Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4845D206C0EC11EFBF412367762E951A.roa
File: 4845D206C0EC11EFBF412367762E951A.roa (raw, json)
Hash identifier: kUCRHwmSFlsgiWw91RWtMjy1DNeq/Xf7Vz8Ts1B8QwQ=
Subject key identifier: 7C:F2:03:07:11:19:40:96:4E:6D:8E:93:31:BC:BD:B6:4B:F3:8B:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F2C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4845D206C0EC11EFBF412367762E951A.roa
Signing time: Mon 23 Dec 2024 05:10:53 +0000
ROA not before: Mon 23 Dec 2024 05:10:49 +0000
ROA not after: Wed 10 Dec 2025 05:10:49 +0000
asID: 984
IP address blocks: 154.90.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73516 (0x11f2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:10:49 2024 GMT
Not After : Dec 10 05:10:49 2025 GMT
Subject: CN=6768f0dd-1d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:c6:6a:22:f4:76:25:15:c3:75:9a:64:6f:
08:3a:81:05:e2:87:99:c1:34:8c:8f:e9:26:13:1a:
18:21:7d:db:6e:ef:b1:d7:1e:94:92:c5:61:de:c7:
c8:dc:de:ad:8f:19:d8:9e:ac:11:fc:75:a7:0a:c6:
1f:e4:fd:3f:c5:a5:3c:5f:b3:08:dd:ad:0d:51:e9:
01:59:5b:ed:4a:40:27:81:18:b7:6c:5d:89:23:9c:
91:b8:df:84:33:e1:c3:8f:31:27:cc:55:ce:70:b3:
c5:ce:63:19:36:1d:94:e2:d0:1d:47:c8:66:ec:47:
26:e4:7c:fe:99:53:85:ae:b3:1a:b4:e9:83:78:fc:
85:ca:f0:b6:7a:da:2a:8f:ce:74:13:da:92:ea:b5:
9c:c4:4d:f3:41:72:f9:32:d6:23:e3:c4:64:e5:1b:
91:77:2e:93:8a:2c:ab:65:fb:39:e1:98:72:1b:c7:
74:f3:82:05:88:e2:9f:ad:99:05:d3:52:ee:43:f8:
60:79:f7:88:5e:c6:a2:9a:42:23:74:08:76:00:82:
f2:74:07:64:13:4f:ae:bb:d2:06:a3:84:8d:d9:ad:
2a:fc:79:e8:2b:c3:26:12:bd:9b:8c:8c:ed:7a:df:
0a:47:0b:cd:37:a6:39:d2:52:1c:dd:91:4e:f9:2e:
51:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F2:03:07:11:19:40:96:4E:6D:8E:93:31:BC:BD:B6:4B:F3:8B:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4845D206C0EC11EFBF412367762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.76.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ea:55:d8:a7:d6:42:91:64:ea:2d:4c:21:00:30:23:4c:80:
76:92:e7:8b:e3:75:c7:fa:52:c3:4e:18:cb:90:53:fc:b6:73:
b4:23:95:0f:4b:d8:ad:66:e2:a3:4c:14:fc:a9:ee:44:f8:a8:
8a:d6:5b:a2:f2:98:d1:7d:89:91:42:14:18:d0:fe:9f:16:9f:
c1:cc:73:32:93:43:67:44:2b:d3:7c:b7:b7:7a:bb:62:db:b2:
5c:8d:b3:c8:73:90:6b:fa:3c:f1:2d:a8:78:0c:b1:19:eb:75:
73:05:c1:96:39:a6:d4:f7:2b:c5:19:3e:6f:74:c3:e7:6b:05:
86:5a:0f:54:65:0d:a8:9a:3f:0e:c9:4d:e4:79:2d:d4:25:a7:
66:36:29:93:b3:65:0f:18:98:1b:36:0c:fe:9c:d3:86:bd:7f:
ae:8c:04:a1:13:59:b9:06:de:24:13:61:94:c3:96:3f:e9:64:
47:b2:a7:0f:fc:ee:9b:2d:62:b8:9e:de:a2:ff:7c:fc:f3:b9:
9e:07:cf:a8:d7:62:85:31:e6:d8:bc:cd:a9:a1:ab:34:78:9e:
01:46:02:e0:11:a7:b3:76:f8:c3:93:37:61:07:03:0f:2f:b8:
51:b5:df:f8:53:fa:ee:8b:52:b6:28:ed:69:8b:ca:df:c1:da:
0c:78:a3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:42 2025 by rpki-client