b1:fa:
e8:45:df:0f:d9:be:f9:5c:fb:10:48:3c:1f:f4:f5:01:6e:e8:
1c:f8:fa:fa:c5:91:82:2a:8a:a2:0a:df:f7:92:56:35:43:aa:
1e:de:90:28:83:39:b1:56:b0:3f:99:61:2a:7d:15:21:a0:bf:
0b:d7:22:54:3c:99:1c:3a:4e:7f:44:32:31:7e:82:42:ad:1d:
75:e6:ca:d7:9e:d4:8c:77:59:30:35:a7:7a:b7:6b:fb:2d:17:
94:f9:58:0d:95:4c:a9:0b:7e:94:f9:69:6d:79:81:d7:e6:f5:
5b:0f:11:dc:4e:0e:f4:00:15:ab:2d:09:45:15:dc:c3:60:a6:
69:c4:92:3f:60:fb:47:0c:8b:15:e9:09:50:ee:fc:9c:f3:ff:
49:ab:54:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:54:05 2025 by rpki-client