Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EDA4D3AC0ED11EFB335A66F762E951A.roa
File: 9EDA4D3AC0ED11EFB335A66F762E951A.roa (raw, json)
Hash identifier: FsYB1eC4mKJuQEoFQWyn0cLbJghwxztgr5PALZP/iFM=
Subject key identifier: C9:16:22:99:4F:E7:34:C0:0B:AA:60:04:6C:36:17:E0:35:49:66:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F3C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EDA4D3AC0ED11EFB335A66F762E951A.roa
Signing time: Mon 23 Dec 2024 05:20:28 +0000
ROA not before: Mon 23 Dec 2024 05:20:24 +0000
ROA not after: Wed 10 Dec 2025 05:20:24 +0000
asID: 984
IP address blocks: 154.90.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73532 (0x11f3c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:20:24 2024 GMT
Not After : Dec 10 05:20:24 2025 GMT
Subject: CN=6768f31c-4299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:ef:1b:f3:4c:19:98:5a:e0:57:c0:2d:1b:
bc:28:5a:3d:87:1e:8a:c5:d4:d2:46:e5:4e:b8:f0:
aa:58:52:b1:db:2d:ae:8c:9f:87:31:70:5e:06:d5:
6a:a4:a0:2e:10:de:c0:88:ee:29:ef:df:11:7d:b3:
17:14:4d:51:82:44:ab:0e:ea:f2:a2:85:15:6b:8e:
62:ee:bb:4a:36:4e:a3:58:43:59:86:da:ff:4f:23:
f3:1a:3a:e8:e9:4f:50:c6:d0:d3:ed:5f:6d:ea:70:
43:f5:80:f5:82:36:da:ed:1b:68:83:e8:28:50:58:
31:39:ee:72:90:76:5a:d1:57:84:78:f1:78:4c:84:
ae:f3:d0:9b:e3:96:b3:32:e5:32:a2:a3:77:58:ce:
d2:93:ea:1b:69:48:4a:de:f8:c0:1a:fb:65:ac:a2:
69:ee:1f:f7:78:dc:e2:25:fe:82:90:08:f4:a3:ed:
24:1e:c8:75:19:48:be:d3:14:1f:80:32:fe:e3:b1:
40:0c:22:a2:cf:48:82:fc:60:a1:ee:fc:fb:86:af:
a3:76:57:f6:37:49:fa:18:2e:17:4a:81:48:a4:de:
00:5f:0b:22:96:81:24:7e:ff:3b:f5:c1:bb:53:c0:
48:b1:2a:2e:2d:f0:ca:15:fe:e4:e6:17:a8:59:8a:
ae:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:16:22:99:4F:E7:34:C0:0B:AA:60:04:6C:36:17:E0:35:49:66:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EDA4D3AC0ED11EFB335A66F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:24:c1:46:0e:93:05:28:77:76:1b:09:4c:59:12:57:66:03:
9b:53:27:72:1d:a9:12:a9:93:13:b6:82:1c:31:79:14:84:94:
87:36:0e:fd:01:c9:be:eb:4b:0a:bd:db:ff:bd:61:1f:32:ab:
c9:d5:22:43:76:ad:83:2e:63:a8:0d:c7:93:e2:fc:a0:ce:f2:
7e:57:7c:e1:36:40:f8:c8:08:4b:38:20:26:dc:d0:78:72:78:
31:1f:5a:cc:16:7e:07:cf:0c:0c:b2:aa:3c:d4:31:fe:88:63:
ec:b4:03:71:8a:19:9e:05:de:50:29:86:bf:2b:e8:8d:d0:52:
8c:e7:c3:77:52:a5:76:a8:ac:bd:65:ad:0e:2c:a1:75:0f:3c:
ac:08:56:28:da:6a:ef:f2:a7:ca:19:40:6b:00:77:0c:84:cb:
f0:4b:db:87:93:8e:d4:09:d3:e5:1c:ce:ef:b8:cf:be:33:03:
30:2c:c9:ef:3f:3c:93:bf:e9:4a:37:4a:96:d4:8c:2a:b1:15:
30:4a:f3:40:fb:68:c2:72:75:ed:d8:90:2c:c4:f6:88:47:60:
2a:58:79:ac:84:f7:58:b0:dc:0a:6d:26:0b:79:a4:b9:40:7d:
55:03:e8:94:1d:3b:2e:53:fb:22:9b:f6:2c:49:43:d7:f1:95:
5e:9c:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:29:16 2025 by rpki-client