Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90F6F0A4CCC011EF94ACBC98762E951A.roa
File: 90F6F0A4CCC011EF94ACBC98762E951A.roa (raw, json)
Hash identifier: MRMQtrc+jUTWQDTsZMVSAP89R9SexKCB7x6ZnNeSaJs=
Subject key identifier: E2:82:83:23:27:19:CD:56:C4:04:FE:DD:93:0F:11:8B:0F:A6:97:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01362B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90F6F0A4CCC011EF94ACBC98762E951A.roa
Signing time: Tue 07 Jan 2025 06:28:11 +0000
ROA not before: Tue 07 Jan 2025 06:28:07 +0000
ROA not after: Tue 04 Feb 2025 06:28:07 +0000
asID: 7018
IP address blocks: 154.95.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79403 (0x1362b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 06:28:07 2025 GMT
Not After : Feb 4 06:28:07 2025 GMT
Subject: CN=677cc97b-b010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:71:7f:5b:36:54:03:6b:2d:15:47:06:d4:4c:
3d:64:ae:b1:ed:83:c1:17:13:d5:68:70:32:c2:6f:
08:76:bb:7f:50:02:88:93:cf:b8:0d:50:b9:85:65:
9d:b5:5d:e1:94:e5:07:81:2e:66:fb:6d:e2:be:e5:
0c:08:b7:97:a9:ea:2f:26:50:c0:4f:d4:b6:f5:9c:
fc:c0:99:ce:76:e2:cc:b1:b0:91:be:ae:cb:76:9c:
38:96:bd:d9:6d:12:1c:75:c4:34:09:3c:62:1a:7f:
f8:7b:84:fd:39:a5:49:35:7d:6f:3b:94:70:57:93:
2d:e3:fd:0f:04:5b:b2:9e:00:5e:ec:c7:e0:b5:fa:
bf:d3:e6:90:55:bf:5b:a4:d9:01:5c:0d:28:f8:c5:
ea:65:b4:f8:44:4a:64:17:66:c5:46:ab:83:1c:a3:
4e:1b:1d:6d:9d:8e:ee:28:4d:97:75:46:d2:1f:39:
37:06:c1:f0:3d:0b:3b:c1:cb:6b:e1:a9:26:07:be:
e9:85:07:53:69:00:e9:3a:75:02:27:8c:8b:af:9b:
38:62:7e:41:84:5c:f7:2f:4c:fa:ee:eb:77:48:1b:
66:a4:69:fd:ed:82:ba:1c:01:4e:3c:7a:39:9a:b2:
ec:fa:11:9a:db:ab:e5:ec:64:70:f8:6d:21:df:29:
12:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:82:83:23:27:19:CD:56:C4:04:FE:DD:93:0F:11:8B:0F:A6:97:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90F6F0A4CCC011EF94ACBC98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.8.0/21
Signature Algorithm: sha256WithRSAEncryption
41:44:5d:c7:fb:32:e7:07:2c:e7:bd:57:d0:d7:13:65:04:c9:
fa:c6:3d:24:27:70:50:75:73:57:97:13:a2:d8:9d:06:44:e3:
f3:b8:ea:77:cd:77:73:60:b0:f6:1d:b2:0f:d3:fa:6c:81:9a:
fb:7c:9f:da:bd:86:3b:3b:35:60:cc:cd:36:14:69:8a:94:99:
89:da:d8:fd:56:fb:9e:d3:19:1d:12:ad:92:10:eb:cc:7c:17:
3f:15:cc:96:32:40:22:23:d6:4c:e6:bb:73:aa:d3:fa:46:a3:
82:0f:44:46:c6:c9:26:5d:1f:77:91:da:a6:3d:79:89:cc:32:
65:ac:9a:07:23:2e:6f:88:12:52:fe:a3:b3:9f:47:e5:5b:d0:
c3:e7:52:ae:c2:63:16:5d:2c:58:30:5f:a9:86:63:54:a7:e0:
c3:72:13:30:d5:22:d8:b8:a2:dc:50:f6:b7:29:15:e1:0a:06:
c9:9b:11:83:87:ac:95:a9:e8:f5:8e:32:c4:bf:b8:00:32:ba:
9a:73:7d:c7:41:3d:36:c8:71:a4:10:5c:06:cc:cf:ce:f5:ef:
6c:48:89:c5:dd:18:38:38:3b:b2:fd:18:84:01:09:19:04:bd:
89:75:ef:1b:c8:85:69:01:6b:1e:44:97:60:51:8e:88:81:ad:
2f:89:4c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:37:48 2025 by rpki-client