Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C629FC74C0F111EF93D34489762E951A.roa
File: C629FC74C0F111EF93D34489762E951A.roa (raw, json)
Hash identifier: sm+M+U7WLNSK7JkSi7eJQSUFumyz5AmZBxKuBZRufb4=
Subject key identifier: 03:A2:63:88:EE:77:A9:34:DF:3A:55:7F:3E:7B:FE:D2:92:90:70:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C629FC74C0F111EF93D34489762E951A.roa
Signing time: Mon 23 Dec 2024 05:50:12 +0000
ROA not before: Mon 23 Dec 2024 05:50:08 +0000
ROA not after: Wed 10 Dec 2025 05:50:08 +0000
asID: 984
IP address blocks: 154.90.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73574 (0x11f66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:50:08 2024 GMT
Not After : Dec 10 05:50:08 2025 GMT
Subject: CN=6768fa13-2a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:0a:ea:64:88:95:51:bb:39:27:9a:46:e0:
09:90:1a:66:c8:8a:2b:fa:cd:25:54:10:3f:1b:8f:
72:c6:ce:4b:1f:f1:66:f6:6b:ea:f0:40:3f:f7:9d:
13:d6:bc:b5:2c:3e:34:f9:be:3c:ec:b9:6d:bc:64:
4e:05:ce:f9:c1:e7:40:d1:7f:21:d9:14:78:66:cf:
74:6c:25:07:27:e7:5e:11:0e:e7:24:c1:64:d6:41:
e5:3a:cd:4f:f4:23:db:3f:97:fa:02:09:bc:22:91:
ee:77:b6:86:ab:b3:e0:71:28:19:6d:3a:b6:d4:03:
cb:a0:b8:67:39:f5:a8:9e:9a:49:38:77:24:3d:53:
76:8a:61:2c:96:7c:6e:3d:99:36:dc:70:a0:ea:5c:
74:76:2d:e2:21:75:96:55:6e:35:70:2c:4c:cf:ec:
b9:be:e7:f3:74:ac:45:9d:4b:60:16:3c:db:7d:76:
92:bb:9f:fd:47:32:64:b5:9e:cd:a3:6c:60:10:30:
e7:41:9a:59:48:71:a4:bc:d8:4f:00:9f:e6:a8:9f:
7f:94:49:63:69:94:6a:cd:b4:78:13:89:79:48:3d:
cf:47:23:71:b9:b2:b3:64:68:49:fd:7e:fc:2a:69:
7e:7f:3c:f7:61:ef:e5:98:45:53:9f:29:79:15:a6:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A2:63:88:EE:77:A9:34:DF:3A:55:7F:3E:7B:FE:D2:92:90:70:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C629FC74C0F111EF93D34489762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.105.0/24
Signature Algorithm: sha256WithRSAEncryption
26:5d:83:ff:1a:45:eb:9d:62:b8:15:fa:50:1f:8c:cb:05:c0:
1a:c2:16:84:77:4f:7d:25:a6:19:29:a6:b2:07:d3:47:d4:4e:
03:62:0a:33:34:ce:84:98:f1:56:57:39:5f:6a:bb:72:60:17:
f0:c3:2a:84:5b:e1:9d:71:86:f6:07:88:00:2a:2c:0d:af:cd:
6a:48:70:22:4c:58:ae:4f:2d:38:a9:e7:ba:1a:05:f6:31:a6:
2a:0a:7b:b3:6e:d8:da:10:65:cc:55:97:6a:cd:43:21:03:23:
74:8e:02:11:5b:b8:3f:9d:bd:14:2f:5e:9a:2c:bf:e3:bc:bc:
24:d2:94:a0:0d:5f:e5:d1:3e:dc:08:77:09:e8:8a:77:d6:85:
3f:9f:b2:67:a0:bf:c4:39:b1:d6:50:3c:7b:45:72:fd:51:f1:
07:9e:3d:67:f4:c4:bc:94:08:3a:eb:48:7c:78:e6:49:1c:3f:
91:4b:22:af:dd:b2:33:24:01:8d:ca:00:fb:ff:76:85:e6:7d:
3b:ab:93:d9:87:4e:01:12:c0:eb:b5:c4:81:b6:be:15:b9:db:
a6:87:cf:49:e9:73:1e:6d:6a:82:98:65:da:2a:c3:08:de:70:
ee:d5:d2:df:86:46:4f:7c:0c:2e:4d:57:57:5f:04:cf:7a:fc:
30:60:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:18:53 2025 by rpki-client