Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90A22484C19911EFB412059E762E951A.roa
File: 90A22484C19911EFB412059E762E951A.roa (raw, json)
Hash identifier: 3o8LsrBzE6jRBTwEjTEvRs50rp3OpRwkydzZhtc1cM8=
Subject key identifier: 2D:66:FA:7E:FA:4F:5B:9B:06:59:F4:4A:C6:FD:1A:8B:01:AF:5C:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012057
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90A22484C19911EFB412059E762E951A.roa
Signing time: Tue 24 Dec 2024 01:51:17 +0000
ROA not before: Tue 24 Dec 2024 01:51:14 +0000
ROA not after: Wed 10 Dec 2025 01:51:14 +0000
asID: 984
IP address blocks: 154.90.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73815 (0x12057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:51:14 2024 GMT
Not After : Dec 10 01:51:14 2025 GMT
Subject: CN=676a1395-5584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:b4:73:80:6b:54:2f:32:f5:6d:69:b0:41:
09:e5:4b:08:88:8a:17:da:3b:be:79:ff:62:1e:90:
be:e9:ef:e1:ab:6b:56:fb:15:7f:a9:3a:04:89:1e:
ff:7c:8c:2a:4b:1f:e8:40:f4:d3:e7:7d:84:b2:07:
42:47:e2:91:c7:64:42:23:4a:24:7e:31:f0:01:8b:
57:cd:8d:05:6b:78:92:6a:18:8d:18:e6:6c:2d:a0:
68:ad:23:6d:07:7b:1a:88:27:a0:91:81:79:86:e5:
a3:cd:92:a0:7b:b3:58:be:a7:ee:fa:e3:a7:24:7b:
ac:0e:72:7e:22:c5:5c:cd:e4:a2:00:0c:45:3b:64:
20:82:41:15:1e:52:bf:14:c7:42:53:64:4b:28:0c:
30:9a:e3:13:62:2e:12:b3:a7:c9:f1:ea:93:be:a5:
96:5d:9c:71:64:8e:3f:ad:48:ce:b9:9e:a5:f5:f7:
68:f9:24:01:f6:b3:92:c4:ac:f8:b8:90:2c:9f:81:
0e:12:b7:f2:2a:10:e1:70:ef:07:2a:c1:74:07:15:
1c:11:31:79:e4:f1:45:c7:19:da:8c:fe:90:ac:9c:
91:17:d7:6d:10:59:a8:76:3b:83:26:fc:83:a0:d1:
c6:67:9d:1a:ad:49:21:96:46:27:67:14:93:32:65:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:FA:7E:FA:4F:5B:9B:06:59:F4:4A:C6:FD:1A:8B:01:AF:5C:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90A22484C19911EFB412059E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.199.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:57:56:93:74:8c:7b:e4:75:02:d1:68:50:87:ec:b7:6a:30:
7e:76:5f:aa:87:7e:f9:f1:80:a5:44:4a:db:44:ed:bd:d5:8d:
4e:2e:d8:f2:a6:02:4d:a3:f2:7f:1e:4e:41:f3:08:d3:12:77:
cc:58:18:44:44:2d:a1:4d:b7:e0:5e:0c:f4:2e:21:f3:04:ff:
f2:35:8a:31:4b:ea:e8:2f:69:72:d2:7d:f4:4f:24:82:c2:94:
b4:15:34:04:84:da:82:99:97:6c:d5:10:6a:24:4a:4e:3d:60:
2b:91:7a:84:20:90:f3:3f:87:4f:e8:73:a2:3b:05:94:b8:d4:
bc:5e:53:6a:25:9d:0b:dd:e8:ec:c9:b9:73:dc:d8:00:e1:1c:
88:05:13:fc:c7:36:c4:83:c6:49:52:10:91:e9:ae:1f:d0:26:
cb:65:29:c1:32:d1:30:59:56:4b:e0:95:fc:ae:01:9f:0a:98:
12:39:0d:a0:61:da:4b:38:99:97:8b:f6:5b:c2:67:4e:b4:98:
18:f3:5c:2c:2d:08:7c:82:91:09:b6:32:8d:c7:14:26:36:4f:
58:2d:7b:49:ed:fd:0c:2d:af:10:c1:db:d0:b3:07:0c:98:9b:
4a:c5:68:7d:28:98:58:98:83:8b:5d:34:c2:8f:5c:70:ad:2b:
a6:4b:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:30 2025 by rpki-client