Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A16B7304C19611EFA0B6B789762E951A.roa
File: A16B7304C19611EFA0B6B789762E951A.roa (raw, json)
Hash identifier: rpW+ovS5dUYgrGykFTRufktDGUssZQ/XNOdu3B14V2U=
Subject key identifier: 4F:CE:9B:93:9F:33:A8:2D:9B:83:E3:DD:EE:CA:0E:86:B6:58:DE:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012033
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A16B7304C19611EFA0B6B789762E951A.roa
Signing time: Tue 24 Dec 2024 01:30:17 +0000
ROA not before: Tue 24 Dec 2024 01:30:13 +0000
ROA not after: Wed 10 Dec 2025 01:30:13 +0000
asID: 984
IP address blocks: 154.90.177.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73779 (0x12033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:30:13 2024 GMT
Not After : Dec 10 01:30:13 2025 GMT
Subject: CN=676a0ea9-8e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:72:06:11:56:0f:cd:44:cf:c7:bd:ea:b7:
a9:da:e7:a8:3b:5f:82:82:bc:fe:97:13:75:c3:1b:
4c:4a:e5:b4:0d:07:83:6f:f8:e3:4d:4b:cf:f0:29:
15:37:25:e2:9d:0c:42:0c:c9:7d:0f:08:e8:3b:37:
17:42:81:49:05:c8:93:35:4b:53:60:06:d8:d8:47:
3d:28:5e:c8:6f:65:3a:a5:09:0e:fc:e9:0f:4c:6e:
44:3a:66:16:db:9d:66:c7:ce:79:66:14:8d:e7:1b:
d1:61:c7:c3:62:24:6d:43:bf:54:ba:60:dd:55:ef:
4a:2d:1b:73:1a:68:f4:e5:1b:e1:86:2f:f2:be:65:
c4:1c:19:78:b7:d1:3e:d6:32:3d:96:7c:9c:bc:72:
5f:71:f7:1f:06:f3:64:7e:e2:b1:02:ff:2e:c3:9e:
28:b4:68:e5:5d:3c:70:ac:31:a9:09:31:38:02:33:
d3:ae:12:d3:83:61:a9:96:7a:76:df:64:76:7a:93:
6a:85:f3:ea:66:5f:88:ab:57:81:b6:58:26:b8:b4:
65:7f:24:e7:a2:d4:9d:10:2e:76:ec:7f:d2:f2:d5:
8b:6b:c0:de:df:48:06:8a:26:6a:4a:65:99:a9:4b:
b7:cf:d8:a2:08:d3:dc:4f:f7:17:4c:3d:09:2c:b0:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:9B:93:9F:33:A8:2D:9B:83:E3:DD:EE:CA:0E:86:B6:58:DE:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A16B7304C19611EFA0B6B789762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.177.0/24
Signature Algorithm: sha256WithRSAEncryption
58:1d:dc:ed:96:b1:cd:bb:31:77:47:c8:99:25:d7:84:b9:ac:
6e:8e:06:07:be:04:23:9a:79:ea:9a:61:07:ef:f4:b6:cd:8e:
0a:ab:e7:de:92:43:d9:ca:d7:0f:2b:ee:10:ec:8d:f5:4a:de:
74:6b:5d:72:a7:0e:c4:9b:67:34:b9:44:69:d2:5a:a5:19:ff:
99:1f:0b:de:8a:a3:33:ea:12:1f:1b:5d:6b:8a:94:54:1e:12:
61:fa:8e:a2:39:f3:3f:83:d6:fc:95:63:c6:a1:60:f1:92:dd:
80:55:56:73:c6:71:78:98:9e:bb:70:d7:ba:73:e5:f6:98:e3:
26:41:4c:56:91:b6:ca:b5:66:86:da:e9:5b:19:ea:00:ce:23:
98:53:15:52:7f:35:93:01:2f:52:8c:4f:65:ad:51:68:d6:24:
a5:c6:af:69:08:ce:21:61:8b:32:24:c9:b1:7f:57:ee:40:f9:
04:fe:57:f0:6d:47:92:33:e8:c9:dc:b0:fb:f5:ef:a1:ef:8d:
36:38:16:8f:b2:89:2e:01:18:35:7a:9c:37:4b:e9:08:ce:79:
6f:0a:55:a3:f7:db:0a:3f:1e:e0:31:56:ca:0b:a0:20:0f:3b:
a3:60:d4:61:f1:41:d1:7f:f8:b1:97:6e:b3:96:7a:4f:4d:3b:
15:e8:53:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:46:21 2025 by rpki-client