Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC66ED0C0EF11EFB3766E7C762E951A.roa
File: BCC66ED0C0EF11EFB3766E7C762E951A.roa (raw, json)
Hash identifier: JI3k7CoqnXSF7UP0CaJBg1+6c0hhdYHivUIpW2PknX0=
Subject key identifier: 33:D7:AD:BD:EB:54:AF:3F:9C:BA:F6:94:B7:19:D9:15:E5:15:4D:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC66ED0C0EF11EFB3766E7C762E951A.roa
Signing time: Mon 23 Dec 2024 05:35:37 +0000
ROA not before: Mon 23 Dec 2024 05:35:33 +0000
ROA not after: Wed 10 Dec 2025 05:35:33 +0000
asID: 984
IP address blocks: 154.90.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73548 (0x11f4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:35:33 2024 GMT
Not After : Dec 10 05:35:33 2025 GMT
Subject: CN=6768f6a9-9e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:97:e9:9a:43:3a:cd:3a:ff:63:1f:27:18:cf:
7b:07:e7:09:a8:59:26:ab:2d:99:e4:71:02:16:a3:
e7:88:e5:21:18:0a:15:59:b1:c7:83:71:f6:6c:10:
ca:75:d9:6e:03:84:08:b0:8c:7c:71:8a:bb:9c:f2:
47:35:23:99:22:e1:86:54:a3:3f:19:c0:35:aa:37:
1f:cb:b5:69:01:90:b6:07:7f:4a:ee:0a:f3:0a:46:
68:cb:f2:55:af:24:88:a5:77:7f:93:4f:95:12:02:
7c:6e:24:74:11:bf:61:b0:aa:95:fa:b2:1a:7c:67:
9f:b1:91:75:66:c1:83:99:58:59:0a:b6:40:1d:08:
d5:fb:f5:f8:db:8e:0b:e0:68:25:68:e7:93:86:53:
4c:e8:8f:bb:bd:5f:b6:35:4f:85:50:6e:82:04:ca:
24:67:68:b0:82:d2:84:3e:9e:a2:92:26:7a:7c:d4:
c9:42:78:0d:ca:ad:d4:09:78:a2:2d:14:8b:71:c8:
04:11:18:4d:66:b8:a9:18:3f:91:58:ab:10:d0:6c:
0c:28:a4:f0:45:1c:65:3a:96:e7:99:db:40:38:17:
19:c9:0c:81:15:af:82:bc:7c:87:88:d9:66:8c:e5:
0e:75:72:5e:00:62:e8:26:7f:ff:ad:f8:58:db:aa:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D7:AD:BD:EB:54:AF:3F:9C:BA:F6:94:B7:19:D9:15:E5:15:4D:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCC66ED0C0EF11EFB3766E7C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.92.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c2:f5:82:b6:41:69:6b:f9:30:f5:9f:ab:79:0b:82:a8:b7:
c7:00:87:f2:a1:2a:31:9f:f0:38:59:34:93:64:40:b7:2e:f5:
df:98:c6:d6:f8:2f:dc:8f:db:7c:fc:3c:04:55:e2:3a:6a:53:
29:1a:d2:46:99:58:8e:1e:85:37:bb:0e:97:c4:00:20:06:2d:
52:b4:46:b3:0b:d8:31:87:a3:35:07:8f:0f:d5:8e:a1:db:ff:
1c:32:73:de:8a:15:e7:13:84:cf:c1:55:3e:8e:8b:ae:16:7f:
ee:1e:19:63:cf:dd:34:79:bf:fe:85:71:24:fb:2a:9c:b4:42:
9d:b5:2c:48:ca:19:ec:74:2d:75:51:16:d4:c0:7b:89:ea:a6:
f6:67:43:f1:3a:d4:c2:fc:72:8f:7a:5a:b7:08:48:97:54:c8:
a0:37:0c:49:e4:97:eb:9c:6e:e5:de:dc:87:bf:d9:64:76:38:
9c:9f:36:62:5a:f2:08:b2:f5:f7:2d:7f:be:26:da:7d:4a:6a:
7c:7d:93:1f:0f:f0:84:8e:cf:5e:11:18:3a:39:b9:08:9d:77:
7a:85:9a:a5:e9:de:6f:e9:ef:2e:e9:bc:b5:15:2f:6c:ef:f7:
ab:ec:05:e8:94:5a:b0:7d:f6:f3:00:3e:15:09:58:7e:28:c0:
32:3f:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:14:58 2025 by rpki-client