Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D0A5AA2F46611EFBF4C7853762E951A.roa
File: 9D0A5AA2F46611EFBF4C7853762E951A.roa (raw, json)
Hash identifier: p5HFHBB1vkplH9hOh9j4uyZYKmidxTQBEkUjHhOxzCc=
Subject key identifier: F4:94:D1:64:3A:33:D9:94:B6:9A:D2:91:EE:A7:9C:FD:51:CD:80:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016548
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D0A5AA2F46611EFBF4C7853762E951A.roa
Signing time: Wed 26 Feb 2025 17:25:03 +0000
ROA not before: Wed 26 Feb 2025 17:24:59 +0000
ROA not after: Sat 19 Feb 2028 17:24:59 +0000
asID: 17561
IP address blocks: 154.197.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91464 (0x16548)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 17:24:59 2025 GMT
Not After : Feb 19 17:24:59 2028 GMT
Subject: CN=67bf4e6f-4171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:9e:e5:ac:1b:bd:5f:c7:1e:fb:00:94:d6:
08:2d:ac:dc:b4:fa:14:ce:df:4c:37:b3:53:5f:fd:
12:fd:de:49:ce:20:0d:d9:a2:5e:fa:6b:8f:71:a6:
a7:e7:89:46:32:f6:a9:9e:88:03:25:05:9d:35:cb:
a4:93:26:33:d8:18:c4:b4:24:f1:40:81:4c:75:5f:
35:3b:29:40:5f:03:e7:03:5a:b4:a7:5f:22:56:8d:
c3:23:77:c5:8d:02:5a:ac:4a:cb:14:99:55:b0:b8:
77:f4:60:70:6d:87:4f:92:44:f3:ec:31:d0:a1:72:
9d:9b:00:db:e8:2a:bb:bb:fa:ad:28:00:10:90:ad:
04:38:61:34:12:82:c2:3a:4f:aa:0c:43:4b:ed:d7:
00:a4:50:f1:ac:c6:45:49:3d:6a:e0:5a:1c:d5:29:
99:0d:bd:4e:04:6e:20:26:fe:b1:ca:db:f6:f6:c0:
5e:d1:ab:a4:ec:ff:49:0c:11:b5:51:94:dc:05:a1:
99:dc:8b:bb:95:07:97:a5:d0:ec:7e:7e:2f:af:7e:
5d:0b:2a:21:82:60:e0:f4:79:8e:d5:0c:60:8e:e9:
41:bd:85:9d:24:5e:79:37:bf:91:8c:fc:cd:cd:31:
25:4e:01:56:fc:b7:f8:ca:9c:66:f1:cd:44:79:97:
df:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:94:D1:64:3A:33:D9:94:B6:9A:D2:91:EE:A7:9C:FD:51:CD:80:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D0A5AA2F46611EFBF4C7853762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.95.0/24
Signature Algorithm: sha256WithRSAEncryption
22:32:30:d7:41:2f:c2:2a:bf:ca:10:0f:70:2c:44:c8:bf:7f:
c5:66:be:a7:b0:fd:a3:c9:dd:07:71:4c:72:c3:09:bf:8d:fc:
ad:fe:6e:ca:f8:68:24:8c:2b:77:8f:eb:fa:ce:e9:ca:ea:50:
51:bd:a4:75:84:b5:ea:ab:55:bc:24:b2:bf:ef:5c:4e:38:6e:
fd:c0:63:fa:f0:5c:4f:be:07:85:5b:19:9b:0c:40:5a:02:55:
b2:d6:d6:dc:22:54:9c:bb:9d:68:0b:85:e0:8e:7d:0b:71:9b:
28:7c:22:92:15:01:6b:5d:99:64:3f:83:49:54:28:de:91:d2:
01:3f:66:46:c7:0b:e4:de:7e:9a:b8:b7:77:b1:fd:c0:c3:43:
2e:22:24:fe:65:f4:61:40:04:a4:c1:af:c0:ac:16:dc:54:78:
87:6c:2b:91:bd:ea:3b:b3:61:df:fe:28:1c:7c:a1:bd:cf:b9:
4c:76:8e:d5:63:56:1d:f0:f7:ed:62:1f:65:68:05:2f:bd:c1:
5e:12:75:46:a5:99:bd:2c:5c:4d:9f:7b:cb:38:81:49:a3:8a:
50:15:dc:4e:5b:34:cc:93:b5:b9:38:ea:32:89:7d:08:a5:c0:
a6:d2:65:a8:4e:9e:4f:fb:de:08:fb:1f:0e:8e:ea:bd:45:3a:
25:1e:80:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:10 2025 by rpki-client