Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA6D174C1A111EFAC0AF85A762E951A.roa
File: 8CA6D174C1A111EFAC0AF85A762E951A.roa (raw, json)
Hash identifier: K4F3uCF8Tnnh6LStzZhO2Pia/ji1ADTCk29m6jD5yx4=
Subject key identifier: 46:C0:F4:6A:C3:77:EC:DC:84:A2:C0:F6:48:E3:2A:4A:D0:FB:E3:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA6D174C1A111EFAC0AF85A762E951A.roa
Signing time: Tue 24 Dec 2024 02:48:26 +0000
ROA not before: Tue 24 Dec 2024 02:48:23 +0000
ROA not after: Wed 10 Dec 2025 02:48:23 +0000
asID: 984
IP address blocks: 154.90.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73913 (0x120b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:48:23 2024 GMT
Not After : Dec 10 02:48:23 2025 GMT
Subject: CN=676a20fa-8c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:e1:f3:16:c4:7c:f2:b9:e0:66:6a:4f:c5:
d8:5c:f9:d9:23:24:58:32:15:02:53:88:f3:1e:25:
d6:52:58:27:9b:91:41:ef:48:76:9b:63:51:7b:f2:
0f:69:c9:81:68:09:07:a4:cc:2c:a0:9d:10:96:72:
0e:19:7a:89:ac:a5:25:3c:b6:f4:6b:50:d8:8d:32:
cc:a8:1f:29:9f:74:cf:72:e3:b6:c7:65:ce:8c:c6:
2a:8c:05:06:76:48:fb:48:c5:ae:37:36:87:fa:d2:
40:89:8b:5f:e4:13:01:9e:c6:7a:35:02:16:ec:3a:
35:86:c7:27:39:f2:7b:73:fb:2b:0c:85:33:a8:c1:
ee:6e:31:a7:00:49:7a:22:f2:8e:7d:c7:2b:14:68:
84:d7:91:46:a2:bb:7e:ad:c6:45:37:00:0b:37:a1:
2f:14:1b:a1:27:1b:ee:13:0c:39:3b:3b:9f:26:45:
fc:a1:75:d5:12:e9:a1:5b:be:94:78:aa:ce:bf:2f:
22:7f:ad:1f:ab:5d:76:67:24:a1:fe:b2:b9:18:4f:
88:6e:e9:3f:1f:d0:b2:cc:f5:29:dd:cd:f2:43:e5:
90:10:d2:9d:a4:7b:8c:f3:70:73:21:79:2e:b3:cd:
aa:14:64:f7:61:14:f8:b5:19:1c:3e:6a:fb:af:13:
b7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C0:F4:6A:C3:77:EC:DC:84:A2:C0:F6:48:E3:2A:4A:D0:FB:E3:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8CA6D174C1A111EFAC0AF85A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.248.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:04:0d:f8:c8:62:c9:5c:6d:3c:f3:da:bb:94:8b:a4:d0:74:
51:ad:ab:2c:c2:eb:11:78:7a:09:ea:e5:29:fd:bc:36:cb:24:
e0:07:4e:61:53:5a:9f:42:c1:24:2c:3f:3a:68:10:e3:b6:ea:
2b:79:77:39:a4:15:cc:34:cd:cb:5f:5a:e8:c4:d6:90:40:22:
e8:67:ce:f0:e0:46:a9:d1:5a:38:4e:b1:17:09:25:6e:5a:a0:
75:09:75:47:82:2b:a9:83:9d:61:ad:ec:47:e7:f5:5a:f7:b2:
4a:65:33:22:c7:b2:52:2d:1e:1b:df:21:0f:6e:ce:5b:30:cb:
f1:71:15:dd:29:70:93:44:16:2a:89:63:29:e3:07:83:fd:1f:
fb:e3:84:d2:0f:ea:a7:b9:b7:c5:28:7c:cf:03:0e:0b:0b:1c:
1b:1a:f8:63:86:86:b6:ea:fd:79:ce:35:c4:bb:d3:10:26:e8:
c7:7c:35:5b:8b:e3:c6:a8:ce:d0:79:0d:46:40:93:55:f5:c9:
5e:94:2b:db:27:48:87:49:4d:26:47:bb:b9:13:72:6f:a0:41:
cd:d6:c0:79:bb:8b:65:50:f0:08:e9:70:dc:9d:24:2d:b7:79:
ef:44:22:08:14:1e:58:4d:77:55:f3:99:dd:6a:f0:58:ed:01:
a0:0a:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:22 2025 by rpki-client