Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA4289EC0F411EF96607296762E951A.roa
File: 1BA4289EC0F411EF96607296762E951A.roa (raw, json)
Hash identifier: qEVGIptqDpTEl/OWv7VcvzdXbGMc5fi9a5WOpg3A7g0=
Subject key identifier: DC:ED:CF:B3:69:6C:D7:1D:0E:6F:7E:97:92:18:A2:66:19:01:20:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F7C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA4289EC0F411EF96607296762E951A.roa
Signing time: Mon 23 Dec 2024 06:06:54 +0000
ROA not before: Mon 23 Dec 2024 06:06:50 +0000
ROA not after: Wed 10 Dec 2025 06:06:50 +0000
asID: 984
IP address blocks: 154.90.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73596 (0x11f7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:06:50 2024 GMT
Not After : Dec 10 06:06:50 2025 GMT
Subject: CN=6768fdfe-3c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:ee:d7:99:be:24:f4:d8:c1:45:77:ba:cd:
f1:78:a2:89:cc:01:02:d4:6a:7b:df:38:53:47:4d:
a2:5a:01:2f:19:08:e4:10:39:e5:03:99:20:1f:d1:
56:3d:cb:3a:09:a7:21:cd:4a:60:fa:cf:8b:d6:8f:
38:ac:e7:a8:8d:3c:1d:43:9c:0f:81:a8:78:54:b1:
0b:c6:61:24:db:2a:1a:7d:0c:52:8e:16:50:19:2d:
fb:77:8c:bc:2a:81:84:70:37:5c:24:63:3f:5b:fe:
de:8b:49:40:45:cb:22:1c:00:89:3a:8a:54:ab:37:
96:d9:ff:07:54:57:1e:50:b6:39:8d:fb:f3:2f:93:
5e:8c:57:2b:34:ae:2b:9f:e2:93:d0:26:36:e5:05:
85:d9:74:f4:99:b0:83:4b:b4:70:4c:76:69:9d:ae:
61:a5:eb:e8:04:2f:be:19:40:a9:98:b0:bc:bf:af:
f5:81:e2:48:25:01:ed:dc:3a:b6:f5:ea:ab:7f:c5:
c8:6d:50:d5:c4:23:cc:d9:e7:ca:26:12:e2:dd:d6:
ca:35:6c:24:9b:8f:e9:48:d6:99:53:39:73:f1:39:
4b:af:b8:35:b0:fe:a7:48:16:00:de:df:0d:07:28:
eb:30:29:38:e7:1a:18:c4:7b:00:dc:f9:28:05:e4:
97:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:CF:B3:69:6C:D7:1D:0E:6F:7E:97:92:18:A2:66:19:01:20:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1BA4289EC0F411EF96607296762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.116.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a2:9f:cc:0c:19:2b:8b:7f:f7:87:62:4d:18:26:ab:46:85:
f5:2f:4e:3f:57:66:d0:e3:e9:f2:78:c9:74:a0:be:e1:05:e6:
f8:1b:5b:40:16:e4:07:b1:4c:96:ce:85:ff:2f:a8:7e:df:ce:
a4:87:9c:a4:8c:4b:5d:39:7f:9f:4a:d4:c1:81:45:20:ae:5c:
76:05:49:59:b4:ba:76:07:3e:13:b0:ab:5a:8e:c8:f6:a3:d4:
46:45:3d:55:40:15:16:a3:3b:05:d6:49:7d:a7:13:fc:b6:a7:
2c:d9:2c:55:48:ed:d8:33:04:a0:59:ef:88:43:15:08:4c:25:
12:31:97:d5:23:22:73:f7:78:af:22:61:75:16:43:08:c7:36:
4f:8f:77:fc:f7:cb:cf:d8:6f:4c:fb:ee:3e:70:65:7b:43:a4:
0d:1d:ee:3e:44:b0:35:68:ef:5b:45:fc:5b:e5:6c:83:0f:02:
30:d3:2a:a1:41:5e:af:f7:88:4f:d0:67:48:b4:12:e3:f0:aa:
01:db:a3:ad:d2:43:57:83:22:ae:c9:32:ca:46:bc:05:c2:11:
26:33:d1:5c:7d:27:27:18:28:79:98:dc:8d:d4:67:e7:d4:52:
78:ee:31:bc:16:71:cc:e3:49:62:c8:3d:36:e7:03:9d:96:3c:
cc:06:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:53:07 2025 by rpki-client