Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7CD120AC19211EFA0BD146C762E951A.roa
File: B7CD120AC19211EFA0BD146C762E951A.roa (raw, json)
Hash identifier: 5QDMSuVRu6CN1gIgOUYSixFVmSeoYKe3VNaoHm6Zz3M=
Subject key identifier: BE:20:DB:99:25:CF:49:14:F2:BA:94:50:5E:06:88:28:49:77:22:58
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012003
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7CD120AC19211EFA0BD146C762E951A.roa
Signing time: Tue 24 Dec 2024 01:02:16 +0000
ROA not before: Tue 24 Dec 2024 01:02:13 +0000
ROA not after: Wed 10 Dec 2025 01:02:13 +0000
asID: 984
IP address blocks: 154.90.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73731 (0x12003)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:02:13 2024 GMT
Not After : Dec 10 01:02:13 2025 GMT
Subject: CN=676a0818-20d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cb:28:81:46:f9:ea:bd:3e:76:a8:78:68:8b:
c1:26:74:5a:d8:90:f4:8a:b3:41:6f:61:bb:3c:1c:
e5:f3:4a:c4:56:15:ca:bd:f8:bc:23:09:14:13:ff:
f7:3d:3c:f8:6a:90:ac:97:f1:2a:1a:69:64:b8:91:
f2:e2:2f:35:5f:2e:f5:53:0c:2b:5d:be:6c:04:63:
4a:47:6c:32:3d:dc:b6:41:a3:7c:e6:17:7a:dc:8a:
40:a9:f5:7b:74:90:c2:d5:3e:33:46:27:76:d4:ab:
d5:40:e1:5d:10:4f:fd:29:73:82:ba:f8:a2:63:a9:
c5:c7:22:0c:dd:c9:50:f8:aa:a7:99:6a:7b:e0:12:
65:a2:b0:a6:80:67:71:21:00:f0:e8:53:64:1a:8c:
93:d3:1a:f0:da:91:c4:59:63:74:3b:e4:ec:35:86:
1e:ee:41:e8:ff:d9:53:da:34:80:8e:a3:6d:2a:90:
70:07:a5:a3:a5:e2:a9:ae:0a:97:8d:3a:74:98:53:
dd:43:8e:0e:f8:0d:d2:99:26:16:0b:b2:7f:06:97:
bd:09:a7:a1:49:9c:9c:52:e3:2c:a8:68:ed:57:5c:
e0:32:9b:99:bf:5a:5e:c3:60:49:8f:1e:07:81:1c:
88:a4:5e:48:d4:91:7f:fe:c2:0d:aa:dd:31:9b:1f:
3e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:20:DB:99:25:CF:49:14:F2:BA:94:50:5E:06:88:28:49:77:22:58
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7CD120AC19211EFA0BD146C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.152.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b1:95:24:86:00:73:3c:a7:5f:8d:de:70:08:36:e0:41:5c:
f0:44:39:61:97:f1:ce:41:0d:08:2f:cc:e2:35:b8:2f:aa:66:
a9:4d:1d:67:bc:46:6c:f4:ac:03:10:3e:fe:9d:f5:d2:a7:00:
a0:a9:99:22:c6:b9:93:36:02:9a:f7:d0:e2:17:c5:a2:45:0a:
12:e2:6f:40:3b:d7:9b:67:ef:e5:fe:9c:da:c1:42:f0:b0:96:
34:b9:88:34:ea:48:b6:ca:13:57:a5:bc:a0:fe:db:3c:bf:ea:
c6:58:26:bc:5d:64:8d:07:0d:1f:ab:e7:30:23:8b:9c:6b:f0:
56:96:53:4e:26:09:f8:8c:84:7c:66:05:33:7e:de:39:02:96:
7b:2c:43:3b:15:07:4a:e6:1c:6b:b3:e4:fa:d4:81:fd:e3:02:
da:02:2d:41:bf:90:63:18:36:95:9b:a3:ab:f5:5b:81:71:f7:
fa:9c:9c:c4:30:90:bb:82:65:9a:41:17:fc:16:e2:61:6e:7c:
a5:a2:cf:28:01:6a:24:e2:1c:ff:b2:82:ff:ce:70:bb:96:e7:
7d:d1:c7:eb:4e:f7:81:46:43:f8:66:4c:7c:cb:33:4a:89:66:
ec:e9:e0:ad:9c:ff:f0:9f:b1:26:85:e5:03:53:ad:49:68:d4:
97:20:26:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:23 2025 by rpki-client