Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B9B5010C0F711EFBBDF0EAB762E951A.roa
File: 4B9B5010C0F711EFBBDF0EAB762E951A.roa (raw, json)
Hash identifier: Qory2QhLTerHyc7BBaxtZEmo21syVBGa+K56SCHRiEI=
Subject key identifier: EC:DA:19:4F:F1:83:96:78:80:E0:14:9F:03:72:6D:82:A3:FB:2E:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F9E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B9B5010C0F711EFBBDF0EAB762E951A.roa
Signing time: Mon 23 Dec 2024 06:29:43 +0000
ROA not before: Mon 23 Dec 2024 06:29:39 +0000
ROA not after: Wed 10 Dec 2025 06:29:39 +0000
asID: 984
IP address blocks: 154.90.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73630 (0x11f9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:29:39 2024 GMT
Not After : Dec 10 06:29:39 2025 GMT
Subject: CN=67690357-4b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:8b:40:39:6f:a7:92:86:cc:ac:6f:ac:03:
8f:a2:97:8d:74:f1:ca:43:2c:02:df:d5:21:29:24:
11:ee:29:24:78:ce:19:dc:99:64:73:c5:40:9e:82:
80:5a:47:77:18:b4:68:f1:e1:f3:44:95:35:0d:db:
4c:d8:89:80:20:1a:ec:e0:84:76:c8:46:88:63:30:
24:21:5b:6c:f3:06:f6:89:33:cd:84:7a:af:7b:c2:
5a:9f:1c:8f:6c:30:4c:40:65:33:52:74:32:e4:36:
f1:bc:08:f7:80:84:6a:08:a6:fa:0a:35:ea:a9:0b:
ea:43:01:64:04:ed:d2:0c:77:a1:a1:48:c1:86:bb:
b4:66:e0:de:fe:db:8a:da:03:c8:67:24:e6:f0:4b:
b8:f4:2b:79:b2:60:21:44:73:82:44:70:c0:d3:b6:
a6:1a:7f:53:10:16:a2:1a:c1:9c:9f:e6:7c:f4:b6:
e9:df:c9:a9:32:97:2d:5c:15:67:db:dc:85:6c:f7:
80:4e:6c:c2:a5:3a:f0:eb:28:b1:a5:d2:c3:f5:e3:
b1:32:f4:b3:49:dd:c6:85:3b:1a:0b:61:09:cc:96:
b4:b5:2c:07:8f:87:7b:72:15:51:09:bc:fe:3a:70:
c2:5f:b6:bd:39:c5:1e:ce:28:ae:fe:f3:a2:7e:40:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:19:4F:F1:83:96:78:80:E0:14:9F:03:72:6D:82:A3:FB:2E:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B9B5010C0F711EFBBDF0EAB762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:13:a0:2b:9e:31:b0:e1:53:e2:b5:2e:8c:6d:d6:03:f1:d5:
7d:f3:c2:8d:3b:15:8d:3a:e3:7a:cb:b4:2b:55:36:91:85:68:
cc:aa:74:69:97:c9:4a:79:30:15:5e:f8:99:16:9d:39:b2:cd:
19:dd:64:23:db:b6:d8:a5:0f:a0:96:9e:d0:6a:2e:4a:6d:bf:
8a:4c:1b:1d:36:b4:41:3e:92:13:7b:1a:4e:73:0f:c7:45:c2:
e6:2d:31:83:d9:47:7b:e9:dc:b3:5d:59:20:dd:bf:7e:eb:75:
1a:72:1b:84:69:0e:a7:0c:6e:21:6c:38:64:1f:6a:6f:08:90:
ec:c8:bb:91:d9:2d:b2:8f:dd:be:e3:36:f3:ec:02:7a:60:90:
30:d7:2f:8c:b0:5b:ce:37:30:f6:c1:f2:27:ff:03:0e:83:b4:
02:f2:5b:32:33:e0:4f:7e:d3:e0:a5:e2:b3:de:92:96:c6:49:
cc:ae:13:cf:f4:c8:10:57:26:c4:fe:b9:16:3e:1b:3e:8d:a8:
c5:94:9b:b9:ab:b7:36:17:67:cd:b3:40:be:df:7d:90:a7:a0:
2c:5c:dc:81:48:52:e5:0c:22:d3:81:d9:aa:28:8e:f7:02:2c:
e4:f8:21:77:e1:2f:35:6a:23:af:ab:79:1d:b1:16:84:5d:81:
4f:15:b4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:54 2025 by rpki-client