Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E759A200023211F08410B799762E951A.roa
File: E759A200023211F08410B799762E951A.roa (raw, json)
Hash identifier: MaN1zj6Rma/9wl3av6vg5aD0ETnhxeaY/pLxrdtKFx4=
Subject key identifier: 29:AF:E3:F7:61:37:DF:FB:3C:56:05:C9:69:F5:F1:F8:27:AD:22:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017468
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E759A200023211F08410B799762E951A.roa
Signing time: Sun 16 Mar 2025 06:50:10 +0000
ROA not before: Sun 16 Mar 2025 06:50:06 +0000
ROA not after: Tue 22 Apr 2025 06:50:06 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95336 (0x17468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 16 06:50:06 2025 GMT
Not After : Apr 22 06:50:06 2025 GMT
Subject: CN=67d674a2-acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:34:65:32:eb:e9:42:d5:42:37:9c:23:0d:6c:
c5:09:8d:50:71:eb:70:2b:24:af:f9:66:5a:07:61:
87:dc:8e:bf:e5:d5:59:56:a0:e2:01:f2:0d:d7:88:
df:c9:a6:ee:5a:11:62:11:8b:5c:00:dd:9d:bf:9a:
ce:3a:b7:1a:b7:77:c7:f5:d2:03:2f:f4:79:99:04:
67:cb:b9:24:32:4a:01:08:6a:b2:34:52:73:da:3d:
7d:b6:d5:35:15:aa:b4:ec:c0:53:f0:70:66:7b:28:
db:85:df:63:2c:7d:12:5c:06:ce:9b:54:63:f7:56:
ef:47:ab:bf:6d:53:a9:4e:52:90:7c:89:c1:54:10:
62:29:d5:bd:b7:55:1c:ad:49:62:0b:5c:ec:86:6c:
ae:ec:c4:96:a8:07:4b:35:be:de:6d:42:b5:09:8c:
61:58:59:14:82:e3:a8:35:47:ed:cb:20:2f:e1:88:
bd:fa:15:32:d8:b0:fe:42:f3:af:c0:7a:cf:ed:47:
f2:07:b5:75:35:e0:98:32:d1:86:35:a9:c9:20:2b:
65:ac:df:5e:29:2f:62:ea:dd:6a:2e:3c:63:f7:e6:
99:47:83:d6:2e:f6:cb:a1:e4:b2:d2:e9:b4:cf:85:
69:5f:a3:45:02:2a:4d:bb:01:6e:5b:86:4e:00:f4:
95:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:AF:E3:F7:61:37:DF:FB:3C:56:05:C9:69:F5:F1:F8:27:AD:22:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E759A200023211F08410B799762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:a9:d7:94:a3:a9:1e:0e:54:b5:6e:67:ff:6c:07:c1:55:02:
0a:52:18:6e:e4:6b:b2:da:af:ab:32:d5:21:c0:cc:3d:ca:44:
81:8b:46:be:64:60:97:27:0e:bb:1f:6a:94:57:d9:cc:2f:c1:
97:ea:48:09:b4:d2:46:41:be:8d:d2:a1:bd:86:16:cb:c4:b1:
33:34:75:e8:de:41:c2:46:e9:bb:d4:f5:fc:4f:2b:37:0f:c1:
c5:29:ce:1e:1a:81:00:34:67:0b:ba:36:01:19:7a:37:42:6d:
31:14:ae:c1:bd:74:63:9b:39:2c:bc:0c:a7:94:9d:0f:be:be:
e4:d3:a1:32:a4:57:f4:59:87:20:3f:c6:6e:ef:95:08:2d:21:
56:94:5f:54:a1:81:d4:70:0a:75:b5:6a:be:ef:79:ff:ec:7b:
5c:3a:1f:46:1f:73:44:b1:46:0d:f0:d0:c5:96:9a:6c:7e:af:
30:d3:39:94:ec:ec:98:fd:ee:14:4c:51:a8:c3:ce:83:3b:a1:
b9:34:1c:63:8b:2a:64:67:b4:72:ad:55:d8:88:08:1a:04:e1:
62:d0:d6:06:3f:4a:a3:a8:e2:47:4a:f8:e7:72:35:36:23:df:
96:fa:7a:95:43:9e:ea:d4:ff:bf:f4:8b:f9:01:9c:ad:b7:9d:
96:4b:d8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:30:52 2025 by rpki-client