Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB0D2E58C19911EF90E26E9E762E951A.roa
File: BB0D2E58C19911EF90E26E9E762E951A.roa (raw, json)
Hash identifier: OzYxdt69GeOiAqqe9CF3yp4LSFMtFR8wvG9VOHI0wKg=
Subject key identifier: 8F:B3:B2:0A:9E:BF:D0:49:64:16:32:C2:8D:AF:21:E5:E6:4F:58:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012059
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB0D2E58C19911EF90E26E9E762E951A.roa
Signing time: Tue 24 Dec 2024 01:52:28 +0000
ROA not before: Tue 24 Dec 2024 01:52:25 +0000
ROA not after: Wed 10 Dec 2025 01:52:25 +0000
asID: 984
IP address blocks: 154.90.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73817 (0x12059)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:52:25 2024 GMT
Not After : Dec 10 01:52:25 2025 GMT
Subject: CN=676a13dc-30c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:8f:3a:87:db:a7:48:a2:5d:df:07:8e:cf:
f7:bf:83:5b:48:b9:0b:25:fa:18:8b:3d:34:5c:ed:
f7:6f:3e:f5:22:74:ac:1e:c2:d1:f3:03:b4:f1:09:
5a:b4:36:ce:14:02:d4:57:20:ba:0d:a0:f3:bb:e1:
23:8b:2a:5f:bb:96:51:83:25:af:96:a7:06:72:fc:
4d:d7:0a:88:a0:78:df:45:fe:5d:73:b7:40:5f:db:
6c:af:eb:ed:df:04:5d:f6:e2:dc:03:48:9a:8f:9c:
b6:be:b0:f9:24:9b:3d:4e:11:47:3f:8a:1b:e3:7f:
e5:f7:ad:dd:aa:95:18:a3:9d:3b:63:7a:fc:5f:b4:
af:c1:17:aa:fe:09:82:fd:f4:35:ef:0e:2e:2e:98:
c4:6b:0c:93:1c:54:b3:b5:c7:dd:d9:2b:83:21:57:
7a:17:5d:7a:7a:e1:f3:e6:84:62:d4:6f:bb:04:69:
ac:91:e4:0c:6f:a1:90:b8:c5:03:30:97:e2:ae:1b:
f1:9d:66:d5:65:6b:70:dc:21:10:3c:1a:27:4a:a4:
b2:39:ad:6b:bc:5e:4e:32:e8:9f:e7:c7:4b:cd:ff:
8a:f0:96:6e:af:bf:99:0a:03:0e:81:4a:16:08:f0:
7d:f7:31:bb:95:e7:65:0a:d7:a3:f9:b5:ee:36:79:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B3:B2:0A:9E:BF:D0:49:64:16:32:C2:8D:AF:21:E5:E6:4F:58:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB0D2E58C19911EF90E26E9E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.200.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:e4:74:0e:a4:5d:0a:35:67:a7:f7:54:82:8a:f6:af:f3:1a:
f5:a2:24:48:48:3f:95:65:b2:83:ae:1f:10:4e:23:c0:17:5d:
49:f5:a3:e9:bd:81:95:f1:7b:d0:36:bc:a5:1b:c3:07:28:2b:
e4:e3:a4:1c:1e:20:7d:d4:b1:3e:f5:db:78:d4:83:35:43:a3:
69:3f:69:91:e1:55:10:1f:09:55:54:1c:62:08:f9:56:04:24:
6b:f0:69:26:76:50:c7:c5:97:64:1b:00:18:7e:c8:fe:a0:a0:
4e:89:80:0e:2d:03:7f:a2:8e:e1:22:a2:1b:f0:71:12:5b:8c:
57:20:88:43:c3:9d:6d:8d:08:61:41:10:b8:40:65:70:fc:9b:
d9:ba:6c:9f:9d:72:9f:a8:22:3c:9d:0f:48:e7:26:ca:06:93:
69:00:78:d7:36:fa:f4:b3:4f:67:dd:1c:3a:d5:53:ed:e0:3c:
88:9e:0e:20:58:7c:30:08:95:71:10:9a:c9:1a:8f:7c:69:e0:
b8:9b:d9:62:b3:ef:9f:2b:f4:c0:ff:f4:e0:64:01:e2:cf:c9:
15:12:fa:1d:43:4b:78:10:79:f9:23:7b:2a:38:1d:28:f0:d9:
b4:2d:32:63:75:1f:31:67:fe:d7:74:dc:d4:0e:2d:20:bb:b3:
c3:8c:0a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:28 2025 by rpki-client