Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CACEBBD2C0F311EF8ADA1B94762E951A.roa
File: CACEBBD2C0F311EF8ADA1B94762E951A.roa (raw, json)
Hash identifier: XpmNzO5Tk5eIt2MH1ivlNgVxMWQAvnMlejkUzQi13kY=
Subject key identifier: 9B:A7:4D:79:A0:4D:71:B0:E2:20:16:3D:DB:93:C8:7B:1A:05:5F:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CACEBBD2C0F311EF8ADA1B94762E951A.roa
Signing time: Mon 23 Dec 2024 06:04:38 +0000
ROA not before: Mon 23 Dec 2024 06:04:35 +0000
ROA not after: Wed 10 Dec 2025 06:04:35 +0000
asID: 984
IP address blocks: 154.90.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73592 (0x11f78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:04:35 2024 GMT
Not After : Dec 10 06:04:35 2025 GMT
Subject: CN=6768fd76-036d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b1:4b:2c:76:30:34:e7:5f:61:71:7e:50:a4:
b7:21:11:3d:52:bb:50:29:55:d9:0b:7f:d9:8c:ba:
cf:fc:5d:5b:d1:9c:6b:fc:3e:61:96:98:3f:af:1c:
92:77:1a:65:e6:e0:b9:10:27:29:52:80:7c:63:d3:
81:b4:5d:50:28:32:90:d8:75:a7:c6:09:81:ce:fa:
05:37:4a:1d:70:1b:74:d8:a8:a2:85:f7:58:5c:16:
c7:71:48:04:63:5d:aa:4c:8e:c4:f3:fc:d7:03:0b:
48:27:69:0f:a7:54:de:68:bf:54:3f:7e:ff:80:13:
0d:14:37:5a:04:b4:06:39:5a:e5:e4:66:65:3b:a4:
2f:90:02:15:2c:2a:9a:a4:de:d5:fa:3e:06:89:11:
02:1b:37:e6:d4:cc:98:50:dc:b5:52:e2:70:d2:4e:
21:42:83:af:0b:b9:c2:50:b3:de:2f:a2:22:e6:84:
34:5a:90:79:25:9b:42:ca:58:a8:72:c6:6d:0f:ff:
97:cb:75:e3:db:ef:03:c3:82:66:7a:2d:2c:62:95:
14:3d:f3:b1:6a:0c:2e:95:43:47:62:10:2d:e6:d1:
e0:2e:cf:36:7f:cb:19:7b:b9:ac:4b:43:fd:42:6f:
f2:e2:9c:36:8c:17:93:e4:a6:a3:c8:1f:c5:cb:1d:
26:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:4D:79:A0:4D:71:B0:E2:20:16:3D:DB:93:C8:7B:1A:05:5F:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CACEBBD2C0F311EF8ADA1B94762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.114.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:36:ad:9f:8c:9b:b1:31:80:96:c7:78:dc:91:a0:e5:79:ba:
d5:b2:26:17:22:68:f1:53:4f:0a:03:8c:b1:1b:80:7a:97:97:
e5:64:21:54:18:c4:ec:88:c8:df:68:da:bb:bd:6c:1e:a3:cd:
d0:9f:7b:39:ba:c2:04:ec:44:fc:62:66:ae:0b:8d:84:2f:56:
e7:26:5d:7c:07:25:8f:e9:8f:1b:75:e3:51:3f:e1:ed:2c:7a:
78:76:dc:56:6a:95:21:ce:71:e0:25:ef:c9:6c:07:01:b0:29:
8e:97:f8:28:9e:e2:d4:5c:f4:ce:03:d9:43:e8:ce:7c:a4:2a:
00:c0:5f:fb:a8:83:50:06:e9:5b:19:38:21:15:76:74:c7:9f:
a9:e4:7b:a1:c5:32:13:a7:8b:68:69:f6:91:09:40:be:18:71:
2a:05:78:01:a5:34:b7:ce:57:80:c8:b2:f0:7c:0e:cc:18:57:
46:7e:87:73:43:43:90:e4:3a:ff:56:85:ce:6c:37:86:09:cb:
be:e7:db:d7:ee:ad:1a:5c:11:20:9e:a7:fb:4c:75:ed:7d:04:
0c:9d:18:f1:72:94:51:24:d5:39:3f:7c:12:e4:88:0a:c6:90:
0a:98:5e:66:f7:cc:85:55:b1:fb:3f:e1:9b:82:ba:b7:80:9f:
8f:13:0f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:43:00 2025 by rpki-client