Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F1EE608C0EF11EF98494A7A762E951A.roa
File: 6F1EE608C0EF11EF98494A7A762E951A.roa (raw, json)
Hash identifier: uUD6K2bry5j5eEKm3p7fKY7WPMF/kNiv1KyA9g1c7W4=
Subject key identifier: 1B:38:6B:E8:81:C0:7B:A7:D2:78:FE:3A:9D:C1:12:62:64:C5:24:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F1EE608C0EF11EF98494A7A762E951A.roa
Signing time: Mon 23 Dec 2024 05:33:27 +0000
ROA not before: Mon 23 Dec 2024 05:33:23 +0000
ROA not after: Wed 10 Dec 2025 05:33:23 +0000
asID: 984
IP address blocks: 154.90.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73544 (0x11f48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:33:23 2024 GMT
Not After : Dec 10 05:33:23 2025 GMT
Subject: CN=6768f626-e677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:ff:4d:94:da:60:d4:0e:ed:cf:66:93:67:
15:76:db:c0:6c:0e:19:ce:34:78:87:29:e7:0b:84:
9c:0d:e0:41:ba:ab:44:c1:57:32:ef:f3:c9:6d:20:
91:4f:86:60:2d:1f:8a:33:f1:77:d7:87:25:f8:89:
ce:8f:66:6d:f5:0c:09:1f:70:66:15:94:a3:65:38:
ea:29:ac:55:55:ad:1f:e0:7a:79:11:95:ed:5b:9c:
04:c9:3f:24:c8:41:5c:f9:59:1b:1d:15:60:cc:b3:
89:8e:78:65:20:dc:96:13:4e:fa:f0:bd:44:5f:f8:
43:a6:3d:d3:2d:70:dc:05:46:62:25:56:27:33:7f:
3e:a8:f1:99:eb:50:b5:e5:c9:4e:93:02:49:2e:f8:
f7:35:2a:50:65:d1:2b:dd:ab:77:10:42:a4:f1:06:
df:69:d3:01:eb:81:96:1d:3e:eb:dc:5e:38:cc:e7:
44:6a:2f:9a:88:1f:dc:41:69:c7:98:ad:db:f5:9a:
a9:ce:52:05:65:d6:b6:fa:14:17:01:cf:70:eb:79:
6f:b5:86:ad:29:0b:7f:8b:68:4e:7d:36:c1:2c:db:
24:1a:b6:95:a7:f3:c4:13:f0:7f:be:a6:4a:6b:f6:
a7:a0:99:97:30:b1:48:b3:49:d0:67:d4:56:63:d8:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:38:6B:E8:81:C0:7B:A7:D2:78:FE:3A:9D:C1:12:62:64:C5:24:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F1EE608C0EF11EF98494A7A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.90.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f8:f7:32:47:a0:6a:30:b6:bd:ee:e8:0a:41:43:a1:4a:a6:
c3:94:e0:4b:ba:69:9b:29:fe:36:8d:5b:24:a5:aa:8c:b8:f2:
cc:ab:d2:a7:33:00:26:ce:8c:07:67:90:11:db:1a:a6:1d:b2:
79:bd:b9:0b:78:fc:d2:df:2f:b9:d4:fe:3d:ad:f7:1b:97:20:
81:73:3c:e9:4b:9c:92:35:85:35:7b:49:d9:d6:e2:16:4a:31:
2b:22:4b:84:64:94:28:6d:96:ab:e5:2e:79:cc:61:4b:53:72:
0b:22:0f:b5:f4:b2:24:7a:2e:7f:f2:02:bf:6b:b4:ff:a9:b3:
13:84:1e:55:a3:00:ed:0f:55:78:fb:c6:52:12:22:49:8a:10:
da:b0:83:cd:31:c1:94:54:9c:20:56:9d:87:95:17:7a:07:70:
98:57:94:ef:74:36:20:0a:14:78:14:94:18:f5:ff:9d:9a:fa:
7e:b7:c4:c0:21:ca:4d:da:27:8b:b0:93:19:4c:72:e7:4b:d7:
05:f4:f1:d8:53:4c:00:19:fd:a7:77:ae:66:38:41:8b:93:47:
90:cb:80:97:e1:ca:82:d4:0a:37:ab:02:28:fe:a9:5a:01:62:
63:ce:aa:2c:99:ce:d4:48:e2:6e:b8:97:8f:02:c5:ff:05:f7:
02:da:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:21 2025 by rpki-client