Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AD6A310C19A11EF802AAFA0762E951A.roa
File: 0AD6A310C19A11EF802AAFA0762E951A.roa (raw, json)
Hash identifier: Y5BuMNumZIFKnyyd0HaklNiehxyB44iwv8KlZL0D6HY=
Subject key identifier: D7:87:1E:56:AB:9D:5A:EE:C8:62:5B:31:9D:53:5C:68:E1:F8:3A:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01205D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AD6A310C19A11EF802AAFA0762E951A.roa
Signing time: Tue 24 Dec 2024 01:54:42 +0000
ROA not before: Tue 24 Dec 2024 01:54:39 +0000
ROA not after: Wed 10 Dec 2025 01:54:39 +0000
asID: 984
IP address blocks: 154.90.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73821 (0x1205d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:54:39 2024 GMT
Not After : Dec 10 01:54:39 2025 GMT
Subject: CN=676a1462-fd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:f4:e8:71:1c:78:30:81:df:47:cc:00:01:
b3:e3:e5:fb:52:83:15:0e:c8:e2:15:b7:03:a4:b4:
ab:90:34:6b:df:7f:f3:fe:f5:8e:53:2c:8b:36:0b:
97:1b:aa:76:2f:3b:5e:b0:15:eb:42:3b:09:ee:26:
89:c8:62:01:d3:e4:50:60:40:71:0d:43:11:60:dc:
c8:e8:a5:67:af:6e:26:8b:90:c3:74:38:ce:a6:a1:
eb:15:d0:db:b6:c8:32:f2:c9:03:53:73:d3:45:88:
a7:82:1a:96:2b:70:a4:ef:3b:bc:5b:fd:e0:b5:6a:
9c:a3:07:70:c2:41:9c:39:7d:da:73:31:db:e7:dd:
6c:d8:6d:f5:1a:bc:bd:e3:24:c0:bf:0b:8d:ee:32:
bf:76:48:36:f6:1c:9f:e2:ec:22:8b:da:71:d8:c0:
c0:cf:d2:d3:53:a5:b9:ff:3b:12:a5:19:dd:ed:2a:
bc:ae:b8:2f:7f:a7:8b:2f:79:e0:09:43:1c:95:ef:
ab:f1:5a:17:75:8a:0e:7f:3e:57:30:87:47:92:ca:
a9:e1:0e:95:a7:be:fd:70:05:2c:d5:69:24:bf:17:
f6:f5:86:53:a3:ac:5a:13:81:2f:2c:16:dc:94:9c:
3c:d6:cf:c8:91:7a:61:e0:2f:91:6a:57:9d:cf:2e:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:87:1E:56:AB:9D:5A:EE:C8:62:5B:31:9D:53:5C:68:E1:F8:3A:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0AD6A310C19A11EF802AAFA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.202.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:57:d3:85:09:d3:be:59:e0:21:63:9c:98:69:de:04:a5:39:
1f:c7:94:5f:86:0c:d7:a6:ac:36:f7:55:e8:01:c8:d6:43:50:
f4:ae:92:10:b2:7b:47:d0:dc:de:82:f0:d5:16:fa:37:4c:44:
33:e0:c9:61:53:4f:50:37:6b:4e:71:83:af:ce:73:40:39:12:
2d:ed:bf:d8:05:e4:a5:bc:7b:d7:5d:24:53:d8:c0:1b:44:8d:
c1:fd:4c:79:22:1b:23:4d:11:43:bd:86:22:24:7f:ad:59:15:
4d:ed:b8:ed:ad:35:7b:a1:04:0b:ba:d7:58:54:a4:5c:97:59:
36:0e:23:10:92:95:64:b5:61:c5:c4:3a:62:0d:9a:86:ca:2e:
00:4f:e8:7c:4e:45:1b:96:62:03:ce:b1:9b:7e:4b:0b:06:a7:
45:da:41:e4:75:79:a1:50:93:16:8a:bf:7f:ec:1e:2e:fb:c7:
27:d4:ad:cb:84:fb:27:c7:74:80:a9:d1:56:bb:73:7a:ed:1c:
77:bc:7f:91:60:83:20:5d:0c:0e:9a:34:21:34:0a:0a:21:c6:
a5:7d:35:96:bf:8a:75:df:dd:2e:ee:61:89:c6:c2:fd:a8:1f:
9d:5a:00:08:f8:cf:0d:28:86:56:b6:8d:81:05:a9:e3:21:6f:
f2:33:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:32 2025 by rpki-client