Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00C584B8C42411EFBEF8BD64762E951A.roa
File: 00C584B8C42411EFBEF8BD64762E951A.roa (raw, json)
Hash identifier: /x1WEbKJ/o87Gy7F0Pkf5X8dCciQvzwyH7W1hYZAYE4=
Subject key identifier: B3:48:B3:C8:39:88:14:BD:97:B0:B7:19:86:52:66:0C:BD:C5:55:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0129E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00C584B8C42411EFBEF8BD64762E951A.roa
Signing time: Fri 27 Dec 2024 07:27:18 +0000
ROA not before: Fri 27 Dec 2024 07:27:14 +0000
ROA not after: Sun 12 Dec 2027 07:27:14 +0000
asID: 17561
IP address blocks: 154.202.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76259 (0x129e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 07:27:14 2024 GMT
Not After : Dec 12 07:27:14 2027 GMT
Subject: CN=676e56d6-6420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e6:44:17:3b:db:15:0d:bb:41:e3:ec:af:cd:
c8:44:1e:2f:23:5a:dd:38:8a:36:87:a6:d1:1d:3c:
e2:96:5a:15:21:6f:7e:4a:f9:bb:84:46:c5:9a:ab:
b5:df:02:fb:57:18:42:23:5d:80:a6:0a:c3:f1:38:
53:64:fe:8b:5a:4b:a2:f6:80:12:dc:75:12:2e:e8:
0e:bd:9d:0d:04:41:e1:0c:f1:2a:58:54:33:41:ad:
52:f0:49:e7:77:67:bb:53:26:07:7e:4b:60:0d:2b:
dc:5c:f2:09:b2:9d:44:42:df:7f:be:b8:2c:08:46:
9e:ca:e6:6e:b9:70:7d:4f:c9:c6:4c:26:24:5e:59:
4e:ef:3a:79:77:07:2e:66:17:e7:8b:9e:59:73:d1:
0e:09:62:04:d8:28:dd:a8:e9:57:5b:80:fd:df:6d:
bf:13:19:5b:e2:5d:fe:c9:4a:4a:18:b2:3f:0e:26:
4e:76:6a:cc:90:2c:ed:15:61:fd:94:43:95:4d:45:
6f:50:37:7f:27:1f:a0:8f:fc:6f:92:6c:c6:d9:1e:
cf:63:29:1b:b5:55:3e:28:5a:82:a1:ef:aa:cb:52:
f7:7f:54:73:b1:0c:3a:2a:88:7d:61:cd:e8:54:f5:
a1:e1:61:28:9b:9f:f1:15:00:16:5f:56:bf:44:b6:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:48:B3:C8:39:88:14:BD:97:B0:B7:19:86:52:66:0C:BD:C5:55:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00C584B8C42411EFBEF8BD64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.90.0/24
Signature Algorithm: sha256WithRSAEncryption
87:89:84:36:fe:bc:c2:b5:7d:51:22:0e:f4:9e:08:8f:e1:06:
41:d8:24:c7:80:8a:fa:7d:08:04:f8:ef:cc:09:62:fa:c3:63:
54:51:81:9d:db:0a:28:a4:60:c4:87:12:ae:bf:0c:1e:80:10:
e2:72:96:ed:f0:ad:20:7d:4b:23:50:00:77:c9:99:25:ff:73:
5f:d9:44:1c:5b:07:ad:30:1e:42:58:dd:b6:34:fc:82:84:1e:
aa:b9:47:85:dc:32:9f:99:61:fd:bb:ea:e7:e1:99:42:ba:0d:
63:2e:aa:38:eb:1a:61:b2:d8:93:db:f3:1b:29:ca:a7:63:f8:
dc:ef:fb:95:ce:94:38:61:1b:e4:22:59:20:eb:8e:6f:bd:90:
e8:16:ac:8f:8a:ea:3e:04:62:55:e4:0c:2a:6a:80:00:95:3c:
5e:6a:68:da:84:d6:98:4b:1d:26:77:d0:48:e8:36:45:34:0b:
d3:47:e7:59:58:82:d6:02:32:ba:eb:39:4e:02:8f:56:a4:50:
03:b2:47:ed:74:9f:c3:39:88:bd:4b:0a:b0:79:a0:1c:28:ea:
b6:68:29:b4:37:9a:af:54:95:49:da:e0:cd:81:0d:1b:cc:68:
c7:61:8e:c8:24:47:9a:54:43:2f:66:1a:96:4a:56:eb:8d:54:
44:3d:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:39 2025 by rpki-client