Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDF14566C19B11EF9158B5AE762E951A.roa
File: CDF14566C19B11EF9158B5AE762E951A.roa (raw, json)
Hash identifier: 2KJpix4LkYlw/FNCLgGsHuw+O6qfwog8xeLigXBvXj0=
Subject key identifier: 4A:31:9A:B9:53:AD:51:98:17:0F:9E:22:8E:82:51:F6:84:7B:3D:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012073
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDF14566C19B11EF9158B5AE762E951A.roa
Signing time: Tue 24 Dec 2024 02:07:19 +0000
ROA not before: Tue 24 Dec 2024 02:07:15 +0000
ROA not after: Wed 10 Dec 2025 02:07:15 +0000
asID: 984
IP address blocks: 154.90.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73843 (0x12073)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:07:15 2024 GMT
Not After : Dec 10 02:07:15 2025 GMT
Subject: CN=676a1757-589a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:88:0c:ed:a8:63:0b:96:68:04:90:d8:e1:
9a:5a:e2:3b:82:fe:7c:33:cf:67:83:e7:3b:65:fa:
da:34:08:5b:58:68:5d:e1:e7:3a:e7:a9:ee:e1:d1:
c1:8d:1c:17:d9:ae:31:71:ce:53:cb:a2:7a:c3:c5:
c4:9f:80:ce:7b:c9:e6:e0:0d:c0:db:5a:41:5c:d4:
a2:5f:e9:97:93:1c:a0:64:3e:91:03:a6:6f:94:44:
f7:71:04:aa:23:67:50:ea:10:8a:14:1c:98:ea:a2:
61:36:9a:57:a6:a7:3f:da:7d:87:f2:f2:82:73:7b:
1d:a7:4f:ae:d2:e3:65:78:3c:29:9a:2d:e6:9c:a3:
27:c5:6a:58:cf:52:41:ec:dc:d4:d2:be:35:18:6d:
3c:8f:c4:61:df:2d:df:61:8e:14:21:97:20:c8:3c:
43:fb:f5:ff:d8:6b:c4:cb:c6:e4:5a:48:dc:1f:94:
10:7b:8e:5f:08:87:75:95:54:9d:67:f3:ee:61:8d:
90:b6:32:f6:88:0b:6f:b2:89:e3:4d:74:77:32:72:
fb:aa:1a:66:52:7c:a2:e9:5f:27:0a:26:29:48:1b:
d2:ad:b5:44:a8:f5:fe:8b:ae:18:25:30:d5:93:61:
a9:95:bc:f3:2e:f6:7b:e1:7a:31:a4:ed:3f:56:74:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:31:9A:B9:53:AD:51:98:17:0F:9E:22:8E:82:51:F6:84:7B:3D:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDF14566C19B11EF9158B5AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.213.0/24
Signature Algorithm: sha256WithRSAEncryption
27:f0:a0:4c:f4:31:7e:6f:dc:60:e3:f9:5f:0e:8e:c3:9b:3c:
8a:61:ca:ef:fa:88:0f:ab:4f:59:ee:ed:d5:b2:79:e4:0c:ff:
5e:89:b4:8e:8d:53:83:47:28:86:c1:b3:b6:56:57:5e:8c:98:
39:85:64:c5:1e:0d:e8:91:04:7f:64:ba:f0:40:92:22:fa:b0:
37:dd:77:b3:30:2f:6c:a2:25:08:94:fa:3a:24:b6:bc:21:26:
93:f5:f6:70:65:e7:19:83:96:70:a5:78:b2:34:f8:5d:7a:f6:
31:4f:79:43:7f:b4:ab:b5:4d:03:2f:1b:fb:8d:99:18:a1:0c:
2f:3a:22:07:d4:87:22:f4:ff:3d:ec:25:8f:c8:36:9d:d9:af:
47:bc:3b:80:c6:51:d1:9e:30:ad:b1:12:f8:f6:ba:d3:da:c1:
d5:4b:22:64:20:c6:52:4f:18:d9:c9:ff:ef:38:4f:2d:c3:00:
34:0c:c7:ad:5a:5a:a9:69:44:6a:f7:66:fa:a1:6b:71:9b:9a:
c6:5c:47:2f:d9:1f:11:24:4c:cb:89:cf:cd:c8:4f:89:2f:11:
dd:86:ba:cc:be:4b:64:6c:5c:73:8d:c0:06:8b:89:6b:22:cf:
3f:39:b6:aa:e7:8e:8c:bc:58:1b:1e:90:79:99:61:4c:8e:53:
19:1d:18:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:36 2025 by rpki-client