Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45211DD0C0F411EF8BB24598762E951A.roa
File: 45211DD0C0F411EF8BB24598762E951A.roa (raw, json)
Hash identifier: n7Bz9iW1cKLK6W9B8Z/4ceAbKfXuVVJm6p86kUK61Gw=
Subject key identifier: 78:B6:CA:34:F8:62:69:5F:9C:8D:F3:02:22:A7:A6:F6:F0:88:27:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45211DD0C0F411EF8BB24598762E951A.roa
Signing time: Mon 23 Dec 2024 06:08:04 +0000
ROA not before: Mon 23 Dec 2024 06:08:00 +0000
ROA not after: Wed 10 Dec 2025 06:08:00 +0000
asID: 984
IP address blocks: 154.90.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73598 (0x11f7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:08:00 2024 GMT
Not After : Dec 10 06:08:00 2025 GMT
Subject: CN=6768fe43-d0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:40:f5:22:b6:15:4a:20:32:1f:64:24:72:
a4:06:b3:1f:cf:7e:b6:e0:fe:52:e4:2e:21:68:e2:
f9:0e:e5:2c:5c:85:7a:a5:a4:ac:fa:b1:40:20:c6:
89:e2:88:1b:3d:40:9c:7b:7f:fa:ca:1b:57:21:31:
db:05:2e:cc:92:3c:a7:ec:4b:93:4e:cb:0a:0c:0b:
18:0d:f2:65:4b:17:9c:2d:a6:88:0c:0e:bd:0e:e8:
d3:04:e5:21:3d:96:8a:54:4d:6d:3f:9a:f8:15:81:
19:56:17:1e:cd:03:3d:a6:35:5a:0c:0c:cd:85:b3:
e4:69:e8:07:3f:c1:a1:78:3f:a6:52:9f:8a:ff:57:
dc:83:fd:c2:bb:6f:76:fe:91:ee:9c:b9:a6:d9:23:
dc:77:28:4e:d9:7d:7e:38:05:f5:53:79:d2:22:85:
a4:8b:25:07:b7:73:11:d6:85:23:f0:94:6c:68:07:
77:7a:35:df:76:28:11:96:ef:7f:b8:6b:99:2f:66:
0c:be:50:03:4a:09:84:09:6f:f1:f1:86:3f:2d:b0:
c6:80:51:9e:09:6b:64:5e:25:1f:9c:81:32:02:78:
c9:0a:0d:11:62:86:bf:41:81:bc:8b:81:b2:32:79:
a7:2b:fc:6c:37:3e:8a:a2:fd:3f:78:27:ef:3a:77:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B6:CA:34:F8:62:69:5F:9C:8D:F3:02:22:A7:A6:F6:F0:88:27:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45211DD0C0F411EF8BB24598762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.117.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e6:cd:69:56:92:ad:7b:97:3b:3d:3f:a9:b0:6b:3f:8d:fc:
86:44:67:bf:dc:ef:b4:23:4b:2d:e4:4e:80:32:a1:9a:38:7c:
64:f5:07:df:0e:d9:67:62:66:58:bd:08:4b:42:52:fc:91:58:
0c:85:74:b8:87:5b:94:b7:4a:88:f4:9b:30:75:8f:fa:83:c2:
01:f5:9c:8a:9a:da:19:0f:a2:16:2f:1a:70:47:77:22:79:ed:
78:79:39:ef:46:34:c6:a3:00:0d:0c:7f:49:81:1c:be:8c:64:
a8:4f:f1:27:b7:86:7d:cd:04:20:94:a9:21:c5:e3:4f:c3:8f:
3f:18:1c:c2:e7:a9:09:47:6a:9b:5d:6f:48:d0:5f:39:43:b4:
51:df:bc:6e:3e:d2:00:d4:83:f5:10:56:bd:0b:f7:d1:d2:66:
a4:b2:96:ad:25:5e:0f:6e:db:a5:c6:8e:62:21:f3:ff:4d:86:
00:5b:70:af:4d:b6:3c:71:c7:d2:55:df:3d:ce:d5:41:7d:11:
41:16:cf:7f:a3:41:50:36:41:7f:28:69:db:58:ec:f4:d0:bb:
6e:3b:e7:b2:4d:e2:74:5d:02:dc:46:61:79:52:9b:00:15:e1:
18:42:e0:fd:3d:95:22:8d:c1:a1:13:2e:43:56:28:e9:39:1c:
f0:a4:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:35 2025 by rpki-client