Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E95F13D6B21A11EF9C46EBAE762E951A.roa
File: E95F13D6B21A11EF9C46EBAE762E951A.roa (raw, json)
Hash identifier: gs9Lt4QtsmFJXhcQqrfvbosw5OwDVpFlfw0iLEhLRKw=
Subject key identifier: D1:74:18:5E:31:52:4D:53:BF:AA:91:D2:04:81:98:41:9A:F0:09:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0117E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E95F13D6B21A11EF9C46EBAE762E951A.roa
Signing time: Wed 04 Dec 2024 08:36:53 +0000
ROA not before: Wed 04 Dec 2024 08:36:49 +0000
ROA not after: Sat 01 Feb 2025 08:36:49 +0000
asID: 138915
IP address blocks: 154.94.86.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71650 (0x117e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 08:36:49 2024 GMT
Not After : Feb 1 08:36:49 2025 GMT
Subject: CN=675014a4-8b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:0c:ae:de:e1:4d:dc:dc:6e:a2:1e:b0:9d:
80:56:89:03:cc:7b:c0:31:72:95:f3:6a:82:01:d8:
00:df:b7:43:0e:0a:dc:76:c2:40:95:d0:2f:f1:de:
6a:9c:26:a5:4f:da:f4:c5:0e:57:2c:3a:33:ad:a0:
49:cf:3c:c3:e2:ef:e3:22:c1:75:01:60:8b:f6:fd:
5d:ee:fb:d8:36:3e:96:3c:28:b3:4c:5d:95:91:cb:
78:00:09:77:09:d3:6b:0f:b1:7f:43:66:9b:46:97:
cd:5a:47:23:d5:0b:32:e7:ed:7a:79:1b:fd:03:b6:
96:4b:67:e8:75:08:0c:36:cb:28:85:cb:03:db:84:
92:2f:b3:d6:21:38:67:d6:92:8f:24:25:ca:22:33:
93:4a:f1:8d:be:45:8b:7b:6a:bc:d7:f6:80:b5:36:
0d:3d:aa:76:35:55:17:5e:48:ab:27:83:a4:2e:55:
8b:ae:53:9b:bb:61:85:20:3d:4e:42:de:1d:7c:33:
03:69:33:5d:60:77:05:67:c0:c2:42:5c:68:7b:8f:
1d:8e:cd:74:07:e9:7f:b5:c0:1a:6b:be:3e:17:2d:
7b:a5:bd:78:d2:21:23:2e:8d:86:cb:f0:84:14:54:
0b:97:93:e1:82:6d:ee:5e:45:55:7f:58:87:39:a3:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:18:5E:31:52:4D:53:BF:AA:91:D2:04:81:98:41:9A:F0:09:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E95F13D6B21A11EF9C46EBAE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0/23
Signature Algorithm: sha256WithRSAEncryption
84:28:ec:fe:72:c6:c2:b4:83:d5:36:94:93:92:95:40:de:b0:
c0:b2:a9:fe:6a:08:6e:b0:3d:a5:c4:f2:24:b4:54:cb:d2:ac:
20:cd:48:4e:13:e4:97:4d:df:2e:73:01:f8:90:05:b2:96:d7:
4b:1b:64:57:03:a9:02:32:12:5a:62:38:a9:f9:97:29:65:26:
9d:90:5b:0d:6b:67:c2:38:4b:bc:c4:10:06:cd:03:e9:14:d6:
4a:5a:7e:fd:6b:22:03:87:58:9c:48:a3:5c:d8:f2:f6:bc:1d:
d3:02:b8:a1:71:36:b3:e6:26:28:6e:d1:4b:b9:42:e7:4c:9f:
b9:0e:33:50:71:1d:f7:2e:80:35:4a:58:b0:20:a8:51:ce:56:
9c:dd:06:d5:9b:5d:7a:39:bb:6d:e2:c6:f0:95:9d:1f:ba:0a:
87:58:ce:25:72:b4:40:70:a3:f4:07:a7:36:ca:aa:3b:06:6e:
46:68:5a:cf:65:71:38:09:76:eb:7c:59:3a:54:80:de:2c:37:
c9:2a:73:a7:d4:42:b7:69:81:a8:4e:da:b9:d6:5e:00:15:05:
2b:d8:ad:08:fd:00:6e:03:15:db:e3:7e:0e:8e:4d:60:a3:4b:
e6:ac:5f:42:4a:33:45:79:45:bf:60:ec:c3:09:83:fc:eb:9f:
1a:7f:96:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:41:47 2025 by rpki-client