Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773F94FCC0F111EFBDF02B87762E951A.roa
File: 773F94FCC0F111EFBDF02B87762E951A.roa (raw, json)
Hash identifier: Y2faJsPQmsrDp0Di07SZj1YJ+3jeynQ7Enc/DM2cyzA=
Subject key identifier: BB:4D:5F:A3:C1:C7:14:DC:B2:CF:D3:85:26:28:BE:02:FF:60:4B:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773F94FCC0F111EFBDF02B87762E951A.roa
Signing time: Mon 23 Dec 2024 05:47:59 +0000
ROA not before: Mon 23 Dec 2024 05:47:56 +0000
ROA not after: Wed 10 Dec 2025 05:47:56 +0000
asID: 984
IP address blocks: 154.90.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73570 (0x11f62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:47:56 2024 GMT
Not After : Dec 10 05:47:56 2025 GMT
Subject: CN=6768f98f-e27d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:56:0b:6e:6f:36:61:33:44:28:92:90:17:
06:7c:bf:27:87:4a:5f:27:07:52:88:1c:86:3a:14:
b5:ff:c8:8c:76:bb:e6:a0:b6:1d:c0:6e:7a:38:5d:
ab:b9:db:a5:49:7f:af:21:6f:20:db:cc:3d:b3:7e:
d1:31:3a:40:33:d6:1c:40:4b:56:6c:0e:7d:cc:7b:
73:17:ad:9e:b5:04:6c:34:23:a9:52:4b:74:22:22:
cf:8d:6b:4e:e6:bf:c3:13:65:69:61:4d:1f:c5:94:
d5:4d:a4:8a:94:df:0d:18:04:00:7f:03:be:f8:c3:
ea:d4:9a:5a:e6:71:0f:5c:bc:7d:64:7f:8d:6d:9b:
4a:dc:10:1d:ac:eb:da:7c:75:c5:dd:45:39:19:0b:
99:5d:b6:96:1a:cf:e9:3d:e6:65:62:3f:ee:82:4f:
ae:2b:dd:71:77:76:f7:cf:ed:93:13:f8:4e:7e:67:
17:bc:90:ee:13:5a:ad:9d:88:06:75:78:4a:08:b1:
06:76:b2:b0:26:df:af:dd:7b:48:4e:5e:7b:86:db:
b7:b8:7d:9c:13:42:f1:ff:27:18:8e:f5:61:e2:09:
8c:39:70:23:8e:fd:f0:33:c1:81:fb:72:9a:86:81:
b0:a8:18:35:28:3d:6f:dd:a9:84:31:63:5a:87:3a:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:5F:A3:C1:C7:14:DC:B2:CF:D3:85:26:28:BE:02:FF:60:4B:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/773F94FCC0F111EFBDF02B87762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.103.0/24
Signature Algorithm: sha256WithRSAEncryption
41:34:df:b0:9b:1e:9b:8f:0b:52:3e:24:f3:91:1f:9f:c7:be:
a7:55:7c:70:6e:d8:ed:29:30:0c:cf:68:e3:ef:43:e9:6f:30:
9b:07:0b:14:31:72:0d:ce:3b:6a:bb:b9:7d:a2:53:46:8a:e1:
8f:0c:9e:af:91:44:be:c6:f1:7e:49:9e:33:ac:7b:8c:2f:f9:
42:dc:17:94:65:0a:34:b5:db:2a:63:6e:30:35:fa:b7:1a:c6:
6b:cc:2f:c7:85:e8:47:8e:6b:6d:aa:3f:0e:3b:ab:79:02:25:
6b:29:f3:59:6b:6e:db:1a:df:d3:77:69:05:d2:06:5c:a4:8d:
3e:9f:9d:e7:17:b9:b3:1a:57:e4:70:7a:52:d6:bb:b8:91:36:
6a:8d:64:59:fa:d5:e7:0a:c3:f0:07:16:69:7f:56:11:fb:d2:
0e:da:e6:bb:cf:36:5a:dc:c8:93:81:8c:98:58:6c:81:5e:fc:
fb:2d:75:d2:5e:f9:22:75:cd:89:0d:77:16:2f:f7:80:a1:e9:
43:88:4e:ea:24:44:7c:d3:ae:d0:66:bc:21:78:4b:89:0a:44:
c6:71:3e:bd:79:fe:f6:f2:b7:f2:7f:ee:08:7f:ca:09:ec:e0:
64:2a:34:84:ad:30:87:87:0c:71:0e:e3:ac:ee:88:77:1f:60:
11:5d:27:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:19:01 2025 by rpki-client