Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5FEC76C19611EF9A2C7F85762E951A.roa
File: 4E5FEC76C19611EF9A2C7F85762E951A.roa (raw, json)
Hash identifier: OUSRv+N29NrrhpCieYaGX0a9OJbUVdLjY0pkRV7cnjM=
Subject key identifier: A8:99:A8:07:4D:8C:1D:0E:FD:06:5D:A1:B2:A1:B7:77:73:EB:33:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01202F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5FEC76C19611EF9A2C7F85762E951A.roa
Signing time: Tue 24 Dec 2024 01:27:58 +0000
ROA not before: Tue 24 Dec 2024 01:27:54 +0000
ROA not after: Wed 10 Dec 2025 01:27:54 +0000
asID: 984
IP address blocks: 154.90.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73775 (0x1202f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:27:54 2024 GMT
Not After : Dec 10 01:27:54 2025 GMT
Subject: CN=676a0e1d-cca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:03:ab:9c:c4:27:92:6d:e9:09:21:1e:1c:
11:08:92:42:47:fc:b8:bf:45:9a:eb:73:e8:80:44:
c9:d2:d7:6b:e8:c4:7c:78:cf:12:cf:e4:85:d0:15:
03:c3:92:cf:ba:82:64:13:6b:56:6d:9d:53:3d:33:
7d:49:dd:74:94:e1:83:98:47:56:e5:70:92:68:9c:
82:bc:8b:37:5c:12:b7:01:29:b1:3d:7a:52:04:d3:
4d:48:a0:c5:76:b4:34:5c:db:77:a6:3f:41:28:b5:
b5:f5:4e:76:86:f0:66:57:83:c3:c6:de:9c:6a:21:
48:7e:a1:0a:2c:76:d0:d4:7b:e0:27:da:ec:6a:9e:
1a:9e:f0:77:4b:8c:59:d5:b7:c9:ab:69:cd:2c:10:
6a:7e:26:c2:71:ba:a0:6c:01:6b:21:06:7c:5e:15:
d3:de:86:ec:3e:49:31:e2:d5:1b:84:6f:76:00:da:
99:5c:be:e2:e1:e3:88:68:b2:f1:d0:bb:da:a7:9f:
ee:e6:d7:53:79:ed:41:4f:b5:f9:8a:19:75:e2:63:
d4:e4:74:0b:73:81:07:e3:12:0d:ed:5f:73:62:79:
98:6f:e5:f1:2e:07:af:6c:90:7c:9e:1b:89:18:e3:
36:b0:ef:cf:c4:34:30:19:10:67:bd:60:97:35:33:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:A8:07:4D:8C:1D:0E:FD:06:5D:A1:B2:A1:B7:77:73:EB:33:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E5FEC76C19611EF9A2C7F85762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.175.0/24
Signature Algorithm: sha256WithRSAEncryption
52:30:7c:0f:72:28:5b:a4:43:79:de:25:c2:49:77:cf:91:bc:
f8:d9:d0:7b:98:d6:54:03:4c:b4:0b:ed:11:b4:b7:c1:42:fc:
5c:a8:e5:8f:df:e8:f1:2e:53:43:d1:3e:7b:9b:b0:b4:66:e0:
69:5b:e8:d6:24:1a:8b:89:38:aa:63:cb:d6:3e:ed:45:38:ab:
54:0d:5a:92:7c:14:3a:b0:05:28:87:a0:2e:b4:0e:ea:f2:2e:
e5:09:51:bf:ff:d5:36:dd:59:2a:2e:a0:24:35:85:0b:9d:0a:
2a:24:b9:b7:47:e3:4d:62:37:a6:44:33:32:cb:46:75:01:05:
88:20:34:43:31:e1:7e:a8:59:9f:2b:33:b7:e2:49:eb:43:cf:
27:84:3a:80:7b:e2:95:41:c9:fe:b3:52:36:22:7e:2f:a1:60:
de:cb:4a:41:78:a8:47:05:6b:25:b2:5e:36:8e:27:03:67:50:
5c:a0:ab:9d:5a:4d:5c:8a:98:fb:5f:1e:b4:6e:7e:e8:83:17:
cd:f8:35:22:d1:87:78:bb:a4:50:50:fd:2f:9a:ac:1f:63:cc:
de:1d:5c:e0:cb:3e:ac:80:c3:64:4c:ad:c9:87:f6:57:22:6a:
39:c4:79:71:cc:1d:f1:4b:b1:f0:b0:24:82:9b:a0:22:a4:8a:
86:e0:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:46 2025 by rpki-client