Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7A4988F3B611EF8E76EF8C762E951A.roa
File: FE7A4988F3B611EF8E76EF8C762E951A.roa (raw, json)
Hash identifier: dRNowsGFgRqkIs3h4iARgHFEAjy8cIVviVYiCjiVkWQ=
Subject key identifier: 0B:DC:A0:F4:C0:1F:C0:12:1C:0D:5D:A1:35:43:75:96:C8:58:58:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015FDD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7A4988F3B611EF8E76EF8C762E951A.roa
Signing time: Tue 25 Feb 2025 20:27:55 +0000
ROA not before: Tue 25 Feb 2025 20:27:52 +0000
ROA not after: Wed 09 Apr 2025 20:27:52 +0000
asID: 138915
IP address blocks: 154.95.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90077 (0x15fdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 25 20:27:52 2025 GMT
Not After : Apr 9 20:27:52 2025 GMT
Subject: CN=67be27cb-c74e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4f:bd:b6:81:94:93:1a:02:e7:13:ac:8e:04:
9e:7e:e3:64:ef:c8:d3:17:a2:74:99:ca:76:21:bd:
3a:39:7e:79:77:5a:f8:6c:28:5b:fb:11:29:cb:6e:
03:f9:55:a5:3b:95:f9:52:dc:c9:2b:b1:77:ab:3d:
02:a8:88:85:5a:3e:64:c1:b3:c7:c6:2e:40:f2:bc:
8d:81:aa:99:00:2c:6e:bf:8b:18:1c:91:63:df:de:
cd:62:1d:79:60:48:e1:88:3b:02:a5:fa:56:be:7e:
dc:e5:32:fa:34:ae:9b:f0:fb:cc:2c:14:18:b5:61:
0b:09:ef:6b:1c:b3:5f:79:ab:46:e1:24:7a:9d:5c:
2b:4a:b9:cf:56:58:d8:50:af:48:de:74:d8:74:93:
57:55:2e:a4:fa:ed:6c:20:20:8f:be:62:97:8f:51:
bd:93:1f:3b:34:ad:26:9a:a8:27:4e:b1:73:75:da:
d1:cd:ef:1a:53:70:27:51:b8:cc:c8:5a:5e:d1:fa:
2b:5a:2d:65:d0:8b:ac:46:a4:a3:3c:29:b3:a8:e2:
ab:08:dd:ae:25:8d:36:ff:8f:b8:5f:4a:05:83:62:
94:a2:29:fd:b2:00:6c:b8:41:4e:ec:3a:3f:3e:31:
41:dc:81:72:b1:2d:66:86:b1:87:4c:bc:50:12:50:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DC:A0:F4:C0:1F:C0:12:1C:0D:5D:A1:35:43:75:96:C8:58:58:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7A4988F3B611EF8E76EF8C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.83.0/24
Signature Algorithm: sha256WithRSAEncryption
72:76:61:10:86:d6:ab:b9:f9:0e:85:88:46:c0:19:16:af:83:
5d:da:03:32:5c:3f:32:d0:27:27:23:6e:9b:55:87:c6:a9:47:
43:c4:f0:71:ac:76:4b:96:36:2f:f6:35:75:f0:0c:ed:8c:ab:
e6:14:1b:43:a7:f8:03:63:31:b9:9d:90:5c:2a:fc:8f:12:28:
ae:36:e8:3d:70:db:b8:e0:bc:19:58:4c:53:67:9b:e3:6f:4c:
9b:08:d5:f8:45:21:33:fd:39:09:6f:69:de:e8:38:a9:d9:63:
0e:1e:95:58:9b:62:6e:0e:38:1c:b8:d5:d8:40:ff:a0:15:21:
33:2c:30:76:cb:3e:59:25:6f:c4:b0:f0:52:9d:f4:30:3e:b2:
c6:89:c9:38:59:e1:ad:67:8e:2e:e1:71:3f:ae:54:cf:04:dc:
9b:06:09:63:b8:94:ed:8f:db:27:ed:7a:3c:07:c3:32:b1:37:
06:08:7b:63:75:e1:d2:6a:75:16:3f:97:98:f7:d6:08:7e:18:
08:1e:c6:74:0c:9b:af:3f:72:5a:b6:2a:bf:44:c6:b7:49:04:
f3:e1:fe:36:df:88:7a:05:c7:0f:16:7a:66:98:c2:60:cf:c1:
42:ce:fb:db:bb:ed:1e:e2:25:61:4f:75:22:ea:e9:7d:ac:8a:
f4:3b:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:49 2025 by rpki-client