Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95569BF4C0EF11EFA9F8657A762E951A.roa
File: 95569BF4C0EF11EFA9F8657A762E951A.roa (raw, json)
Hash identifier: 9OuE7mVFn+JhBYne9t/8QwU1w/ckcFaNpppCCSy45gI=
Subject key identifier: 28:B7:8C:45:B7:10:EB:70:32:9B:42:A4:2E:EC:21:1E:28:6C:E9:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95569BF4C0EF11EFA9F8657A762E951A.roa
Signing time: Mon 23 Dec 2024 05:34:31 +0000
ROA not before: Mon 23 Dec 2024 05:34:27 +0000
ROA not after: Wed 10 Dec 2025 05:34:27 +0000
asID: 984
IP address blocks: 154.90.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73546 (0x11f4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:34:27 2024 GMT
Not After : Dec 10 05:34:27 2025 GMT
Subject: CN=6768f667-ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:53:24:95:8c:f7:3b:e0:f2:43:2a:1a:0e:
6e:55:2a:57:d7:23:75:69:31:e1:32:ed:aa:d9:10:
3e:74:ae:19:ef:95:e4:0a:dc:d3:89:b4:e3:40:d6:
6a:b9:77:41:38:76:6f:4c:c6:e0:8e:05:87:ab:7e:
4f:be:5b:ec:11:93:20:73:f3:cd:1d:fa:0c:80:5c:
67:66:a0:03:f2:26:a8:b2:57:fe:67:b5:82:2a:e8:
ff:0c:93:98:38:78:a8:38:69:31:63:bc:57:da:fb:
32:89:25:1c:e4:f8:73:32:81:a5:93:b4:ef:14:6e:
1f:47:c2:17:35:a9:e5:4f:4d:b8:18:13:15:09:80:
86:9e:c0:7b:92:66:5e:54:2d:5f:e7:57:9a:b7:f8:
50:18:5c:8d:94:7a:4b:60:4b:4d:82:18:13:f6:e4:
91:db:3c:a2:6c:b9:ba:b6:d9:06:24:fb:d4:e2:f7:
e2:07:bd:81:12:68:56:70:ec:cf:c6:3e:68:cc:35:
9e:62:b4:6e:03:ed:70:1d:9f:75:3d:8b:20:78:6a:
7f:37:a2:e0:e8:b3:08:25:1a:4e:09:17:84:4d:d1:
02:29:52:ef:95:0a:cd:16:f2:bf:50:bc:5c:8a:ce:
7d:ce:03:e5:3f:e3:b8:06:96:29:82:64:c7:d6:05:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B7:8C:45:B7:10:EB:70:32:9B:42:A4:2E:EC:21:1E:28:6C:E9:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/95569BF4C0EF11EFA9F8657A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.91.0/24
Signature Algorithm: sha256WithRSAEncryption
01:53:43:91:0b:f5:5d:af:ac:b8:b7:b0:da:86:dc:40:0d:9c:
c9:fe:ba:f6:68:52:83:f9:5c:57:61:1d:3e:ac:42:65:e6:03:
74:f6:2e:73:12:20:e9:7c:5a:67:33:0c:f3:96:9c:17:4e:3b:
77:b1:47:af:3f:f4:48:46:36:ba:7d:70:b7:b6:b9:18:b5:31:
ff:a1:d9:eb:b4:4d:7d:d0:a1:62:82:9b:23:f7:0c:8c:c3:5d:
c9:aa:9a:6b:3f:9c:4e:8c:87:8d:91:75:9a:0a:89:0e:b0:ed:
59:5e:42:57:37:e0:1a:bc:83:bf:b6:b1:c5:ea:e5:a9:fb:b9:
0f:3d:3a:21:a5:1b:75:15:63:e2:c2:f3:bc:6a:f7:70:46:11:
83:9c:5a:02:e6:33:4b:45:4d:6f:50:d8:2a:75:96:fe:5d:a3:
6a:f3:3a:fa:de:67:74:1b:29:91:5f:9f:8a:e4:a6:fc:1f:c6:
aa:bf:01:14:d6:bc:2d:87:8a:35:cc:59:c2:ce:c1:11:ac:c7:
f7:74:98:67:92:50:2a:25:1a:eb:52:df:07:16:fa:20:48:a4:
d8:60:a0:60:66:07:45:80:35:e2:5f:da:f2:88:4b:20:4a:2c:
4c:88:c4:41:89:4c:e2:c2:45:a9:98:2b:b6:59:77:e9:42:62:
a1:d0:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:44 2025 by rpki-client