Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7769AEF8C0ED11EF85F2A56D762E951A.roa
File: 7769AEF8C0ED11EF85F2A56D762E951A.roa (raw, json)
Hash identifier: y4lXHCaTxMtSzcDc3JkhfMd9knIvXo1N+/ObJIg04AE=
Subject key identifier: 91:55:28:07:AD:EF:70:DD:5C:74:13:54:D0:A3:73:C5:1F:28:24:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7769AEF8C0ED11EF85F2A56D762E951A.roa
Signing time: Mon 23 Dec 2024 05:19:21 +0000
ROA not before: Mon 23 Dec 2024 05:19:18 +0000
ROA not after: Wed 10 Dec 2025 05:19:18 +0000
asID: 984
IP address blocks: 154.90.83.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73530 (0x11f3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:19:18 2024 GMT
Not After : Dec 10 05:19:18 2025 GMT
Subject: CN=6768f2d9-eb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:1c:9d:00:a8:28:e1:4e:6f:12:77:72:c3:
ab:99:8a:1c:90:65:2d:d7:45:3d:a9:c4:9e:49:e1:
53:0a:96:5a:af:ad:fd:c3:c3:d1:46:20:0e:94:1b:
e2:c3:fa:de:67:bc:24:bf:14:ec:12:36:21:82:81:
1e:08:22:03:ac:35:ee:e8:7f:59:97:48:03:4b:87:
e0:77:e2:02:70:14:e0:14:a1:bf:de:64:fe:fa:a6:
61:fc:19:84:88:d1:97:91:86:2e:59:8d:8f:f1:f0:
ac:1b:50:ad:a8:cf:8e:44:51:5c:c0:bf:cc:de:1f:
c5:6f:1d:be:d9:f5:7f:0f:07:80:32:b3:57:6b:c1:
f8:e7:ca:ca:d3:68:39:d3:3e:27:65:ea:60:2e:84:
7c:b2:7a:a8:ee:e8:08:79:ff:23:7d:7e:cc:29:2a:
e6:7c:c3:e3:ac:a8:a9:63:df:c0:b0:7f:34:24:54:
cd:80:9e:b6:fc:c5:d9:1e:91:01:6e:c6:d3:63:7a:
f0:ba:ab:bd:55:9c:9b:3a:96:04:80:b4:0b:86:96:
5f:d8:d2:20:55:0c:2d:6d:36:d8:e8:3d:ba:35:60:
b5:ef:35:63:39:3e:74:3c:70:fa:85:c5:52:a9:1c:
8a:c6:5d:dd:ca:4a:9a:93:bb:bd:28:1c:7f:d8:5b:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:28:07:AD:EF:70:DD:5C:74:13:54:D0:A3:73:C5:1F:28:24:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7769AEF8C0ED11EF85F2A56D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.83.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1f:bb:f2:5c:b8:99:c1:fb:15:b4:c3:32:fa:c0:8d:4f:d9:
74:38:62:a9:d7:5b:48:f8:c3:3b:01:72:7b:35:87:31:16:11:
a4:13:1e:8d:a5:67:55:46:6e:ed:47:65:5c:1e:a1:70:12:fe:
06:05:b5:92:57:a3:9a:ce:bc:70:37:8a:63:8a:bc:9b:35:7b:
b8:be:6b:59:25:bc:6d:00:42:ce:67:27:dc:f1:ee:e0:0b:3e:
ed:54:e1:fc:92:d8:74:b9:83:5c:8a:9a:09:63:f7:50:4a:fa:
33:e3:14:12:a9:27:56:86:f1:da:99:72:a1:3c:20:82:89:b5:
a6:5d:dc:46:77:9b:fc:9d:bf:f1:fd:73:3f:26:d3:ed:e2:34:
34:56:06:7d:0d:5f:20:78:96:e4:27:a8:3f:4e:25:78:73:bd:
52:0a:8a:b4:0c:19:0b:65:14:61:53:4f:80:8e:69:ed:30:4b:
17:da:c8:34:a7:e9:37:ac:2c:cb:dc:c6:c6:28:e3:65:8b:3b:
09:9f:d6:b5:46:ca:fb:6f:7d:69:61:80:b8:9e:33:58:11:23:
3b:0c:3b:df:4f:dc:87:11:36:60:59:d5:d2:bf:6d:9f:93:0b:
40:9c:00:7b:23:f7:76:83:48:9c:bd:ee:0d:5b:61:d9:bb:18:
dc:4d:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:58:38 2025 by rpki-client