Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B7575B2C19E11EFB7592844762E951A.roa
File: 6B7575B2C19E11EFB7592844762E951A.roa (raw, json)
Hash identifier: B2chYJ+1qYD7DHlMcskd81Xum0V6+JQZkgm9+6yXTfI=
Subject key identifier: F2:3A:7B:A5:14:1F:05:72:D7:9D:A1:60:30:B0:FA:66:0F:35:30:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012093
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B7575B2C19E11EFB7592844762E951A.roa
Signing time: Tue 24 Dec 2024 02:26:02 +0000
ROA not before: Tue 24 Dec 2024 02:25:59 +0000
ROA not after: Wed 10 Dec 2025 02:25:59 +0000
asID: 984
IP address blocks: 154.90.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73875 (0x12093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:25:59 2024 GMT
Not After : Dec 10 02:25:59 2025 GMT
Subject: CN=676a1bba-cf2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d3:ac:61:b9:7e:7c:e1:86:a9:bc:56:63:5c:
88:96:41:ea:7b:91:64:0e:89:6f:8f:f7:aa:16:95:
e6:e3:28:99:f5:93:81:4b:2f:ca:5b:5d:d6:18:20:
fe:82:4e:c3:a3:cf:09:d6:b7:93:38:87:f4:a1:24:
22:1a:c0:92:19:0d:d1:98:34:dc:83:7b:39:31:5d:
cf:2b:f6:6d:c7:eb:d7:52:95:57:d7:25:c0:fa:b6:
db:d2:95:26:16:10:0d:ef:83:02:4f:ef:94:44:72:
93:a5:17:04:f9:72:f0:8e:23:f3:14:a0:b1:6e:dd:
7f:34:d1:fd:16:89:93:a4:9d:d5:2c:4c:e0:58:26:
e4:f8:ef:30:4a:fa:fb:5d:94:a5:4b:8f:84:22:f6:
c9:6d:4e:3d:43:12:6c:14:5f:bb:84:48:83:99:7a:
bc:09:ff:92:d4:a3:ce:f0:93:74:e0:c2:0a:14:c5:
2e:07:03:d5:df:54:5d:a1:14:7c:41:fc:ea:57:21:
ad:61:27:37:a1:e6:6f:97:71:a3:a6:59:79:4b:0e:
5e:c5:8a:c7:78:e7:a3:b9:95:d9:3f:89:71:7c:7b:
71:01:a2:84:c3:b0:57:d5:1a:37:45:c8:aa:37:6d:
34:4f:4a:86:7e:5e:1f:b0:a8:66:f5:02:d8:94:11:
34:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3A:7B:A5:14:1F:05:72:D7:9D:A1:60:30:B0:FA:66:0F:35:30:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6B7575B2C19E11EFB7592844762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:ef:b3:45:e5:b6:8e:38:83:ff:64:2c:b5:01:09:82:13:a9:
71:ad:cb:2a:42:f6:a4:e8:49:48:ef:c3:8e:8a:7e:26:31:80:
bc:99:6c:db:28:bf:eb:18:b9:45:ad:a3:70:c4:af:1b:ad:e9:
01:a6:64:18:41:2e:ef:7f:86:8f:40:c1:54:35:d7:05:fa:e0:
07:4f:20:37:33:0d:61:f5:21:16:92:28:a2:5d:09:e5:be:f6:
b4:1f:fb:ee:53:be:c4:f3:95:2c:54:cd:fa:31:ea:66:26:9f:
45:2d:ae:53:c1:0f:2e:e0:7c:bb:ba:39:af:c0:3d:99:99:18:
38:ad:da:c5:31:d6:5f:e7:ae:ac:98:75:fb:ce:14:27:21:7d:
0d:f4:96:c2:9e:e9:b8:d9:10:42:cc:a3:2c:5e:16:f0:c6:01:
a8:69:e2:00:8d:1b:c6:90:1b:f8:03:c6:a8:fa:ef:63:fb:fe:
15:a5:c6:16:06:bb:80:6c:23:41:f3:08:2a:89:85:da:b1:09:
ac:79:9a:9e:86:7e:41:b0:20:41:12:9d:59:67:e4:33:e2:e4:
05:2f:bb:35:53:dc:f8:cf:15:ae:5e:54:02:c7:8f:91:23:a9:
35:69:b1:cf:69:18:3b:34:3c:13:f5:59:76:13:6f:16:90:7b:
0d:a6:ba:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:22 2025 by rpki-client