Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18A29F8C19411EFBC8AF07A762E951A.roa
File: B18A29F8C19411EFBC8AF07A762E951A.roa (raw, json)
Hash identifier: x4A9m1qoc0QDe4J0v/kq848l0vQJEtiaYkSHJEcLAeE=
Subject key identifier: 88:84:53:19:87:14:49:F7:AC:FC:99:8A:86:CE:5C:96:CE:07:F4:30
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01201B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18A29F8C19411EFBC8AF07A762E951A.roa
Signing time: Tue 24 Dec 2024 01:16:25 +0000
ROA not before: Tue 24 Dec 2024 01:16:21 +0000
ROA not after: Wed 10 Dec 2025 01:16:21 +0000
asID: 984
IP address blocks: 154.90.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73755 (0x1201b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:16:21 2024 GMT
Not After : Dec 10 01:16:21 2025 GMT
Subject: CN=676a0b69-e8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:16:c7:71:e5:a3:37:52:a5:12:7e:bd:9f:
7a:c6:8a:e1:76:c2:6d:e4:0e:f2:53:fa:95:84:5f:
5f:1f:82:c5:b8:c0:15:b8:5f:c7:d9:6c:1f:e4:77:
34:32:b1:43:32:83:84:01:64:4c:ec:57:09:8b:83:
87:d5:fe:9e:b9:c8:2f:a9:74:39:68:98:66:58:98:
b8:aa:cb:9f:36:c4:3b:b6:9f:0b:2e:c3:4c:38:e6:
40:74:94:bb:1c:da:d7:22:35:55:72:89:c1:79:12:
9c:c3:4d:79:f5:c3:85:ca:25:9a:05:cb:73:85:e3:
ea:f9:83:3b:de:5c:da:8b:55:05:bb:44:18:e7:38:
f1:af:71:1f:43:4b:ae:08:d0:cc:4a:2f:78:44:21:
e6:f5:9b:32:ce:98:62:30:36:29:ef:d2:07:ab:02:
55:2f:b1:e4:fe:2f:67:cf:f5:80:7c:26:6b:aa:7f:
fd:bb:13:8d:53:ea:ae:a2:30:ca:14:ef:c7:26:c1:
53:67:97:12:57:a6:89:72:57:37:27:fd:5b:c2:8c:
ba:fe:39:c7:37:22:c6:92:ba:2a:dd:d4:27:f7:ac:
91:5a:fb:fd:b9:26:24:60:fc:91:34:dd:64:98:04:
55:9b:b5:2b:fd:57:1d:c1:2a:cf:91:c5:33:86:cd:
3e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:53:19:87:14:49:F7:AC:FC:99:8A:86:CE:5C:96:CE:07:F4:30
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B18A29F8C19411EFBC8AF07A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.165.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:3c:fa:ff:a7:86:08:3d:c2:8d:b9:fc:57:2e:5b:76:3d:7f:
78:88:37:ac:91:f9:69:77:70:3f:5c:d9:a9:c9:dc:5a:8b:56:
b3:77:ee:ff:20:ef:a7:a3:c9:36:42:7b:37:26:de:f7:f2:4a:
bf:7d:e7:fd:81:5c:4b:a2:d7:5a:f9:04:6c:79:fe:27:93:48:
d0:31:97:b9:44:ca:0f:d3:a1:4a:17:5a:04:9e:f6:76:66:6c:
05:4b:bd:58:62:ff:31:6e:e8:33:44:75:54:bb:57:cf:9c:34:
a2:ef:3a:50:23:33:c2:49:8e:34:20:2c:39:b6:e4:63:9e:84:
b4:da:13:7f:4f:6b:5c:af:7c:dc:e7:bf:f8:e1:77:fa:4f:c2:
62:26:5c:2b:f6:e4:29:78:b4:84:5e:25:cf:fd:b0:f2:eb:01:
6a:90:40:fa:be:36:7a:20:e7:8c:a6:57:4e:39:a7:48:68:5f:
9f:14:d5:42:1b:ff:f3:fe:81:41:93:08:ff:15:b8:da:7e:51:
b0:dd:67:65:33:b8:8b:5c:34:f4:c9:bd:b4:35:b5:9d:5e:45:
76:76:27:3a:13:a6:80:bf:2e:29:cf:14:dc:56:c0:59:0c:8e:
8e:1a:b3:c0:26:17:32:85:7a:35:d7:f9:21:c9:1f:10:40:5e:
21:4b:a8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:51:51 2025 by rpki-client