Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DB0306EF62711EFBB81715F762E951A.roa
File: 8DB0306EF62711EFBB81715F762E951A.roa (raw, json)
Hash identifier: +3BBpSL6jAgpsp2aVTWLZXC91U727gUM/nC6uSlJ4WY=
Subject key identifier: B3:E3:3C:D0:77:DC:D4:DA:25:38:73:7E:22:CF:B7:77:8C:A6:A2:7C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016CA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DB0306EF62711EFBB81715F762E951A.roa
Signing time: Fri 28 Feb 2025 22:58:41 +0000
ROA not before: Fri 28 Feb 2025 22:58:38 +0000
ROA not after: Sat 19 Apr 2025 22:58:38 +0000
asID: 138915
IP address blocks: 154.90.60.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93351 (0x16ca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 28 22:58:38 2025 GMT
Not After : Apr 19 22:58:38 2025 GMT
Subject: CN=67c23fa1-8599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:57:1f:bd:b1:8a:34:bb:4e:f1:84:ff:de:
b1:05:9f:ec:85:f3:30:27:31:82:e5:69:74:0a:9d:
04:fa:72:dd:b7:e5:88:cd:3d:76:6f:8a:e5:2a:8c:
71:43:3c:2d:fb:a9:93:ae:61:49:77:27:28:9c:e1:
4e:e8:ff:83:87:0a:e1:13:b7:b6:1c:e2:07:4f:b1:
3f:54:b7:39:d4:5d:42:fa:5f:a7:31:8b:7e:c5:97:
9b:fc:7a:58:4c:9d:f6:31:1c:0d:23:55:28:3d:07:
c0:81:5d:90:27:36:fe:bb:e6:1f:c4:96:e4:13:70:
14:e7:0f:a6:70:b7:65:6c:ed:2d:9a:0b:6b:4a:94:
91:ad:4f:c0:d4:2e:94:1c:6a:d3:ad:d8:f4:a1:a0:
7c:fb:bb:a9:0e:e2:37:6e:4f:84:56:f6:7b:61:88:
43:fa:57:6a:3f:d4:9a:b4:b4:01:9a:c7:5c:1e:b4:
b2:56:a7:28:00:98:4c:c7:d1:5c:9e:cc:f5:03:4f:
c2:18:9d:68:e0:6b:15:33:d9:bb:1a:b0:ec:68:36:
34:ba:00:8f:26:64:ca:82:8d:09:89:45:f3:33:68:
3e:5f:6e:aa:bb:c7:09:96:95:ad:aa:5c:79:d2:6f:
ad:3d:65:aa:07:5b:fa:65:7a:ed:58:6d:a3:0e:f1:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E3:3C:D0:77:DC:D4:DA:25:38:73:7E:22:CF:B7:77:8C:A6:A2:7C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DB0306EF62711EFBB81715F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.60.0/23
Signature Algorithm: sha256WithRSAEncryption
74:5c:15:16:67:c6:e2:07:df:fe:7d:87:ee:2b:8b:44:92:99:
df:62:e0:a8:c8:82:2f:09:02:77:77:82:41:9b:b1:6e:fe:bc:
b5:f4:4f:39:ea:4b:3d:8d:2a:ea:d6:0a:4d:2c:c2:8c:7b:90:
b6:a0:80:a4:ac:ec:0c:78:a4:48:04:bb:bc:24:9f:48:9f:ac:
65:46:6e:0a:7a:11:93:77:3f:00:4a:62:52:99:dd:50:86:ef:
bf:ed:55:70:19:0e:2e:5d:d7:41:5e:40:29:6d:64:0f:02:10:
a4:83:62:09:80:77:1f:8b:e0:1f:75:3c:3a:88:c4:9a:d9:e4:
54:2c:c5:59:38:19:65:06:fb:9d:ca:53:cb:78:0d:2e:39:55:
70:80:2b:79:8d:17:80:52:cf:4e:67:be:a5:76:77:1c:fe:2c:
a7:c4:fa:01:1b:e4:6a:77:c5:9b:03:dd:bf:0d:31:4d:bd:03:
99:d2:71:83:90:42:58:33:47:f9:67:6e:c4:74:6a:e4:59:a9:
71:de:6c:6e:da:a2:cc:15:7c:5c:3b:7b:2c:17:6b:da:ab:09:
f5:3a:1e:60:33:0a:1b:d3:b7:d4:0d:5f:af:1e:41:62:dd:0b:
45:84:4f:c6:57:72:89:6a:42:1a:8b:a2:41:3f:d5:5b:a2:ff:
39:5d:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:51 2025 by rpki-client