Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ACEE116C0EC11EF83524369762E951A.roa
File: 9ACEE116C0EC11EF83524369762E951A.roa (raw, json)
Hash identifier: 2by4KAWkroqb2UKm3IdAlHgMUM27Q5L54z1WTqknsGo=
Subject key identifier: DB:78:27:58:C1:52:09:73:A4:7B:D0:1F:F5:76:52:33:85:48:4D:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ACEE116C0EC11EF83524369762E951A.roa
Signing time: Mon 23 Dec 2024 05:13:12 +0000
ROA not before: Mon 23 Dec 2024 05:13:08 +0000
ROA not after: Wed 10 Dec 2025 05:13:08 +0000
asID: 984
IP address blocks: 154.90.78.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73520 (0x11f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:13:08 2024 GMT
Not After : Dec 10 05:13:08 2025 GMT
Subject: CN=6768f167-3005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:78:6a:4e:10:3d:e4:92:9c:b7:db:77:2c:d0:
4e:63:a5:2d:01:6a:79:5e:20:ff:f8:3a:48:94:cb:
93:fc:bb:77:be:9e:e3:c9:bc:96:e5:a2:b5:46:4c:
cc:6e:cd:83:1b:5c:6e:e4:ad:f3:8f:a6:63:8d:7d:
04:a6:4b:26:1f:f2:2b:46:5a:fa:01:b3:7a:99:a8:
0d:0a:05:16:ff:75:8d:da:9f:9b:d9:16:67:48:01:
45:32:5a:87:60:d0:9f:53:9a:38:15:ec:8d:f2:e6:
96:8f:87:19:c0:61:57:98:7c:d2:0d:55:c1:d8:82:
3f:6c:68:ae:98:14:68:ec:fc:22:68:71:7a:ae:06:
c3:4b:e6:0e:0b:aa:3a:29:85:d5:64:e6:2e:52:49:
f4:31:69:ea:f5:62:48:17:c7:e0:2d:ab:24:aa:c2:
c3:a3:c3:55:27:41:1c:4c:2f:03:d7:a5:f8:2e:3b:
8c:72:27:54:ff:8f:27:0a:9b:c0:5c:98:7b:d3:dd:
3a:98:61:5e:0e:bd:0c:1a:41:5f:59:b3:b8:b3:25:
11:6e:fc:5e:14:85:69:fe:67:61:e9:a5:50:81:cc:
52:e7:05:83:30:a7:bb:40:41:fc:ed:87:95:e0:56:
c9:63:c3:ef:c4:21:dc:e9:8d:af:91:1e:e9:e6:c8:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:78:27:58:C1:52:09:73:A4:7B:D0:1F:F5:76:52:33:85:48:4D:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9ACEE116C0EC11EF83524369762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.78.0/24
Signature Algorithm: sha256WithRSAEncryption
30:91:9a:1b:f3:39:9b:e4:bb:50:14:59:87:6c:b8:ec:7e:75:
c4:6f:8c:e0:53:b4:d4:f6:f9:ac:15:79:7e:59:c5:f4:7a:14:
93:f3:67:ab:97:39:1e:73:06:b4:50:6c:32:3b:c3:e4:de:39:
5e:56:bd:0e:19:e3:cd:d6:6e:f8:67:48:2e:e5:71:bd:ad:44:
8c:c4:21:f0:d0:a2:de:a9:6c:5a:06:fb:0a:37:34:15:d9:ea:
90:b7:0d:bb:5f:ff:6b:fd:32:0b:a4:85:93:a6:59:45:27:44:
6e:8a:6e:43:93:0d:87:8c:aa:fb:57:51:56:f1:60:e8:d4:41:
47:28:e1:72:d9:22:2b:7f:f5:73:cb:47:cd:7c:a8:15:b4:4c:
b2:2f:6d:bf:95:a6:5f:b8:ff:40:59:2e:ed:27:a3:da:5a:69:
bf:82:a9:e5:b9:7b:d8:97:ee:a3:bd:06:d1:e1:6f:2c:c7:8e:
d4:da:73:00:8c:6f:53:e8:65:87:15:d8:e1:61:64:4f:0e:42:
55:6a:f6:4e:9d:f3:51:f0:fc:6e:f4:ff:d9:42:c3:e7:82:43:
4e:47:47:39:24:a7:bc:4e:d9:50:fa:a9:51:14:a2:dd:61:90:
24:db:36:94:dd:4a:53:94:83:c7:c4:8d:63:f2:66:3e:6f:e3:
8a:1e:83:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:06 2025 by rpki-client