Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68D234AC92111EFBA516C92762E951A.roa
File: F68D234AC92111EFBA516C92762E951A.roa (raw, json)
Hash identifier: ZpYx8AS8Sif2AyPJxE5bkkjHxURcCaXhBk/vH235pJY=
Subject key identifier: D1:E0:1E:FA:0E:33:EE:FA:6A:DA:7F:EC:73:39:07:2E:6E:62:29:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013333
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68D234AC92111EFBA516C92762E951A.roa
Signing time: Thu 02 Jan 2025 15:55:18 +0000
ROA not before: Thu 02 Jan 2025 15:55:14 +0000
ROA not after: Mon 13 Dec 2027 15:55:14 +0000
asID: 17561
IP address blocks: 154.222.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78643 (0x13333)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 2 15:55:14 2025 GMT
Not After : Dec 13 15:55:14 2027 GMT
Subject: CN=6776b6e6-5e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:8d:15:52:a4:62:1c:69:67:e9:28:19:94:
3b:2c:85:86:8c:60:58:0b:06:0f:b6:ae:cc:33:94:
ab:c7:07:71:c5:17:0f:48:35:c0:34:bb:da:79:b3:
54:a5:07:b6:85:33:6e:b1:70:5c:ea:d9:cf:04:f6:
a7:1c:a3:f5:62:3d:d8:69:6a:43:b7:e3:2d:1d:0b:
8a:f4:c6:64:e8:34:a8:ba:a4:c8:b6:cd:0a:0a:94:
0a:bb:fa:3f:1c:12:6f:a8:93:79:c1:2b:9f:a8:81:
cf:5f:c1:86:11:49:1d:c7:d1:19:30:1c:2a:9d:02:
53:ef:9f:3a:25:7f:a3:55:a0:3b:a5:e0:a7:1f:c2:
87:3b:7e:4b:c4:a9:f0:d9:06:df:4d:d5:6c:9c:55:
fd:2d:71:81:92:fd:df:37:68:1e:2e:f8:43:0e:f1:
50:8f:fb:01:98:5b:23:c4:0c:ab:eb:3e:83:d2:02:
b2:bd:24:86:30:9f:e3:b6:7a:86:66:23:7b:5a:64:
62:ff:d2:53:1c:76:89:89:ab:65:fa:87:dd:da:96:
7e:a3:6e:1a:73:1f:b7:97:bf:0a:34:5e:7a:7a:45:
60:64:4d:d9:30:b0:51:f9:41:1a:40:6b:a3:bf:5a:
8d:86:30:97:50:8f:7e:f5:e6:2b:26:dd:fa:18:bd:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E0:1E:FA:0E:33:EE:FA:6A:DA:7F:EC:73:39:07:2E:6E:62:29:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F68D234AC92111EFBA516C92762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.95.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:d2:cc:5d:4a:86:9b:76:32:52:d9:8b:a4:3e:f6:f7:a0:af:
18:ec:77:ef:0a:f3:38:6c:36:a8:53:24:3a:3f:dc:f1:64:2f:
e6:ca:b7:ec:c8:1e:c1:f5:79:45:a4:17:17:65:22:a9:8b:00:
62:51:35:08:96:0e:79:b3:99:d6:62:1c:15:fd:11:8d:4a:59:
98:1e:ae:25:ed:2e:a3:2b:bf:35:39:10:f5:b6:da:bb:e7:09:
b1:57:03:7d:6e:3e:84:5f:b5:b6:97:c2:af:f7:9b:4a:1b:3c:
d3:a9:23:d7:44:e0:b7:bb:cd:81:db:9c:12:cc:83:95:29:21:
a0:39:09:fc:da:3b:4e:f2:c4:d9:d2:3c:08:92:12:a5:81:89:
62:4d:5c:78:37:e3:c3:eb:f2:47:bb:cd:8e:ea:ef:f3:b6:d7:
2a:fe:d8:49:c8:e7:83:7e:c4:c2:ae:4e:1a:6e:8b:9b:e5:eb:
d2:68:32:da:4b:13:09:3d:04:21:ce:54:19:4f:e1:e1:e7:54:
41:79:9d:f9:0f:4a:f8:ef:0a:fe:45:7b:2d:a7:11:52:b6:3b:
48:2a:b2:61:5f:38:a2:49:cd:75:61:a8:32:4e:06:fb:cb:01:
ce:ab:d0:f4:44:ea:82:0d:40:79:3a:61:ef:3a:00:42:fa:2a:
71:dd:cf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:08 2025 by rpki-client