Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34B7D88AC19411EFB8B15B76762E951A.roa
File: 34B7D88AC19411EFB8B15B76762E951A.roa (raw, json)
Hash identifier: rknhkpO7GfbAC9svfauchEFUr9G1evhZFkmZQHF9SQ8=
Subject key identifier: 8F:3B:76:47:EF:5D:A7:9D:2C:FF:8E:E5:F6:3F:5A:01:57:A1:3D:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012015
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34B7D88AC19411EFB8B15B76762E951A.roa
Signing time: Tue 24 Dec 2024 01:12:56 +0000
ROA not before: Tue 24 Dec 2024 01:12:52 +0000
ROA not after: Wed 10 Dec 2025 01:12:52 +0000
asID: 984
IP address blocks: 154.90.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73749 (0x12015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:12:52 2024 GMT
Not After : Dec 10 01:12:52 2025 GMT
Subject: CN=676a0a97-25cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:e7:96:83:79:c5:96:f8:23:87:9f:23:19:
65:43:86:11:42:d4:81:22:8c:5a:34:d8:7c:84:0f:
ff:87:a0:84:d6:cb:30:8d:c2:f1:3e:8b:0e:72:81:
00:4d:bd:d7:e4:e2:64:6d:13:b6:c4:bd:23:43:9b:
40:7f:d2:df:1c:20:14:d1:c2:c4:05:d4:3e:a3:95:
22:da:86:07:58:f6:ec:74:45:a4:2f:f7:6c:83:30:
a1:63:53:7a:fe:1a:be:05:42:74:56:51:3a:28:a2:
35:20:94:c5:fc:6a:db:c6:71:9b:99:55:82:cf:e2:
de:7c:24:d1:ea:c9:5f:64:ff:21:d8:d9:9e:55:21:
89:b8:75:bf:72:ff:c7:23:e1:b8:a2:e6:57:77:f2:
65:3e:08:6e:1c:2c:bb:4b:10:a1:0a:43:85:0d:cd:
43:af:a9:4d:dc:b0:fb:bb:6e:ff:4d:08:81:da:ff:
48:ed:5b:9a:b1:9e:5e:26:24:67:8e:a4:ce:2e:5d:
6e:f0:36:09:5c:be:e7:86:d3:34:06:95:2b:f1:ce:
10:8f:7e:5a:af:4b:6e:64:a5:de:4f:56:a8:27:c6:
8e:3d:db:7d:a1:41:2b:1e:aa:05:41:f7:b6:da:a0:
8c:d2:e9:5a:63:27:f4:9b:4e:7f:a5:cd:82:df:93:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3B:76:47:EF:5D:A7:9D:2C:FF:8E:E5:F6:3F:5A:01:57:A1:3D:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/34B7D88AC19411EFB8B15B76762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.162.0/24
Signature Algorithm: sha256WithRSAEncryption
27:63:30:fe:b5:ff:0d:70:c1:e2:bf:07:a3:aa:1a:34:44:1a:
83:29:58:62:ad:7e:b7:19:6c:85:c8:b5:0c:b2:49:55:31:85:
03:8b:00:c9:11:0e:5b:02:e9:24:55:1f:e4:7a:27:c0:1d:72:
60:2d:3b:90:2f:f4:be:e1:90:d4:cb:d4:95:5c:b3:73:13:4c:
b9:78:4e:70:d6:59:cb:f0:fe:4f:a4:22:a0:37:e2:6b:8b:42:
86:5a:a3:c2:b0:64:40:c2:5e:e8:20:53:ff:11:df:49:d7:a1:
04:28:28:37:2a:f0:da:1c:ce:21:49:7e:78:4e:ad:d2:0e:3d:
0c:c6:ff:2f:65:ba:70:40:48:af:09:99:d0:70:bc:87:45:21:
49:56:46:9b:66:e6:27:1b:43:ba:33:28:c1:2b:bf:c5:79:3f:
88:1f:fc:f5:3e:09:07:f3:86:74:45:de:5a:e9:78:fa:42:53:
23:cd:62:3d:3a:b4:de:61:f9:c5:12:9d:d6:e2:fd:16:ec:b3:
9e:be:f9:18:76:7b:35:3c:57:5f:4c:4c:7d:cf:6c:7f:0b:94:
98:e2:9f:af:12:d9:a3:c2:c8:38:87:5f:fe:34:a8:e3:fe:ff:
b3:52:ed:7d:6a:ac:65:38:2c:88:7a:f7:70:8d:eb:f9:e6:87:
ec:7b:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:08 2025 by rpki-client