Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC4B314AC19611EFB4BC178A762E951A.roa
File: CC4B314AC19611EFB4BC178A762E951A.roa (raw, json)
Hash identifier: 6CfG/MApAAfbs7ADbm8IvEw+IM2qHOJklkl4U+E7EgM=
Subject key identifier: F2:33:D3:D4:11:87:40:BD:78:90:2E:D7:BC:28:05:F8:72:55:36:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012035
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC4B314AC19611EFB4BC178A762E951A.roa
Signing time: Tue 24 Dec 2024 01:31:29 +0000
ROA not before: Tue 24 Dec 2024 01:31:25 +0000
ROA not after: Wed 10 Dec 2025 01:31:25 +0000
asID: 984
IP address blocks: 154.90.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73781 (0x12035)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:31:25 2024 GMT
Not After : Dec 10 01:31:25 2025 GMT
Subject: CN=676a0ef1-0733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:1a:29:b5:ec:43:1c:46:50:2f:98:ee:ff:
0f:20:ee:4e:91:bc:88:85:64:a7:8a:08:be:f4:52:
b3:92:8e:57:f4:f9:e4:b9:44:f0:98:de:14:69:25:
3b:14:31:ca:ac:dc:43:09:92:e9:05:bf:a7:86:bc:
d1:7f:27:d0:81:42:1c:1d:1e:de:cd:c6:96:86:10:
d1:59:f1:66:74:59:85:60:37:50:22:7d:6b:3d:12:
2b:06:ca:29:02:ca:2b:4a:b6:f0:73:31:b1:20:d4:
0d:8e:3b:05:88:d4:93:e7:2a:50:b9:9b:82:ac:0f:
e8:c9:55:3b:b2:9e:57:37:13:45:ab:4a:5b:72:d0:
e6:a8:9e:08:6d:9c:db:15:e2:27:47:68:46:0f:c6:
a9:fd:6c:67:f7:69:51:c0:9e:2c:4e:56:e5:b6:f7:
d9:78:e8:37:fd:52:16:7a:26:85:86:66:02:0d:e7:
b0:54:2b:25:52:4c:50:ce:cc:81:68:fb:18:c5:34:
5d:48:be:a7:c5:09:71:ca:d6:d4:39:ad:7b:3d:d5:
29:93:8d:7f:67:3d:ba:17:7a:60:16:0b:a7:70:cb:
23:f5:84:73:d9:06:dd:b6:1e:48:5b:0d:39:64:51:
38:34:7f:37:84:ba:64:34:32:ae:99:df:ec:89:20:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:33:D3:D4:11:87:40:BD:78:90:2E:D7:BC:28:05:F8:72:55:36:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC4B314AC19611EFB4BC178A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.178.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:52:d8:e4:12:72:f6:04:14:db:e3:05:fc:3e:c2:79:7c:94:
00:17:6e:cc:d0:02:56:25:da:d4:26:19:03:e1:71:8c:1d:bb:
8f:e0:c7:96:77:a8:2b:8b:32:c3:da:19:2d:97:39:44:b0:05:
97:f0:68:2e:3f:41:e3:fb:80:62:ca:c8:bb:f0:0c:07:70:9e:
98:7a:12:27:e0:7f:a3:fc:33:eb:84:73:c1:ca:3e:41:ef:a6:
59:3e:93:46:2b:4b:77:93:d0:ba:08:de:2a:55:0f:a2:95:27:
13:55:94:8a:07:51:0a:a2:82:8f:e0:28:54:20:d4:34:b8:d3:
fe:af:de:9d:9f:37:f6:cd:e3:8b:4c:ba:42:72:51:be:0a:51:
a1:8e:0e:6e:87:74:7e:f1:d7:16:29:73:64:28:b4:11:be:62:
57:20:5b:b5:48:d0:54:1a:21:ec:6c:99:d4:0d:45:0e:ba:73:
08:1f:55:b8:8e:4b:b4:1c:95:22:fc:7f:d5:5c:ac:15:50:87:
60:0d:eb:1e:5a:f9:59:aa:a3:39:42:5c:95:cf:11:a4:04:b0:
96:67:17:c6:30:69:26:3f:43:b9:6d:01:58:a6:0c:66:40:40:
30:6b:1f:02:c1:ed:4a:e7:c5:d0:7d:42:39:16:f5:04:86:35:
f5:69:ca:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:08:22 2025 by rpki-client