Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E8943EC1A211EFA3F7F65D762E951A.roa
File: 08E8943EC1A211EFA3F7F65D762E951A.roa (raw, json)
Hash identifier: yT0TsB95j0ys1V/RwcR674ZqMGytuQXx3aK4RXzfdbA=
Subject key identifier: F5:09:9F:1D:47:53:C6:7F:C1:34:FC:D2:05:02:A7:F1:4D:92:B5:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120BF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E8943EC1A211EFA3F7F65D762E951A.roa
Signing time: Tue 24 Dec 2024 02:51:55 +0000
ROA not before: Tue 24 Dec 2024 02:51:52 +0000
ROA not after: Wed 10 Dec 2025 02:51:52 +0000
asID: 984
IP address blocks: 154.90.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73919 (0x120bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:51:52 2024 GMT
Not After : Dec 10 02:51:52 2025 GMT
Subject: CN=676a21cb-d64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:d4:c0:00:50:2a:89:17:2b:7f:5c:38:04:
de:8a:42:d0:b6:43:d5:84:68:b8:0b:9d:96:2f:6b:
d9:6d:2e:83:05:3a:bb:17:a2:16:6c:fd:77:ce:0f:
37:63:fb:d4:dd:03:fb:f0:0e:03:a5:d3:c9:ca:05:
52:d0:13:6f:bd:23:01:85:b5:4f:5d:26:da:65:9c:
31:fc:49:b2:6e:4b:dd:4a:e8:0d:d4:79:98:b5:4f:
5d:43:3f:ba:a3:3c:04:f6:d2:8a:ae:83:0c:c2:1c:
19:e8:54:14:19:6d:af:08:8d:84:56:d6:43:9b:b3:
47:06:9e:f2:74:57:a9:c5:ca:cc:73:a4:f8:ca:25:
6e:4f:c0:12:0d:5b:6c:6f:36:d2:43:5c:b4:be:96:
73:8d:f0:78:2b:01:8e:eb:02:62:79:12:7c:35:e9:
61:fc:08:c5:d0:59:4d:04:d0:02:ce:21:a0:6d:8e:
75:35:7c:fd:ad:94:9a:38:e3:71:c3:04:28:c3:b5:
e8:81:c4:17:d5:6c:21:74:02:1d:6c:68:d3:f6:84:
5c:3d:65:25:9c:1f:56:af:cc:e1:ba:66:64:b6:31:
b1:fb:41:97:c5:e2:11:2c:44:3d:99:01:c8:bc:8a:
f7:5c:7d:6c:48:8f:7c:d3:14:a7:a2:c2:8e:4a:2c:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:9F:1D:47:53:C6:7F:C1:34:FC:D2:05:02:A7:F1:4D:92:B5:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08E8943EC1A211EFA3F7F65D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.251.0/24
Signature Algorithm: sha256WithRSAEncryption
53:9b:c4:12:cc:bc:c4:b3:f8:90:ef:71:6b:27:7d:b3:78:98:
0d:6c:3f:52:05:8e:96:53:c5:8c:10:59:fa:65:16:90:59:f9:
24:31:58:dc:b8:97:e2:c5:a0:1d:0c:94:d3:33:28:02:18:93:
40:9a:9a:1b:94:ae:57:7b:73:25:1c:9d:5b:73:53:7c:a4:8f:
cb:c7:bd:d6:49:54:b9:69:fb:ba:c2:60:e7:a7:ff:d2:2e:24:
c6:32:d4:37:b1:7f:85:81:67:92:f9:07:a9:be:6a:38:af:94:
c0:32:11:0e:22:51:8f:81:36:76:19:2c:4e:dc:a7:cb:d2:ec:
c2:af:b0:97:39:78:8d:9e:e2:2d:bb:7e:45:73:45:4d:ae:3b:
41:9f:4d:06:49:14:45:b3:e8:27:c1:6f:2a:69:3c:da:24:16:
ee:bd:75:3e:3b:55:4b:36:82:9d:26:d9:4b:f0:28:2b:8f:bf:
19:74:48:0b:7a:19:0d:06:5a:4f:a7:8d:ed:d8:85:ed:0f:68:
b1:67:6d:e2:f3:a6:c0:9e:86:2e:bf:7e:e2:c9:f3:3f:de:ca:
e0:d4:7f:26:de:93:a9:2a:9f:a2:46:10:bb:06:9c:68:fd:0d:
bc:5e:8d:85:04:b6:97:a0:1d:d2:2a:8c:f3:fc:49:3b:b0:11:
7e:7d:c0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:09 2025 by rpki-client