Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/695E5A6AC19811EFB9F34796762E951A.roa
File: 695E5A6AC19811EFB9F34796762E951A.roa (raw, json)
Hash identifier: Ln1DnV9aykGE6E3St2ng8xCPWB7zp8yfJrIauKQDm/Y=
Subject key identifier: 9E:06:08:E7:33:F6:9C:19:9F:50:E8:49:AE:B0:E0:A8:AB:7B:AF:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012049
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/695E5A6AC19811EFB9F34796762E951A.roa
Signing time: Tue 24 Dec 2024 01:43:02 +0000
ROA not before: Tue 24 Dec 2024 01:42:58 +0000
ROA not after: Wed 10 Dec 2025 01:42:58 +0000
asID: 984
IP address blocks: 154.90.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73801 (0x12049)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:42:58 2024 GMT
Not After : Dec 10 01:42:58 2025 GMT
Subject: CN=676a11a6-be70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:86:3c:20:c1:fd:0e:8a:66:36:e5:91:f9:
44:68:23:64:8f:b4:b5:a7:91:96:87:e4:bc:21:ad:
f3:1a:1f:72:28:a0:0f:bd:73:90:52:be:58:62:18:
29:9b:ef:e3:95:0b:39:89:50:e7:c8:f0:d2:a9:6c:
1d:ea:2e:8a:3d:3c:e1:e3:6c:74:f7:fd:77:6c:c4:
ef:49:46:24:24:3e:26:68:73:81:53:e2:9d:71:9a:
fe:4d:1d:4c:c2:96:cb:54:c0:30:6c:08:de:1b:da:
e9:d0:4d:6d:63:ca:ff:29:bc:4e:c2:81:fc:9a:79:
17:54:2b:f8:51:8d:58:f7:e0:4b:ef:68:23:2d:70:
49:38:fa:8d:cb:dd:e2:64:3b:f2:7b:66:57:3a:37:
c6:33:e2:8f:20:00:d6:5f:e6:ee:46:7f:94:97:d0:
cf:e3:a0:4b:5e:0a:41:3b:0b:cc:5d:75:f7:74:d8:
ce:0f:c1:8e:b3:76:ca:d9:d6:85:be:e3:cb:65:0c:
3c:91:d3:49:04:e1:bf:b1:be:6b:70:51:df:57:c3:
9e:9d:16:bc:e6:57:f7:22:bf:01:ad:b9:6a:ea:99:
ed:d1:e4:0f:ab:0e:1b:6d:d2:07:b1:23:1b:73:d7:
ae:d9:65:11:1e:7b:aa:dd:cf:c6:c6:d5:cd:d3:90:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:06:08:E7:33:F6:9C:19:9F:50:E8:49:AE:B0:E0:A8:AB:7B:AF:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/695E5A6AC19811EFB9F34796762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.192.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ef:f3:e6:45:a6:24:bb:a2:db:fe:8d:b1:3b:e1:92:5f:75:
de:64:d4:d2:99:c9:05:e7:fa:aa:23:88:e0:e3:4f:88:68:9f:
9f:d8:d2:72:ea:b3:93:9b:1b:53:ad:05:06:ed:23:db:de:8f:
db:11:d6:c5:77:7f:2e:b0:4b:2c:c4:fe:77:8e:a8:87:c5:d9:
ba:c5:11:4b:30:42:3b:a4:2f:6b:16:b5:7f:5a:ab:8e:4b:1c:
cf:6f:9a:63:cb:91:bf:00:71:16:13:07:4c:0d:c3:f0:61:46:
d5:a7:ca:46:99:68:71:a0:50:d0:33:4d:ab:22:c3:0e:7a:fa:
05:a9:e5:57:ec:ba:14:88:6f:9e:56:eb:8d:1a:eb:a0:cf:fc:
2a:49:f8:b5:ae:bd:16:28:b4:44:65:1c:61:f7:0d:27:fd:dd:
f2:1b:84:15:f0:7d:35:85:fe:50:1c:cf:e9:68:82:4e:33:92:
b5:e6:a2:08:0a:0c:54:dd:6b:03:92:79:c2:70:b6:13:5b:79:
8c:80:49:3e:2b:ef:0e:51:97:a9:8d:f4:10:46:a4:43:10:0a:
a2:d5:ec:ca:30:6e:5f:8e:b7:35:cd:44:b1:02:ec:1e:0e:65:
2a:e5:1f:8b:f1:46:1e:08:20:c1:79:a6:15:ed:5c:c2:32:e4:
7d:5a:aa:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:33 2025 by rpki-client