Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12EA3788C0F011EFABEF927E762E951A.roa
File: 12EA3788C0F011EFABEF927E762E951A.roa (raw, json)
Hash identifier: Dv2E1We69cJX3g29/hyaJuKfw9sJoJvLD03krShHElk=
Subject key identifier: 7F:B1:87:04:15:14:45:F5:CE:79:9A:B9:A9:D8:D1:7F:2D:45:87:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12EA3788C0F011EFABEF927E762E951A.roa
Signing time: Mon 23 Dec 2024 05:38:01 +0000
ROA not before: Mon 23 Dec 2024 05:37:58 +0000
ROA not after: Wed 10 Dec 2025 05:37:58 +0000
asID: 984
IP address blocks: 154.90.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73552 (0x11f50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:37:58 2024 GMT
Not After : Dec 10 05:37:58 2025 GMT
Subject: CN=6768f739-051c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:89:89:bb:63:dd:ee:22:ad:31:f0:3a:15:
0d:4c:7a:eb:bb:c9:b6:d1:a9:55:c6:34:ca:5b:c7:
43:5e:a3:66:64:36:c1:8f:79:ff:53:dc:dc:ce:5d:
1a:3f:86:04:29:2d:a7:61:9d:e9:e2:c3:27:4b:10:
c8:fa:83:e7:19:5e:89:2f:fe:77:1d:ff:86:a2:dd:
67:78:62:d0:0a:ab:c4:84:8c:e8:b2:2b:83:0f:6b:
79:44:f1:fe:1f:55:44:99:92:c8:d7:57:fa:fa:ea:
78:df:ae:9b:16:47:e9:96:4e:6a:53:4a:8b:27:8b:
e9:fa:77:e2:b4:2b:b9:9d:59:82:0a:2b:b9:e2:5c:
0e:6b:bd:ea:95:d9:25:6a:ba:2c:ac:90:b2:b4:2d:
1b:9f:fb:52:9e:9e:d2:9f:9a:da:f6:7b:97:ac:b5:
74:59:46:12:ea:c8:90:b6:d6:2c:77:72:a7:09:01:
e1:2f:6a:b1:15:c6:a9:72:f1:9c:fb:76:4d:28:53:
5a:14:f4:cc:ef:ad:d4:95:af:03:59:c6:2a:a4:33:
b3:9e:9d:81:48:0f:69:72:83:ee:f7:f9:0b:b4:28:
04:7e:a3:47:f1:04:d3:2b:b2:15:07:0f:77:5a:44:
ff:d3:d3:8e:9d:cd:ed:b7:62:9f:ee:a9:f9:9d:93:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:87:04:15:14:45:F5:CE:79:9A:B9:A9:D8:D1:7F:2D:45:87:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12EA3788C0F011EFABEF927E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.94.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:bb:6c:3e:b5:d7:e9:97:b9:65:22:ae:3b:b4:56:60:b4:c2:
1c:e1:6a:9a:19:92:36:9f:b4:81:84:46:84:c0:c9:41:51:93:
e1:70:89:6c:c5:a6:10:f4:52:29:ea:56:97:22:3b:29:83:a2:
9a:63:00:65:a6:63:a0:c6:2a:17:2c:7f:c0:92:a2:e3:ef:e0:
7e:0e:86:dc:c3:3c:b9:ac:08:8e:3e:70:fa:ba:2c:3b:87:fb:
94:22:fc:0b:0a:78:10:5b:31:f6:f3:51:0a:11:63:ec:35:44:
fb:8a:38:a7:e3:81:1b:dd:af:bb:1d:61:ba:ff:82:8c:92:7a:
ab:c0:e2:98:46:f8:45:b9:0a:6f:2b:f5:0c:5e:85:b4:4f:dd:
15:ca:e4:9f:10:08:be:10:30:0c:19:06:fe:14:73:59:37:ea:
1e:48:cf:e4:c9:4a:31:76:d6:32:81:1b:c2:32:6b:d4:41:0c:
a8:ed:07:24:c7:53:ed:fb:46:a7:99:85:65:5b:1b:66:a1:8b:
c7:09:05:a6:2b:85:66:69:ac:39:8e:87:46:b5:5a:67:bc:68:
aa:e6:12:23:c9:21:e0:6f:86:a6:4f:3b:07:fa:f3:0e:8b:80:
37:98:4e:47:08:56:78:7d:ce:0e:5b:2b:1e:af:e1:3c:f5:c5:
2c:bc:08:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:06 2025 by rpki-client