Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2890A6D2C0F311EF970FC191762E951A.roa
File: 2890A6D2C0F311EF970FC191762E951A.roa (raw, json)
Hash identifier: a/KQ9cSbrcOE3rB3EZg+61jo5EFU/AaqKQicxu0ttYM=
Subject key identifier: 0D:DB:F0:ED:E1:04:CF:7C:DC:53:F3:63:C9:DA:71:2E:61:0C:51:5B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2890A6D2C0F311EF970FC191762E951A.roa
Signing time: Mon 23 Dec 2024 06:00:06 +0000
ROA not before: Mon 23 Dec 2024 06:00:02 +0000
ROA not after: Wed 10 Dec 2025 06:00:02 +0000
asID: 984
IP address blocks: 154.90.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73584 (0x11f70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:00:02 2024 GMT
Not After : Dec 10 06:00:02 2025 GMT
Subject: CN=6768fc66-c9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:41:aa:80:9c:19:fe:97:cc:80:27:f6:0e:96:
13:9a:1a:01:20:e0:43:bf:a0:15:94:cd:92:63:4c:
87:8d:74:1e:83:5b:57:c8:b5:b8:a3:02:51:32:b4:
94:c9:58:1d:d4:5b:00:54:8f:55:92:91:e5:0a:ba:
57:62:72:be:78:d4:5b:a9:d4:37:0a:af:fc:c9:f7:
01:e3:5b:1e:6b:9f:1f:d0:84:9f:da:42:ae:c8:1c:
3a:ae:30:63:1f:af:eb:38:d4:d9:94:fd:ab:33:30:
2e:62:1e:ff:18:8b:10:65:d9:db:fe:6d:bb:90:d7:
63:b8:07:be:8d:03:1c:9b:b9:46:56:cc:35:8c:6a:
45:c6:c6:3c:2d:b9:12:66:44:f2:b5:01:ed:a9:04:
96:1e:55:ad:de:03:97:ce:fe:8c:3d:f0:3d:eb:2f:
21:46:28:ab:46:e2:11:46:90:50:55:6c:87:65:b7:
e6:3a:f9:5e:88:58:ab:b6:ff:56:0b:85:a7:a0:ea:
65:e1:f7:28:1b:2c:1f:95:09:cb:aa:ae:dc:51:a1:
d5:4a:b0:9d:b2:0a:0c:64:ee:11:46:9a:10:0a:aa:
e0:6e:19:97:8e:d3:33:d9:44:67:74:fd:fd:f4:8b:
ff:33:96:77:9d:3e:48:a3:80:fa:62:d9:05:e7:a2:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:DB:F0:ED:E1:04:CF:7C:DC:53:F3:63:C9:DA:71:2E:61:0C:51:5B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2890A6D2C0F311EF970FC191762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:ea:e3:b8:8b:07:47:ae:26:b4:aa:68:29:b3:79:dc:ef:5e:
46:a3:1b:84:60:72:ed:90:51:77:c4:84:78:9a:bf:68:79:11:
7b:9b:32:2c:19:97:ba:8f:f9:2c:d7:29:49:9c:4a:3c:cb:8d:
58:17:46:91:ed:f7:85:a8:a0:cf:4f:00:63:e8:3f:af:4e:1b:
33:46:7e:46:cf:5d:99:63:db:ef:6c:0b:66:6e:a0:ce:4d:cf:
0e:f2:84:04:cc:4a:47:0b:24:11:e4:dc:d6:15:96:ef:2d:51:
6f:6b:8e:91:c4:df:51:88:42:97:c9:a2:ec:3f:5e:01:d6:12:
c1:fe:98:b7:b1:e0:c7:c2:f2:fb:7e:9c:d7:c7:bc:4e:a1:ef:
c8:78:ce:f0:2e:82:08:c9:66:d1:a3:20:ab:ca:da:3a:11:c7:
e0:cf:ab:e3:a0:5c:74:b4:16:be:ee:a9:57:c7:5a:39:34:94:
8f:d4:9a:36:32:f6:10:f6:07:c4:91:2a:80:bd:ec:18:e3:6e:
89:36:34:d6:12:24:14:e2:d1:34:76:a9:b8:81:12:be:b6:bd:
bb:6e:5f:06:5d:9b:31:32:ed:67:97:ba:57:06:71:63:74:f4:
4a:2b:48:c0:64:92:db:d7:05:ee:34:7a:45:81:94:81:0c:a2:
97:0d:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:50:58 2025 by rpki-client