Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4868A682F39B11EF899E6854762E951A.roa
File: 4868A682F39B11EF899E6854762E951A.roa (raw, json)
Hash identifier: OiRjeQ+1ONE5YovUYJwibLGjt+5zcuhC6I2XQu9pOps=
Subject key identifier: 88:5C:86:5E:EF:C5:F6:A2:04:9C:AA:EB:75:25:F1:A8:6F:64:1B:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FB6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4868A682F39B11EF899E6854762E951A.roa
Signing time: Tue 25 Feb 2025 17:09:33 +0000
ROA not before: Tue 25 Feb 2025 17:09:30 +0000
ROA not after: Wed 09 Apr 2025 17:09:30 +0000
asID: 138915
IP address blocks: 154.95.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90038 (0x15fb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 17:09:30 2025 GMT
Not After : Apr 9 17:09:30 2025 GMT
Subject: CN=67bdf94d-f81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:c4:14:7e:f2:53:8c:40:c6:18:9e:94:73:
bf:ca:09:13:41:cb:56:f6:c1:c0:57:77:45:fb:fd:
c1:62:c6:9c:18:d6:e5:1c:15:57:fc:ce:00:6d:27:
5c:cc:9c:c3:c8:63:77:ff:fc:a7:5d:32:93:3a:88:
00:b1:d1:9d:cf:2a:e2:3b:10:a1:d6:d2:97:23:8f:
1a:c6:7d:4b:a8:3a:9c:4b:7e:25:18:d9:49:63:2c:
68:29:83:12:da:3c:8e:4c:a6:27:4f:3b:eb:59:51:
55:15:11:1f:47:7e:7f:a6:09:aa:ef:cb:fb:85:51:
43:79:04:e2:e5:81:66:86:c2:94:21:1a:c3:16:ca:
60:00:00:1d:32:b5:95:51:1c:75:31:12:63:b6:d3:
ff:b1:ad:82:30:e2:df:14:34:f5:8e:10:3e:d8:1e:
1f:bd:68:75:61:18:dc:fa:d1:f5:e8:9c:9a:ae:22:
2b:8b:4c:37:01:ba:12:78:d2:4c:b1:ea:ea:30:c7:
f0:a7:ff:28:d0:2a:aa:c4:3f:b4:9f:41:24:5b:7b:
97:98:a4:3c:8d:f7:65:fe:5e:c5:85:d9:08:a6:f7:
e3:0f:69:a5:c3:db:d2:bc:c2:80:c7:21:d9:67:6f:
e4:c2:f2:63:c8:23:13:77:76:24:2e:25:0a:69:4c:
96:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:86:5E:EF:C5:F6:A2:04:9C:AA:EB:75:25:F1:A8:6F:64:1B:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4868A682F39B11EF899E6854762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.91.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4a:05:60:b3:12:bd:ee:f0:a9:a4:0d:06:27:1a:00:d0:53:
0b:22:8b:f8:9f:0e:2c:a2:48:cc:1c:2d:37:88:63:cb:c0:41:
28:f5:fe:49:b3:f0:44:ef:c5:55:e4:a5:15:ba:90:a9:30:60:
26:79:33:f7:ba:ae:0f:b4:2d:5d:92:75:d3:83:d6:78:f1:6d:
c2:f9:13:0e:e5:73:47:f6:b1:55:cd:fe:ce:11:89:5d:6e:66:
de:62:eb:a1:c8:62:02:ba:0f:2e:44:0e:26:48:9a:1e:b2:ca:
cf:2f:28:d2:25:32:49:14:ce:4a:01:ad:17:5d:80:fe:85:b9:
0b:6b:08:32:80:d8:78:99:0a:54:3b:56:c0:ea:a5:c9:8f:73:
b0:9b:25:af:fe:30:be:1b:e4:b7:c6:ea:3e:e1:64:a4:dc:e9:
2a:66:2b:cb:0b:f7:91:00:13:39:f6:20:16:e0:8f:83:bb:c0:
09:a5:d0:e2:01:97:6f:9c:14:ff:29:0f:68:0c:28:df:c9:5a:
c9:69:12:e2:d9:69:f9:37:d0:27:01:e9:26:9e:0f:f4:54:b9:
72:2a:f5:82:36:22:70:64:dd:47:be:c9:a8:74:7a:8f:0c:3b:
30:0f:0b:8a:cc:55:8f:5d:08:05:72:57:02:e5:f7:43:8a:94:
f2:51:96:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:43 2025 by rpki-client