Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E68186F39A11EF9A51AD4F762E951A.roa
File: 87E68186F39A11EF9A51AD4F762E951A.roa (raw, json)
Hash identifier: a9r3Lpu3ZB6E8fshro2IueQGJUjkejuMRCuE8ZYDcFI=
Subject key identifier: 17:8B:01:6D:77:5E:76:92:A9:F7:0F:0B:8C:6C:1B:17:00:02:F6:B3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FAA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E68186F39A11EF9A51AD4F762E951A.roa
Signing time: Tue 25 Feb 2025 17:04:10 +0000
ROA not before: Tue 25 Feb 2025 17:04:06 +0000
ROA not after: Wed 09 Apr 2025 17:04:06 +0000
asID: 138915
IP address blocks: 154.95.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90026 (0x15faa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 17:04:06 2025 GMT
Not After : Apr 9 17:04:06 2025 GMT
Subject: CN=67bdf80a-089f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:90:2a:f1:1d:d3:0c:62:8b:ad:e2:77:f0:
83:c0:c8:43:6d:80:a6:66:f2:64:2a:40:6f:a2:1b:
ce:e8:62:6a:3c:46:e4:fe:48:e2:f8:4f:38:f4:33:
ba:ed:6a:94:e7:91:5b:a7:08:84:8c:ef:2e:26:00:
13:af:80:3e:69:ab:3e:95:53:8c:ae:99:43:0a:09:
04:8b:55:8b:db:32:ef:31:ed:98:45:c0:c5:a1:f7:
50:d3:5f:8c:2a:9d:15:43:ca:f6:e9:e5:92:85:a9:
ee:f2:10:84:70:3c:b1:07:29:fa:61:b5:16:ae:94:
71:5c:62:00:e7:c5:21:1d:2d:86:fa:64:4c:dc:22:
1e:8d:e5:0a:f8:89:7e:09:b8:42:be:5d:e2:31:4a:
2a:38:06:75:fa:c1:01:b2:5a:b2:61:c2:fb:e6:b5:
34:20:44:db:dd:27:03:4d:22:bc:a5:e4:bc:87:c3:
ce:96:d1:02:3f:1d:1c:5d:12:40:47:62:e9:df:59:
0e:d9:30:2b:6d:42:41:b7:51:af:8c:56:de:ae:54:
5a:70:29:18:02:f9:be:03:4e:58:04:15:c4:8c:c2:
65:25:88:76:2f:87:1c:f4:6d:54:56:44:55:f9:7d:
11:b2:06:e3:be:3d:cd:89:e1:ea:bd:24:33:f1:59:
4d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:01:6D:77:5E:76:92:A9:F7:0F:0B:8C:6C:1B:17:00:02:F6:B3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87E68186F39A11EF9A51AD4F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.93.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:72:4e:4b:a3:e1:7e:08:ea:1c:8f:aa:4d:ef:c5:84:7c:7e:
ee:0d:52:fd:45:81:96:a7:17:50:6c:8f:8a:d7:17:cd:d3:b8:
6f:38:b0:3a:ed:ac:50:0b:ab:a5:d2:2d:5e:d0:dc:94:61:18:
75:d7:e2:ac:7c:ce:47:95:09:02:92:32:87:6d:8e:b1:90:31:
7b:ea:2a:28:6e:ef:b8:98:51:15:83:64:1c:3e:e1:f1:51:47:
b2:9c:26:1a:c5:13:48:80:f7:a6:51:d4:0d:f6:86:03:df:2d:
60:3f:41:04:2a:c6:92:7c:2c:0f:b8:7a:ed:e0:16:1e:bd:70:
0b:0f:7d:65:9a:15:ef:78:56:d5:82:b5:de:08:cf:40:5e:53:
33:57:9b:68:50:82:c9:c3:12:7d:73:98:32:23:b5:b5:ea:fa:
b2:f0:dc:9e:ad:b2:83:8e:26:a3:ba:d7:5f:76:a0:b9:56:ef:
01:da:87:ad:e8:64:93:14:ec:28:25:4e:88:8f:03:3f:07:61:
92:3a:86:43:1c:3c:d5:50:2c:d8:52:fb:6a:70:ad:fc:56:1b:
2e:e1:9c:ae:4f:53:4b:27:06:13:fd:96:a2:51:fd:11:e1:64:
97:0c:51:b2:d7:df:0c:e0:a7:55:1c:47:60:e5:04:be:2c:c9:
a2:a9:69:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:43 2025 by rpki-client