Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DDBBA6B21D11EFB905A142762E951A.roa
File: B3DDBBA6B21D11EFB905A142762E951A.roa (raw, json)
Hash identifier: VmqP1rRlICITSM0eYVE7/830oCJsh6vuCiKS9lkiXJM=
Subject key identifier: 6A:1C:66:D9:A7:B0:75:99:9F:2F:F1:4C:4C:F3:BC:1E:40:04:12:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011806
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DDBBA6B21D11EFB905A142762E951A.roa
Signing time: Wed 04 Dec 2024 08:56:51 +0000
ROA not before: Wed 04 Dec 2024 08:56:48 +0000
ROA not after: Fri 24 Oct 2025 08:56:48 +0000
asID: 984
IP address blocks: 154.90.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71686 (0x11806)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 4 08:56:48 2024 GMT
Not After : Oct 24 08:56:48 2025 GMT
Subject: CN=67501953-67b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c7:ca:90:8d:4b:f9:8f:18:b3:f9:88:97:05:
2c:08:f1:bd:2d:d9:7b:4b:52:75:de:22:6a:71:36:
de:d4:ad:22:49:fc:f0:83:f4:1c:1b:d0:ab:bb:f7:
2c:05:f6:0f:1e:75:5b:ae:a9:6b:29:a8:5f:a4:83:
7b:eb:bc:ad:ca:31:ff:9d:05:5f:a4:2d:62:31:3a:
9f:24:77:57:c5:ea:f5:10:e9:32:3c:4f:17:04:a8:
f3:21:e1:5d:cb:13:28:ca:84:91:6c:ab:25:1f:52:
90:ac:0b:e3:29:c5:c2:07:c6:e8:69:7b:a9:a4:d2:
f8:eb:1d:60:1d:36:a6:7a:ed:4f:44:90:b6:24:b2:
95:9a:83:21:61:4c:31:c8:37:f8:c2:56:1a:c3:c6:
6f:3e:38:0e:f1:76:47:c5:1b:af:ee:64:ea:cc:0c:
35:43:0e:97:1d:0e:15:f1:ee:72:75:a5:23:a7:91:
bc:df:52:ab:08:ee:9e:16:cd:05:46:da:03:af:cc:
3e:7a:03:08:30:ab:0c:3a:39:3b:ae:81:33:4a:d4:
71:6d:6c:8e:a6:b3:ea:36:76:1e:2e:45:8e:a6:99:
56:1f:85:b5:32:20:05:62:6a:6d:fc:67:46:95:92:
8b:09:f5:45:79:01:fb:59:99:00:10:93:ca:7d:f5:
c6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1C:66:D9:A7:B0:75:99:9F:2F:F1:4C:4C:F3:BC:1E:40:04:12:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DDBBA6B21D11EFB905A142762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:91:91:ac:45:f2:b6:b7:d2:12:53:c7:c5:f4:77:f8:a8:f3:
79:48:2e:48:74:cf:84:04:83:e2:a4:e7:39:94:a7:80:04:51:
a0:bd:e8:83:7e:27:72:a6:2e:59:8b:90:1b:e8:37:a5:fd:ae:
17:2d:cd:89:ea:c5:d7:49:2a:2c:e6:e7:23:33:e5:13:0b:29:
b4:75:5d:4c:64:bc:df:ab:89:7c:b1:47:db:d6:ef:9d:fc:1b:
d0:77:32:c9:3f:2c:c7:a5:59:8b:29:52:2e:28:03:1b:95:21:
20:7d:b8:fe:54:4b:a1:2f:4a:78:8f:3c:b2:8f:f1:46:39:08:
c5:85:39:65:8f:08:f0:04:76:85:e9:63:49:70:fd:a0:24:a9:
a4:7f:fb:dc:06:41:4b:1d:64:b7:65:8a:2b:eb:c7:5f:68:b1:
82:70:6b:fb:3d:84:f7:ae:30:23:ec:60:0a:5a:3a:76:de:43:
62:90:82:08:90:03:2b:f4:77:d8:fe:8e:6d:e0:a5:e7:5b:12:
40:dd:ce:13:49:79:03:64:4b:36:ba:9f:13:cf:ac:ba:72:5c:
c8:08:42:ae:3a:ed:17:fd:c9:a2:d2:6c:eb:5d:76:51:05:54:
20:2e:dd:b1:4f:93:3e:ef:29:ea:a5:f8:7a:e4:3c:1a:d4:f5:
ce:e2:f7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:26:18 2025 by rpki-client