Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90CBB66EF53D11EF80030F9D762E951A.roa
File: 90CBB66EF53D11EF80030F9D762E951A.roa (raw, json)
Hash identifier: H/OemGXX8jiyWwTxyFekCGjYmvEyC5n3Vc1uKvq0RTg=
Subject key identifier: A6:42:85:D1:CF:19:B2:02:8C:8B:C1:8A:CE:2F:B5:23:5F:8E:1E:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016986
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90CBB66EF53D11EF80030F9D762E951A.roa
Signing time: Thu 27 Feb 2025 19:03:44 +0000
ROA not before: Thu 27 Feb 2025 19:03:40 +0000
ROA not after: Mon 07 Apr 2025 19:03:40 +0000
asID: 138915
IP address blocks: 154.223.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92550 (0x16986)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 27 19:03:40 2025 GMT
Not After : Apr 7 19:03:40 2025 GMT
Subject: CN=67c0b710-89cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f0:e6:db:b4:08:29:c2:73:6e:5f:2e:bb:d0:
3e:9b:90:94:64:fc:e0:c0:28:55:9e:aa:3f:c1:d4:
a5:4c:24:fe:22:23:ba:76:b0:d3:60:72:33:15:70:
fe:3c:6a:cc:a5:cf:97:8f:e7:44:f7:20:21:86:f6:
cf:12:bb:6a:7f:a9:99:0f:ff:67:47:35:a4:58:d9:
a8:24:31:e9:e6:d9:9c:66:a1:6a:a6:01:8c:82:15:
46:1a:37:d1:18:cc:ff:c3:25:21:2a:6a:58:3b:b5:
79:8d:bd:35:79:9c:a9:17:4f:a0:c0:5b:54:d1:6b:
a6:43:09:b3:bd:7e:fe:e3:c1:66:92:f7:63:6d:0d:
77:8e:42:cc:f2:29:99:76:30:26:c7:0b:19:4e:21:
ad:16:7e:6d:27:f3:a5:84:bc:99:d0:ad:9b:29:80:
e8:9b:05:40:89:21:24:2f:29:7b:6d:5d:74:5a:af:
0b:f7:c0:0f:71:b7:99:7a:1c:f8:99:92:88:1b:98:
91:d0:bb:f3:72:06:db:c6:ca:9d:36:64:76:72:4a:
5e:eb:3d:c7:54:1a:06:dc:cd:8b:4d:c6:45:f9:f5:
8f:ae:d8:6e:e0:8d:9f:9a:08:73:a6:bf:ae:9d:98:
7a:12:f4:00:e6:3a:91:bf:ab:4c:aa:33:25:3a:17:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:42:85:D1:CF:19:B2:02:8C:8B:C1:8A:CE:2F:B5:23:5F:8E:1E:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90CBB66EF53D11EF80030F9D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.24.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:80:3c:e7:3b:a8:6e:47:f7:7a:85:da:1e:b6:e3:49:4b:8f:
cb:77:99:2f:20:00:86:8e:6b:03:45:40:96:eb:58:58:00:b2:
37:40:29:3d:9a:8d:f5:52:eb:14:60:68:a4:4f:18:51:b1:09:
5b:80:9b:27:7e:3d:a5:b6:bc:dd:a7:29:6f:87:b2:37:84:b2:
49:f2:5a:1e:26:ab:e1:00:9b:68:43:4b:77:61:09:9e:64:f7:
1f:b8:e4:5b:a4:5d:d3:90:e0:b7:34:32:8e:e5:ce:c9:c5:db:
ce:e2:6f:7a:c6:f0:dd:32:c8:97:1a:cf:26:4f:f0:a6:d6:31:
40:44:04:b0:c8:8d:3f:74:e1:a3:bc:7d:84:df:03:f3:73:32:
52:d4:4b:4b:99:3a:e6:01:ec:40:bd:a1:d9:22:00:a6:d5:e3:
3c:ff:a2:91:90:e1:73:73:d9:84:42:10:9e:90:f0:40:6c:87:
ed:52:df:e0:ac:78:25:ca:99:20:22:39:c5:bf:86:30:dd:1f:
ef:5b:a5:95:fc:b3:d9:2c:a5:41:16:9a:f7:96:05:29:a1:29:
71:95:f9:cd:92:ef:8d:8d:c6:1f:7d:ba:35:b0:bd:a9:68:ab:
1e:e2:50:4a:31:37:0c:92:80:f3:31:74:83:2f:fc:15:04:04:
71:b6:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:47 2025 by rpki-client