Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E050E0CC35F11EF937A1378762E951A.roa
File: 0E050E0CC35F11EF937A1378762E951A.roa (raw, json)
Hash identifier: CvBZ63+wdYHsOyEH6ewNgZQmyKxx99vhHe79I/RIO8Q=
Subject key identifier: 5B:49:05:4E:F9:6F:17:46:FB:21:22:0A:80:AF:7C:DC:BC:EE:ED:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E050E0CC35F11EF937A1378762E951A.roa
Signing time: Thu 26 Dec 2024 07:57:30 +0000
ROA not before: Thu 26 Dec 2024 07:57:26 +0000
ROA not after: Fri 12 Dec 2025 07:57:26 +0000
asID: 984
IP address blocks: 154.90.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75304 (0x12628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:57:26 2024 GMT
Not After : Dec 12 07:57:26 2025 GMT
Subject: CN=676d0c6a-6597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:83:35:2c:26:bd:bc:2b:e9:94:04:67:e2:0f:
7c:c8:e6:f1:3a:99:aa:0d:63:95:b9:3d:58:d7:cb:
54:6f:7d:5b:1a:11:83:e2:64:b4:aa:2c:34:35:db:
3d:9b:a6:0d:b6:b3:1d:e5:43:19:8e:e7:3b:1e:f2:
3a:1c:1c:fa:fd:f8:f4:c9:53:e9:eb:8c:09:84:90:
60:49:30:8f:8a:2d:6d:d6:26:e1:81:63:e5:96:1e:
43:e2:fb:2c:74:34:c0:93:59:48:93:6d:b6:d1:29:
84:e8:1e:29:5b:02:19:de:69:ea:ee:3e:e2:dc:25:
6f:ab:1c:5a:1c:7f:56:da:53:8a:05:e7:47:77:1c:
18:48:14:f5:80:55:8f:ae:2e:f0:1a:bc:14:1a:e2:
79:c3:a2:86:9f:04:47:a9:45:21:db:80:b5:68:cf:
9f:ed:ed:9c:f6:89:78:ab:d6:58:81:fc:d4:fb:c9:
63:c3:9a:13:df:b5:83:cc:6d:c5:9d:8c:cc:2c:52:
e8:8a:20:ef:30:7b:f3:77:d3:ee:45:02:3b:84:98:
d9:00:1f:02:d1:0d:18:71:3d:6d:e4:38:2e:17:15:
bc:75:f3:89:36:1a:b5:a3:6a:91:ac:0f:f7:4b:ad:
6b:d6:f1:ef:72:65:ac:69:23:78:28:84:7d:02:2a:
fd:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:49:05:4E:F9:6F:17:46:FB:21:22:0A:80:AF:7C:DC:BC:EE:ED:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E050E0CC35F11EF937A1378762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:9f:63:5b:59:1d:c0:5e:57:ba:b0:2d:71:b7:98:77:66:f8:
c7:0b:9e:27:9a:97:fe:0f:f4:92:87:b7:5f:21:45:9f:26:21:
99:43:10:aa:c5:8a:b3:dd:fd:44:14:1c:27:9f:60:5d:0d:4a:
0a:56:66:09:9f:bd:f7:d9:44:08:12:6b:79:6f:a9:f8:3a:62:
7f:cb:1d:ec:37:ba:cb:3a:09:ec:25:66:e1:26:8d:b8:d6:63:
89:d8:c3:93:1f:fa:d4:d6:30:a1:f7:fc:dc:65:ac:6f:1e:91:
a2:17:04:24:d0:1c:bc:16:cd:a2:b0:4d:f3:77:30:43:45:98:
31:57:4e:66:81:0b:1a:61:f0:76:81:a6:b6:29:d4:d7:4f:56:
02:f5:42:2c:87:bf:5d:b7:54:c9:3f:bb:5e:e7:04:ab:ab:7c:
ca:ca:e2:84:da:50:26:77:f2:3c:bd:f2:2d:48:b7:9c:97:af:
0a:7d:5a:1d:f7:49:15:34:94:23:d2:ae:84:8e:1f:28:ad:47:
64:ee:b9:ac:f4:e9:67:7f:d3:f7:f8:3c:57:3f:b4:cc:55:be:
e7:52:fa:c7:ac:a0:97:ab:44:e0:bc:c0:38:ed:3d:38:85:a0:
f1:03:2b:4e:72:fa:bc:bf:71:75:de:ac:e1:26:f4:21:a0:24:
9c:d8:fa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:12:53 2025 by rpki-client