Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458C1050DA3911EF8C6F9EB7762E951A.roa
File: 458C1050DA3911EF8C6F9EB7762E951A.roa (raw, json)
Hash identifier: qvZz2QI8+eWB0Up/niErJklNbVnfDtljQ3A+r61+Ejw=
Subject key identifier: 73:42:E0:99:7C:EC:49:E0:E4:0D:2E:3F:F1:75:C7:8E:C4:22:B4:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014532
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458C1050DA3911EF8C6F9EB7762E951A.roa
Signing time: Fri 24 Jan 2025 09:54:59 +0000
ROA not before: Fri 24 Jan 2025 09:54:55 +0000
ROA not after: Tue 11 Mar 2025 09:54:55 +0000
asID: 138915
IP address blocks: 154.95.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83250 (0x14532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 09:54:55 2025 GMT
Not After : Mar 11 09:54:55 2025 GMT
Subject: CN=67936373-8479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:9c:91:b7:ba:c8:4d:41:87:b5:9d:2b:98:
78:1a:67:52:66:3f:27:59:d6:8e:1e:fa:f0:1e:6e:
d5:96:4d:3a:ae:cf:06:e2:9a:46:e9:e0:f7:5d:93:
a1:d5:07:09:b3:1a:cd:54:af:50:44:a6:f5:58:16:
94:e7:b4:c0:cd:e0:88:f9:a4:d5:70:13:da:a4:e4:
be:c8:01:79:a9:87:0c:cb:6f:f6:50:9e:fd:81:aa:
e2:e7:e6:2c:0f:a3:03:28:8d:9e:6b:77:01:08:7c:
bd:9c:a6:22:00:99:86:74:f4:5a:38:75:33:aa:6f:
fb:bd:8c:bf:65:c2:bf:34:63:99:30:68:68:e5:0b:
de:8d:df:93:d4:aa:dc:ca:7b:e1:4a:37:12:28:93:
16:7c:5d:5a:10:15:25:8c:a5:36:36:7a:08:8f:30:
77:1d:28:eb:b6:71:47:2b:ed:e7:a5:2a:b8:c9:45:
6f:eb:4f:fc:94:a7:a2:ba:ba:67:8b:53:cc:84:90:
65:97:ac:98:6f:82:85:70:63:86:0d:98:d5:c5:71:
dd:0c:1c:49:18:f3:af:e9:35:e4:cc:97:30:7a:a8:
e8:8b:a7:15:ed:9b:32:97:40:54:c8:3b:22:bb:e5:
84:9c:cf:de:33:5c:cd:60:60:09:38:75:b8:8f:36:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:42:E0:99:7C:EC:49:E0:E4:0D:2E:3F:F1:75:C7:8E:C4:22:B4:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/458C1050DA3911EF8C6F9EB7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.89.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c3:30:3e:65:3a:30:37:42:89:d8:72:25:76:b0:de:2b:e0:
54:d9:44:f8:2b:06:71:bc:fa:9a:38:9a:2b:c3:d7:5e:35:54:
cb:df:23:dc:fa:1f:50:3f:9c:76:85:09:53:5e:4e:fa:6a:b7:
08:52:53:69:5e:7b:85:2a:ca:81:ed:f5:26:00:0f:18:71:58:
26:20:7a:52:f2:ce:a4:77:67:06:66:1b:ce:a8:9e:15:35:26:
5d:ae:08:67:da:3d:e0:d4:49:71:f2:95:6d:16:81:79:97:c8:
86:83:95:47:d2:69:a8:84:6a:eb:ed:f6:0d:cd:69:d2:0b:cd:
61:38:70:0a:99:22:64:69:53:82:71:eb:60:ed:bf:2b:a4:77:
59:8b:26:a8:f5:be:7c:65:c9:6a:29:24:61:18:18:a5:04:e3:
5c:89:f9:bc:34:49:4e:8f:d8:ad:e4:f8:e0:07:5e:0e:46:14:
7e:80:b0:3d:70:81:68:5d:ce:a5:ab:09:f3:b0:4f:e0:a0:fe:
be:c7:32:3f:66:91:8a:66:63:58:bd:71:f9:16:80:93:0d:87:
ca:c7:be:05:d2:f9:73:da:eb:a3:83:05:46:1d:95:c5:9d:c9:
65:bf:28:2c:c9:e0:96:ab:a9:51:af:3c:7e:d2:1c:d2:44:02:
32:6e:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:46:40 2025 by rpki-client