Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81395C0C35011EF9DFBD89E762E951A.roa
File: C81395C0C35011EF9DFBD89E762E951A.roa (raw, json)
Hash identifier: 9apJGSeZNR95QqIRUglMEH2+TbBJc14VT3QgG6DGyqk=
Subject key identifier: 05:FC:B6:7E:69:75:EE:86:36:EF:84:DA:69:F1:F9:74:E8:CD:5E:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81395C0C35011EF9DFBD89E762E951A.roa
Signing time: Thu 26 Dec 2024 06:15:19 +0000
ROA not before: Thu 26 Dec 2024 06:15:16 +0000
ROA not after: Sun 12 Dec 2027 06:15:16 +0000
asID: 17561
IP address blocks: 154.95.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75173 (0x125a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 06:15:16 2024 GMT
Not After : Dec 12 06:15:16 2027 GMT
Subject: CN=676cf477-5dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:35:d3:c5:0f:98:00:51:11:bd:26:fd:49:
f1:55:77:9b:ee:0e:a5:70:da:e2:56:d9:17:76:92:
23:e9:e2:47:76:bf:f8:a8:e6:74:57:7a:82:20:d8:
cf:e6:98:fd:08:c4:dd:c4:a1:15:2c:b3:84:26:fd:
ef:db:ab:4d:37:cf:f2:b2:9c:0d:41:18:7e:8f:99:
f1:de:b2:76:62:b7:54:e7:b0:4d:db:36:7e:0c:70:
37:2f:b2:97:8f:a9:8e:79:fe:65:60:01:cf:0a:00:
3e:09:78:bc:53:69:56:b5:ba:ad:8f:0d:3c:74:c7:
0b:e3:30:30:bb:b7:15:23:6f:bc:e7:7b:c3:c6:f8:
d9:a7:48:0e:4f:9d:b0:55:e0:5b:da:2a:4d:3b:4a:
54:6a:39:75:71:dc:a1:ee:37:e4:63:4f:50:e1:19:
4e:4a:66:8c:91:91:00:28:05:84:4e:13:dc:7a:22:
96:88:ec:7f:97:08:9e:af:94:89:81:28:72:43:36:
6d:ac:43:b9:ef:f2:99:ef:a1:e0:ec:a5:58:ea:99:
d7:2f:5f:b2:bc:69:9f:7b:0b:db:24:40:56:4b:95:
66:f3:e5:5d:e4:90:7f:10:2b:ad:70:b9:bb:b0:1f:
ed:c6:44:8c:bd:93:35:59:f1:64:71:50:8b:9d:8a:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:B6:7E:69:75:EE:86:36:EF:84:DA:69:F1:F9:74:E8:CD:5E:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C81395C0C35011EF9DFBD89E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.31.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e0:4b:19:8a:81:db:cc:e1:3a:e3:f7:0e:20:c2:82:3e:59:
e7:3d:a7:60:32:74:2b:23:4b:46:1c:8a:b1:36:97:9f:e5:9a:
77:dd:db:de:38:85:4b:cc:48:03:54:af:d3:4c:57:9f:78:9f:
2f:4f:dd:48:16:54:b2:8e:93:66:34:e6:83:89:84:72:01:bd:
b7:50:c7:96:04:df:03:27:f0:4a:a0:c8:8b:46:c4:0e:77:c1:
2c:c5:a0:e7:00:ee:f5:72:16:43:96:02:45:c3:43:c0:80:b2:
12:61:24:48:c3:64:06:ed:e6:09:bd:cd:15:6f:ce:84:64:96:
46:70:22:3f:16:5d:ed:07:b6:7b:0b:68:f4:53:d3:47:8a:16:
d1:43:3b:61:2f:0f:8d:e1:07:a2:a6:25:be:b2:2b:9f:16:8c:
26:06:50:e8:21:3d:cb:16:25:df:d9:38:54:1a:97:64:58:e2:
ce:ec:53:b4:a7:df:b4:df:fd:79:0f:70:9d:26:43:fd:63:48:
85:b3:60:72:22:52:f4:53:a1:47:b1:15:49:b7:5f:29:e7:e5:
16:8a:c8:fb:52:64:a8:d2:f3:3d:e4:1a:3e:75:92:e4:45:3c:
64:99:ee:2d:60:26:53:c3:42:01:64:92:e4:98:ef:8d:4d:60:
3b:9e:6b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:39 2025 by rpki-client