Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/990F7270E23C11EFB359DE43762E951A.roa
File: 990F7270E23C11EFB359DE43762E951A.roa (raw, json)
Hash identifier: MeWCWWtZfDPGHhnrkmqqF02F/Q7xDAu10a/+6yP+r5g=
Subject key identifier: 8D:32:A7:0C:45:CB:B3:AF:0C:28:C0:B8:C1:74:1C:26:67:B5:93:6F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 015012
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/990F7270E23C11EFB359DE43762E951A.roa
Signing time: Mon 03 Feb 2025 14:38:57 +0000
ROA not before: Mon 03 Feb 2025 14:38:53 +0000
ROA not after: Wed 30 Apr 2025 14:38:53 +0000
asID: 138797
IP address blocks: 154.210.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86034 (0x15012)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 3 14:38:53 2025 GMT
Not After : Apr 30 14:38:53 2025 GMT
Subject: CN=67a0d501-672e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:c3:dd:fe:47:9c:f4:40:e0:ac:6e:3a:c7:
86:79:f2:0f:2a:53:53:05:83:41:e0:a0:1b:41:2e:
8b:00:f2:2a:4b:cf:96:08:f0:82:2e:3c:23:e8:be:
18:a8:08:58:17:a5:3d:c0:a7:23:c2:e6:49:b8:30:
3a:3d:9b:3c:f7:7c:ed:b8:08:2b:34:2e:e3:ba:29:
e1:cc:f6:d6:ce:99:36:7e:6f:42:f4:11:34:fa:b1:
fa:30:81:12:df:2c:0a:17:77:25:a3:62:e3:90:25:
7e:1e:85:dd:82:b6:27:6e:7d:42:4c:52:5f:84:03:
9d:9b:9d:e6:62:95:7c:e7:ef:39:65:39:a8:a3:41:
f1:11:ad:8b:e7:41:34:72:2d:d6:2a:95:d0:23:a8:
53:73:60:32:e4:df:26:74:1a:68:4a:cd:94:ca:02:
cb:4d:c6:db:fd:2b:ec:9a:55:e8:9e:e9:eb:73:b7:
e0:7f:36:a5:34:c1:01:7d:7a:ae:7e:01:9b:bd:e3:
11:36:15:2f:05:a3:eb:70:dd:79:cf:de:b0:1f:e0:
60:1c:87:d9:dc:57:3c:3e:d1:62:30:a9:ad:e0:47:
1f:59:b7:56:68:98:45:25:ec:5e:b7:16:8c:94:6a:
a1:91:96:3f:7b:f3:59:bf:28:83:4b:c9:5d:ef:06:
08:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:32:A7:0C:45:CB:B3:AF:0C:28:C0:B8:C1:74:1C:26:67:B5:93:6F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/990F7270E23C11EFB359DE43762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e0:4b:f9:16:b8:93:50:27:7e:06:fe:dd:29:6a:2e:d4:09:
2b:e1:c2:5b:a6:46:a4:6e:02:9c:ce:95:20:6b:07:06:51:36:
57:a8:3a:c0:02:14:8b:94:56:6f:8b:9f:89:cc:f8:f3:e4:b0:
d9:1b:c0:ec:8e:a9:69:e8:7f:a2:d4:6c:a1:74:20:aa:64:01:
0e:dd:54:de:45:e3:63:47:c3:c3:30:66:84:57:c2:67:a3:cf:
31:b4:1b:ac:c6:d1:18:4b:41:f8:3f:8b:d6:1d:26:25:46:8c:
ae:72:4e:49:ac:6c:ee:35:fe:95:9e:93:7e:03:02:91:b0:8f:
f2:8d:f9:53:0a:f9:75:8c:32:a0:17:3f:9c:f4:48:a4:78:83:
d0:ad:c2:6b:23:1b:9d:99:51:f1:2e:9c:5c:f2:a6:04:e4:69:
ec:d1:c5:c2:16:98:ae:83:95:96:74:80:48:60:d6:66:1d:f1:
6c:bc:3a:c6:e1:8f:b2:29:b5:fd:91:b9:1e:9e:42:5c:ff:f0:
f7:c7:06:da:0e:de:0e:17:e9:15:6c:be:ba:59:63:e7:e4:10:
06:c1:53:b8:8b:a5:ec:95:fb:56:8c:1c:e0:b1:47:1e:33:f9:
bc:b4:10:2d:5d:11:94:f7:e9:45:28:a6:8c:99:36:72:e8:35:
af:36:bd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:59:02 2025 by rpki-client