Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/448509A4C0EF11EF96687678762E951A.roa
File: 448509A4C0EF11EF96687678762E951A.roa (raw, json)
Hash identifier: JM1pcelBT4xIXjMiAhSzLN7sixZjahc2QwC7IpVORYI=
Subject key identifier: C0:F6:C1:EB:6C:14:B4:40:22:28:F8:7E:28:85:FB:42:DE:C4:BC:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/448509A4C0EF11EF96687678762E951A.roa
Signing time: Mon 23 Dec 2024 05:32:15 +0000
ROA not before: Mon 23 Dec 2024 05:32:11 +0000
ROA not after: Wed 10 Dec 2025 05:32:11 +0000
asID: 984
IP address blocks: 154.90.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73542 (0x11f46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:32:11 2024 GMT
Not After : Dec 10 05:32:11 2025 GMT
Subject: CN=6768f5df-f83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f6:21:be:53:07:db:4c:71:8c:58:d3:5d:99:
24:0a:24:ca:26:47:78:b2:0b:90:5b:6a:48:05:f3:
34:87:0a:af:a5:c4:b3:fd:88:17:33:8c:65:19:55:
af:f5:8a:41:af:8c:16:40:76:69:d0:35:69:c1:5a:
0c:f5:cd:76:15:e6:a1:04:b9:b3:e8:cd:54:71:02:
a5:4a:27:c9:85:54:e4:eb:af:14:bf:8d:b5:c4:8b:
4e:c9:be:d6:3a:8b:63:71:f7:75:d8:9a:d0:5e:49:
b9:f2:ba:78:3b:17:cc:50:31:8b:d4:f8:8e:2d:3d:
3a:42:ef:2c:f1:74:5e:b5:01:1b:28:2e:b4:91:5a:
2f:fc:dc:1c:86:f8:9d:bc:80:72:da:55:2b:7a:a8:
ff:6e:7b:b7:32:a1:6a:d5:7a:66:50:6e:18:41:6c:
fd:86:ef:4a:f2:b7:40:f6:9b:a5:58:7b:8d:d2:a8:
0b:45:e6:97:4d:1a:15:c6:11:ec:27:62:20:c2:3a:
f2:19:03:64:53:5d:ea:34:e3:be:5b:89:d0:45:10:
cf:a6:f0:71:85:c4:f6:68:1e:0f:41:f0:d1:2f:05:
b6:fe:39:24:42:67:aa:cb:59:51:a9:55:d8:cc:dd:
35:95:22:3b:e4:c2:f8:bb:61:25:52:ee:da:ba:cd:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F6:C1:EB:6C:14:B4:40:22:28:F8:7E:28:85:FB:42:DE:C4:BC:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/448509A4C0EF11EF96687678762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.89.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d6:4a:31:22:0a:4f:f1:8e:e4:54:d9:c2:78:30:a2:21:ef:
6b:80:03:a7:57:6d:e7:16:ac:15:74:dd:9c:8e:9e:50:b7:1c:
98:e0:55:b2:8c:df:46:5e:a9:0f:2e:72:c5:0e:37:96:b5:85:
15:47:08:96:e4:b5:98:95:cf:90:0e:7c:15:ab:b2:e5:5c:4a:
ed:86:2d:de:29:d4:ae:ed:a6:4d:86:bb:14:5f:01:05:9a:f6:
1d:f3:7b:93:33:cf:b8:49:a6:a9:6d:59:ff:89:53:7b:60:ce:
fe:9d:b4:61:72:ff:00:8d:18:e1:ee:60:65:06:c7:7f:3f:81:
89:d0:9a:f8:ff:7d:a4:67:0c:80:40:77:94:7a:a6:37:74:72:
47:7a:e1:79:a4:16:a1:da:95:f9:f2:3f:36:12:4e:99:cb:51:
37:b5:27:30:6b:8e:d3:d7:87:30:ed:43:62:2f:a8:ea:98:68:
f5:3e:96:9b:79:1b:ba:04:20:53:31:73:ec:e1:fa:f5:8f:64:
7e:83:b9:97:e1:ea:52:d3:39:74:bc:a6:21:d1:da:66:bb:4a:
ad:a6:0b:31:67:e3:f3:76:22:6c:fc:00:f1:3d:03:ea:ac:30:
e6:77:10:da:86:18:ad:9e:e4:3a:a2:24:a6:f7:e9:1e:33:be:
1d:6c:23:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:51 2025 by rpki-client