Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9093BA7CC19211EF9C6BB06B762E951A.roa
File: 9093BA7CC19211EF9C6BB06B762E951A.roa (raw, json)
Hash identifier: t0ugxGAwPBHL5HWUf49n1IV6eUfhFMDIyhaDGVKfedk=
Subject key identifier: 55:FC:F6:AD:2F:31:0E:40:7D:1E:07:4A:AB:AF:5A:A8:0E:20:A2:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9093BA7CC19211EF9C6BB06B762E951A.roa
Signing time: Tue 24 Dec 2024 01:01:11 +0000
ROA not before: Tue 24 Dec 2024 01:01:07 +0000
ROA not after: Wed 10 Dec 2025 01:01:07 +0000
asID: 984
IP address blocks: 154.90.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73729 (0x12001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:01:07 2024 GMT
Not After : Dec 10 01:01:07 2025 GMT
Subject: CN=676a07d7-bd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:7e:cd:86:5e:65:11:11:a4:98:73:bf:6f:
8c:65:3a:ed:63:fd:aa:f6:af:b9:67:ee:88:b7:88:
bb:e5:a2:88:c2:8f:c3:a4:44:c9:92:4b:05:3d:91:
bc:04:4a:65:e8:d8:3f:56:68:21:48:8d:f4:fc:a1:
97:a6:8d:b8:96:93:0e:1d:29:f2:b7:11:62:10:13:
49:a6:12:9c:cd:8f:76:db:e7:0a:56:57:97:51:69:
51:21:3e:02:f9:5f:e8:70:9e:81:3c:1d:bc:ac:ab:
a5:3b:85:ef:0f:16:99:c6:fa:78:5a:c3:af:5b:cc:
0e:25:21:c6:f0:a3:99:74:34:12:d9:dc:67:49:05:
43:5e:76:3c:3d:a7:cc:15:55:90:36:9b:ce:0c:33:
d0:d5:4c:46:58:38:e8:c1:9d:57:e2:d2:61:fe:bb:
f9:86:c7:cb:77:b0:86:d7:f4:5e:3e:2c:13:9f:70:
51:37:17:47:8b:d4:d3:86:04:27:f1:e1:0f:dd:76:
03:1a:8f:bd:1d:cd:7a:b9:3d:a5:78:20:a3:1c:f3:
1d:3c:a2:00:17:8d:0f:c7:7e:1c:62:2c:74:b2:da:
23:dc:5a:59:d9:0a:80:5b:fe:60:2e:a4:41:83:7f:
04:a8:88:c7:43:bc:53:ec:37:5f:72:6c:ac:2d:d1:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:F6:AD:2F:31:0E:40:7D:1E:07:4A:AB:AF:5A:A8:0E:20:A2:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9093BA7CC19211EF9C6BB06B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.151.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ec:ab:a8:4b:fe:9d:b7:e6:f4:80:2a:a7:0f:02:e9:6d:c9:
aa:ad:94:65:e4:1e:71:a6:95:8d:56:67:7d:af:c7:65:38:96:
59:a1:82:e6:af:8e:34:a0:e8:34:45:22:8a:eb:10:4f:81:bf:
41:ac:87:1c:97:97:fa:bf:10:ba:4f:d6:c0:cd:1c:ee:6b:95:
14:31:d5:99:b8:cc:39:e3:a4:ef:7b:b8:17:74:0f:12:0d:31:
ae:59:13:58:af:17:06:45:f3:d6:de:2b:f6:4d:c8:2f:22:35:
0f:70:01:b6:75:e4:02:40:2a:20:31:2a:e8:df:dc:2c:49:71:
58:73:90:5f:4e:43:88:b7:60:2d:d7:32:69:d0:50:6e:cb:19:
eb:46:f7:6b:d9:d9:5f:4d:e3:b9:d7:3b:d2:16:4a:57:37:d0:
eb:64:73:48:98:b3:fe:32:0e:10:a3:0e:c5:28:97:9e:3e:be:
58:db:e8:e8:2e:fb:4f:3b:c9:72:f5:78:1c:e1:40:15:57:44:
2c:56:39:e3:13:2f:0d:8b:59:f7:3a:6f:b3:3c:7d:51:14:70:
c8:13:9f:bd:37:be:98:fd:68:5a:85:fd:9a:be:40:36:c9:b2:
16:32:0f:d3:9a:dc:6a:7e:33:f6:84:5e:70:62:9e:59:5d:d8:
66:a2:4d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:49 2025 by rpki-client