Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7D46E14095111F08C779DA9762E951A.roa
File: A7D46E14095111F08C779DA9762E951A.roa (raw, json)
Hash identifier: ++v1Z0l/wOgr20AwwVqzQSpOdp42eMqJLqRtGD8ztIk=
Subject key identifier: 46:71:80:3A:10:48:8F:20:EF:29:06:5C:7A:38:AF:2A:7F:48:0D:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0175F7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7D46E14095111F08C779DA9762E951A.roa
Signing time: Tue 25 Mar 2025 08:17:56 +0000
ROA not before: Tue 25 Mar 2025 08:17:52 +0000
ROA not after: Tue 13 May 2025 08:17:52 +0000
asID: 138915
IP address blocks: 154.95.76.0/24 maxlen: 24
154.95.77.0/24 maxlen: 24
154.95.78.0/24 maxlen: 24
154.95.79.0/24 maxlen: 24
154.95.80.0/24 maxlen: 24
154.95.81.0/24 maxlen: 24
154.95.82.0/24 maxlen: 24
154.95.83.0/24 maxlen: 24
154.95.84.0/24 maxlen: 24
154.95.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95735 (0x175f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 25 08:17:52 2025 GMT
Not After : May 13 08:17:52 2025 GMT
Subject: CN=67e266b4-c7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:97:e4:e1:2e:f7:a5:45:9b:39:e7:44:c3:
1b:df:86:44:6d:41:b2:6b:22:4a:1b:2d:7b:3b:6b:
87:b7:90:a2:dd:f0:58:4c:fb:29:70:1b:52:ba:aa:
ff:b7:2f:18:03:dc:03:f9:42:ea:71:6e:60:f7:84:
2a:7d:52:c1:45:de:0b:01:a9:05:31:1e:fa:38:ca:
7f:4a:6f:fd:ca:02:6a:06:cc:37:8f:bf:18:b6:8f:
82:b3:04:70:96:54:52:29:fa:06:42:54:8d:84:f4:
cd:63:32:76:58:98:db:a1:50:33:6b:a1:10:1a:0e:
f1:c7:d1:98:b0:01:aa:91:f6:fe:e1:5f:2d:4c:59:
b2:cf:db:59:b2:1c:0b:58:c7:e2:d1:db:09:59:bc:
98:b1:55:e9:31:21:0b:04:ef:45:a6:88:27:83:fa:
e9:4f:d4:f7:31:b9:bd:fd:81:97:c2:d0:59:ff:41:
c1:1f:f5:54:87:42:75:a3:62:be:20:2c:0d:7f:d8:
5a:08:18:6e:bf:74:35:c4:ff:ae:d1:68:d6:9b:48:
d1:1c:ea:a0:4b:07:8f:21:eb:49:e8:b6:2c:6b:e0:
d9:4c:79:d4:63:c3:ab:07:ae:d6:77:34:5b:33:64:
6e:df:98:1b:9a:b6:27:82:29:d4:63:21:04:c5:55:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:71:80:3A:10:48:8F:20:EF:29:06:5C:7A:38:AF:2A:7F:48:0D:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7D46E14095111F08C779DA9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.76.0-154.95.85.255
Signature Algorithm: sha256WithRSAEncryption
09:5f:14:8b:ff:c1:62:66:86:b8:c3:37:43:2e:3e:c3:8d:98:
df:48:07:e2:99:4a:22:77:be:d9:8a:2c:f2:89:62:f8:c2:9d:
40:1d:b7:4d:b2:3f:e9:96:b9:71:3b:63:24:f5:d7:f6:5b:83:
a7:4a:17:a5:05:17:cf:0c:5f:3b:73:64:12:87:ae:3b:3e:bd:
a3:49:f7:6e:76:c8:cd:8b:2c:d0:b2:df:7e:87:05:b5:7e:16:
27:7d:1e:02:05:8e:d9:2c:f1:ad:a3:8e:22:b6:17:29:31:1e:
02:4b:0e:ae:6d:36:71:36:19:76:fa:f0:de:cb:a0:eb:76:3c:
11:22:6f:50:49:f4:d6:6d:b7:0e:7a:1d:cc:1f:38:9b:30:17:
8c:01:0a:74:7d:6d:7f:46:d9:8a:d7:04:b8:9f:a2:e0:2a:0e:
d8:ae:4b:b7:d6:f4:de:a4:97:9f:03:35:33:83:65:93:68:b7:
a3:5b:0b:ac:8a:4e:76:e3:89:94:27:16:e8:39:7a:a7:92:9a:
ba:5f:d7:f7:bb:e8:2c:96:58:44:9f:2b:fd:05:ee:2a:fa:a4:
f7:35:73:7f:48:28:33:cf:34:a7:7e:c1:73:73:4b:55:f1:ec:
9a:19:be:12:0c:38:84:42:9f:dd:f9:90:49:d0:b9:bf:ec:b2:
f4:13:13:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:05:27 2025 by rpki-client