Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B45CE36C1A211EF8F564360762E951A.roa
File: 5B45CE36C1A211EF8F564360762E951A.roa (raw, json)
Hash identifier: Bi/3SPPO4vujATvfYdSncIowIinuCg2ltWOnW+vNU10=
Subject key identifier: F5:FB:CE:BA:BF:2D:C4:8B:A3:89:C0:D9:CD:4C:1E:56:84:F2:C3:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B45CE36C1A211EF8F564360762E951A.roa
Signing time: Tue 24 Dec 2024 02:54:13 +0000
ROA not before: Tue 24 Dec 2024 02:54:09 +0000
ROA not after: Wed 10 Dec 2025 02:54:09 +0000
asID: 984
IP address blocks: 154.90.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73923 (0x120c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:54:09 2024 GMT
Not After : Dec 10 02:54:09 2025 GMT
Subject: CN=676a2255-d8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1e:40:f1:b4:90:99:c4:b9:f0:93:05:0d:90:
ad:74:ad:bf:ae:76:f8:d3:b3:38:6c:3b:e2:0d:ef:
d0:f7:34:68:6e:c8:0b:5d:62:a2:f1:e6:db:62:e6:
0d:0a:65:82:ab:ac:40:31:ce:11:84:3c:d9:e6:01:
c9:bc:ba:d6:85:73:9d:d8:6c:b2:5b:74:ad:be:18:
77:ed:37:56:00:e3:94:73:a1:dd:6f:53:b5:f4:71:
c1:af:5b:e4:27:4f:da:d0:d9:2c:6e:93:70:8c:f0:
f1:b0:0f:8d:9f:d5:25:3d:96:3f:5c:ef:82:e6:63:
da:87:2e:33:15:f7:d7:1b:9c:96:6c:2b:48:6f:dc:
89:c9:9a:4c:90:a7:32:19:20:5a:e9:bb:58:57:d4:
08:08:c9:18:9c:37:c5:04:86:ff:d3:02:ba:89:ed:
57:3b:e6:48:18:93:9a:85:76:d2:f5:a6:a1:28:75:
ef:41:07:92:7d:cc:b0:8b:86:48:69:4e:e7:43:73:
3c:34:87:35:b2:0a:e5:2f:f3:d3:03:40:fd:f0:99:
46:2a:53:a9:54:1a:03:00:91:8c:a3:d1:bd:55:e2:
6c:1d:bd:1a:42:79:73:b3:25:f3:a5:bd:90:c5:2a:
cf:c1:21:79:6f:ec:41:03:77:45:bb:ea:48:50:77:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:CE:BA:BF:2D:C4:8B:A3:89:C0:D9:CD:4C:1E:56:84:F2:C3:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B45CE36C1A211EF8F564360762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.253.0/24
Signature Algorithm: sha256WithRSAEncryption
54:83:8b:a1:86:2c:0c:c9:79:49:5e:03:42:8c:c6:08:b6:0e:
c6:c1:06:76:91:16:8c:9d:dd:26:18:d3:80:50:cc:82:9f:05:
de:a2:7f:1d:a6:fb:c9:77:f8:9a:00:2a:7f:df:cc:1c:f2:83:
12:00:43:f5:75:de:dd:48:50:83:7b:05:4b:3e:fe:52:fd:5b:
cb:45:32:60:7b:ef:5d:84:d9:fc:be:6a:fa:0c:65:3e:ed:2c:
33:0e:76:00:cf:3a:82:6d:73:27:1b:a7:dd:cd:57:cb:6c:9b:
96:e9:ff:c9:4e:80:38:9b:7c:08:87:da:3c:51:49:f6:50:80:
58:d6:73:42:ac:11:47:16:cf:c4:f8:86:10:57:c9:44:1b:93:
5e:83:1a:21:95:25:df:5f:24:61:13:5a:e1:b9:ba:e4:ee:cf:
fa:65:6c:ac:24:d2:84:a9:72:50:d2:b3:bb:c4:21:eb:4e:41:
91:60:7a:2e:17:87:1e:dc:05:72:b3:b5:33:fb:aa:20:64:9a:
5d:13:68:cb:6c:9f:06:e8:90:63:0b:64:22:31:fe:61:9f:38:
82:e5:1a:c9:c2:b0:6c:0d:43:58:96:30:f6:8a:49:85:bc:33:
b0:05:c2:eb:bc:88:dd:0a:46:c5:33:c8:7e:cc:c4:af:9b:49:
79:2d:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:26 2025 by rpki-client