Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E14E0AAC0F411EF807E5E98762E951A.roa
File: 6E14E0AAC0F411EF807E5E98762E951A.roa (raw, json)
Hash identifier: Cqkd659YNo1Pbgy739X5AGtLH7XE5ovDAPXSg6b8I18=
Subject key identifier: 29:78:D6:1A:BB:D7:BB:76:65:E9:DF:CF:C8:6B:5F:F3:6F:DC:E4:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E14E0AAC0F411EF807E5E98762E951A.roa
Signing time: Mon 23 Dec 2024 06:09:12 +0000
ROA not before: Mon 23 Dec 2024 06:09:09 +0000
ROA not after: Wed 10 Dec 2025 06:09:09 +0000
asID: 984
IP address blocks: 154.90.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73600 (0x11f80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:09:09 2024 GMT
Not After : Dec 10 06:09:09 2025 GMT
Subject: CN=6768fe88-c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:41:1f:f0:8f:8b:ab:c8:9e:82:44:3a:81:
1c:78:20:32:06:8d:57:46:ee:73:9d:df:e6:d4:dc:
38:17:54:1f:87:fd:26:3d:fd:1f:fa:d9:c9:85:87:
19:d9:2b:5d:40:d0:f8:70:be:ca:14:05:e6:a2:59:
d3:b2:85:5b:e5:a4:7d:29:fb:49:8a:65:6a:bd:ea:
8f:af:a8:fa:be:1e:cc:1c:ec:02:69:0f:f2:b9:49:
db:3c:16:f9:c0:f4:58:ec:67:e2:ea:8e:34:5d:64:
5d:a1:a6:bd:29:39:98:5c:62:b1:34:fe:f0:62:04:
b1:2d:91:7a:f0:a7:ba:54:63:8b:7d:65:c1:5a:d4:
29:80:45:c0:5a:99:1b:1f:4e:61:51:4f:f0:2f:02:
c8:78:12:ad:82:3b:e4:9c:1e:47:11:82:2f:34:08:
c2:8c:80:5a:39:6e:51:36:6f:2a:6d:e6:74:cd:79:
04:98:0c:66:64:c0:33:43:e8:da:84:76:e5:6a:33:
fb:1e:cf:0d:24:75:78:8e:db:89:bf:0b:1e:b8:90:
10:50:e8:75:3c:ee:9a:09:da:e4:1b:0e:59:b0:bb:
19:90:11:b1:32:79:c4:f2:cb:c3:0a:75:ed:62:08:
de:9c:03:0a:e4:c0:42:44:f9:ff:a9:f5:52:de:f5:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:78:D6:1A:BB:D7:BB:76:65:E9:DF:CF:C8:6B:5F:F3:6F:DC:E4:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E14E0AAC0F411EF807E5E98762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.118.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bf:ec:95:e7:f6:8b:dc:94:d6:82:88:26:54:6f:60:28:23:
ef:66:39:17:91:35:66:4d:d1:57:02:7e:a4:02:82:e9:3d:08:
36:f8:4c:67:e3:cb:0c:38:dc:a5:1e:23:59:9f:c3:67:b0:c3:
39:d8:6e:7b:17:37:a6:54:2a:53:10:89:05:d8:63:ab:cf:83:
43:e0:c4:02:da:e9:ca:f9:6d:d5:62:de:d5:33:82:f9:fe:02:
f4:07:b0:c4:12:b1:f8:64:e6:98:8a:2c:83:13:74:db:ce:6d:
71:bb:5a:b9:33:01:d8:f2:3e:84:fe:18:87:0e:08:46:33:38:
23:9d:41:87:7f:4d:31:8b:be:3b:ed:f1:d8:54:d6:5e:e9:1e:
ca:9a:10:63:c8:91:5b:2a:cd:bb:8e:fe:0d:cc:9a:71:69:63:
9a:13:28:85:8f:2d:ee:74:47:fe:05:e6:83:95:57:22:74:35:
42:33:a8:e7:95:58:3d:d3:26:05:5e:c0:2a:49:22:52:b4:b2:
28:2e:11:eb:30:cb:83:c4:12:ec:d9:f5:58:ef:b7:ab:dd:51:
76:43:ef:de:19:c2:6f:3a:1d:11:41:2c:48:3e:08:e6:04:f7:
f1:07:7f:d8:80:10:ae:23:a6:52:f0:74:ea:fb:97:94:74:56:
52:0c:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:41 2025 by rpki-client