Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6113ADADA4011EF8A00996D762E951A.roa
File: E6113ADADA4011EF8A00996D762E951A.roa (raw, json)
Hash identifier: CrKRIFoZXlEFMT7XniQIRp3O+mOlZdY4X37IfXrMY5Q=
Subject key identifier: 40:E5:65:E5:44:93:76:CA:07:09:3D:9E:2D:5C:24:C6:3C:37:6D:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0145BE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6113ADADA4011EF8A00996D762E951A.roa
Signing time: Fri 24 Jan 2025 10:49:34 +0000
ROA not before: Fri 24 Jan 2025 10:49:31 +0000
ROA not after: Tue 11 Mar 2025 10:49:31 +0000
asID: 138915
IP address blocks: 154.95.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83390 (0x145be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 10:49:31 2025 GMT
Not After : Mar 11 10:49:31 2025 GMT
Subject: CN=6793703e-dd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:ce:4f:49:77:cf:4b:eb:82:33:43:ab:fb:
d6:df:a7:11:7d:2b:e2:ef:d2:73:da:88:07:31:5e:
e5:0c:aa:05:bb:a0:ea:e7:fb:3c:e6:80:54:de:0d:
ab:c0:83:88:38:9c:97:20:c2:94:69:3e:d1:5f:08:
a8:a7:2b:75:ea:57:b0:ef:26:fa:50:33:db:8a:da:
82:4d:20:1d:53:0a:06:27:16:14:97:5e:26:c4:36:
45:58:d3:5a:5d:4e:f3:0d:17:60:26:3e:04:48:cc:
72:79:88:e2:50:c0:c1:69:42:33:c2:56:9f:b1:69:
c3:af:bd:65:c8:28:e7:44:38:e8:24:e4:a1:63:10:
17:0d:ca:79:13:ba:7e:e3:dc:2b:53:ba:1f:05:0b:
c0:e1:8f:59:60:2d:19:8b:7c:ec:b0:16:92:f1:53:
a6:fc:11:53:1e:26:3b:7f:7c:68:90:3a:6e:f0:c8:
d9:a6:d4:b1:f6:86:91:83:8e:a8:52:9f:d9:a3:af:
a1:95:68:15:6f:70:21:7b:84:80:3c:98:23:86:67:
af:f7:80:19:87:ac:e7:ef:42:1d:11:11:c7:42:28:
78:7e:35:f5:8b:32:64:fb:74:f5:d5:83:8b:19:cf:
ca:c8:2c:42:7b:18:f3:ed:9a:de:60:39:c0:58:d4:
c1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E5:65:E5:44:93:76:CA:07:09:3D:9E:2D:5C:24:C6:3C:37:6D:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6113ADADA4011EF8A00996D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:13:2a:30:1a:b8:fd:ec:3e:81:60:ef:ac:bc:f9:cc:8f:7d:
cb:f6:c5:eb:e4:6d:c3:17:77:6e:4f:19:05:03:48:e8:25:8a:
64:69:56:5b:f6:f1:ab:2e:03:03:89:32:c5:b5:89:ec:03:5f:
e6:d5:c2:f2:7a:3e:db:2d:c8:5e:ed:e6:14:94:b9:2d:71:f6:
5a:e5:05:2a:b6:b8:c9:15:29:d0:26:85:31:8c:b1:c8:53:1b:
06:9b:07:57:f3:c9:82:b6:49:6c:5d:61:a3:27:39:25:84:4e:
b4:98:11:55:06:bd:50:91:b5:fb:23:b7:0f:d5:a3:39:1f:ad:
d2:10:1c:5b:0f:b6:d5:37:cf:4c:3b:a2:b3:d2:2b:3f:63:3a:
a6:51:14:a6:6c:99:9c:aa:e2:8a:9b:d5:de:96:81:05:7f:75:
1c:0b:35:85:d3:50:9d:85:9c:65:ba:aa:d7:55:19:e0:9c:bd:
1d:73:81:7e:13:77:b7:b0:0c:07:0a:88:0b:ec:91:de:95:de:
29:49:a1:db:62:0a:60:ab:5b:a8:f7:06:f0:50:08:54:0f:bc:
75:38:96:3f:db:df:ab:85:d4:24:07:69:36:8e:32:d2:f1:a3:
f0:08:4a:59:4f:2d:74:06:f1:ca:0c:1a:cf:a4:fb:02:cf:9c:
ff:e8:8f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:52:04 2025 by rpki-client