Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F924BC8C19511EF95D2567F762E951A.roa
File: 2F924BC8C19511EF95D2567F762E951A.roa (raw, json)
Hash identifier: sSQvnK8rd8ur2hgY9b49vkV5xNaW1axijh7I1e4l8HU=
Subject key identifier: 8F:5B:DC:E1:83:71:2A:71:62:8F:13:B0:48:A7:D1:93:83:7E:7F:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012021
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F924BC8C19511EF95D2567F762E951A.roa
Signing time: Tue 24 Dec 2024 01:19:56 +0000
ROA not before: Tue 24 Dec 2024 01:19:53 +0000
ROA not after: Wed 10 Dec 2025 01:19:53 +0000
asID: 984
IP address blocks: 154.90.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73761 (0x12021)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:19:53 2024 GMT
Not After : Dec 10 01:19:53 2025 GMT
Subject: CN=676a0c3c-f03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:85:2f:75:c9:38:70:50:72:1f:62:13:75:
26:ea:d6:57:b2:89:7a:cc:6b:14:3c:ca:00:b4:ff:
1d:2f:77:af:3f:af:74:4a:ea:72:81:36:56:d6:e4:
fd:57:48:c0:28:25:d7:ee:29:69:e3:44:cd:e9:52:
1f:8f:4c:0d:a3:05:cf:e8:80:19:bf:05:43:e5:b7:
89:74:23:ab:34:36:0f:6a:c9:aa:2c:fc:a6:d3:d5:
3b:df:ad:63:a3:08:ca:ca:bb:39:8b:21:42:b5:00:
b9:cc:a6:32:bb:58:49:cf:f6:84:3d:d5:56:f6:ff:
2c:f5:af:96:a4:03:68:e0:4b:ed:24:9b:f0:64:51:
b7:7d:5b:29:19:5e:50:d1:fc:d0:bc:dc:77:fe:fa:
72:2b:0b:02:c5:2f:17:44:67:c0:c7:9f:76:34:c6:
49:4f:a4:48:9a:bf:77:41:47:5d:47:33:a9:9d:59:
08:38:be:6a:ea:5d:54:d2:79:f3:1a:4f:55:b2:00:
45:87:e2:28:b3:d6:c8:51:aa:72:9a:7d:02:83:90:
0e:70:4a:ca:ec:59:eb:74:7a:0e:97:df:dd:25:dc:
e8:6a:39:a4:2b:82:fe:58:a8:a9:1f:79:52:e3:3f:
3c:ae:f9:8b:d7:35:f4:0e:f2:5a:70:fa:58:77:c0:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5B:DC:E1:83:71:2A:71:62:8F:13:B0:48:A7:D1:93:83:7E:7F:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F924BC8C19511EF95D2567F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.168.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:27:ba:27:89:2c:6b:14:69:ad:88:28:b0:d1:f5:a7:3c:cd:
21:b9:b5:62:cb:e1:1b:8a:c3:4c:e9:4a:fe:64:99:37:4a:9a:
c2:04:d0:86:f0:13:bd:25:c0:5f:f7:45:ec:6f:7b:06:e7:ef:
05:47:b3:95:a3:20:56:d0:91:6d:8c:11:f4:fa:15:55:56:73:
0c:a8:e8:72:eb:1c:b2:49:30:df:e1:9d:3c:58:37:81:32:7f:
05:69:40:07:3b:47:b9:95:59:87:77:6b:b0:3e:40:74:19:56:
48:9b:ad:00:c2:1f:41:ed:3d:db:30:4e:dc:9b:13:cb:58:4d:
7d:46:64:53:28:53:20:3f:fc:d2:53:05:de:cc:6c:63:7c:6f:
f2:7a:c8:22:73:5b:69:54:c0:52:3b:dc:04:1e:f7:98:9c:f0:
e3:1b:21:dc:0c:90:7a:68:ba:3c:61:bc:6d:90:1d:d8:ec:d7:
bd:89:42:73:34:6d:a3:5f:20:0c:a7:6c:fc:0a:ae:c2:02:27:
5e:bd:ca:38:0e:86:3f:bd:11:8b:09:86:14:1e:63:90:3e:1e:
62:66:0c:12:b7:6c:65:a7:99:9e:e0:56:bb:7b:72:eb:d9:2d:
72:1e:c5:ba:cd:db:cc:ad:5f:34:85:1a:6f:30:8b:a5:69:82:
d8:39:4d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:47 2025 by rpki-client