Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D18A38C19311EFB2738075762E951A.roa
File: D4D18A38C19311EFB2738075762E951A.roa (raw, json)
Hash identifier: sEkD8vccnSP3VJOeIdoY4kJ3OUZfjUg+eyba99ephbk=
Subject key identifier: B8:29:DB:81:DC:76:E8:43:97:59:FC:1C:1F:D8:91:A8:FF:D1:E4:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012011
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D18A38C19311EFB2738075762E951A.roa
Signing time: Tue 24 Dec 2024 01:10:15 +0000
ROA not before: Tue 24 Dec 2024 01:10:11 +0000
ROA not after: Wed 10 Dec 2025 01:10:11 +0000
asID: 984
IP address blocks: 154.90.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73745 (0x12011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 01:10:11 2024 GMT
Not After : Dec 10 01:10:11 2025 GMT
Subject: CN=676a09f7-0621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:1b:fd:c3:80:75:15:90:36:dc:39:5c:76:
e6:96:cd:ff:10:9c:53:8b:26:68:1e:0c:02:62:f9:
a0:0f:9d:5a:5b:2a:7b:24:5c:e3:35:6f:87:c6:78:
b8:97:92:3d:36:ce:44:2c:b4:0d:3c:b7:d0:3b:f7:
a3:38:94:c5:74:64:b0:f3:83:63:08:4d:a5:b6:5a:
19:4c:ae:ec:77:56:2b:47:2f:6b:2e:5a:57:0a:c1:
1e:82:63:c0:ca:07:73:07:c9:b9:7b:e7:f2:ea:9b:
f7:8f:41:39:9a:a7:5d:61:b6:88:03:11:f1:80:52:
d9:e6:b6:e5:4a:32:a9:0f:72:f2:24:6f:6e:f6:70:
57:12:42:02:49:ca:0b:69:8f:3d:4a:7e:b2:66:2f:
55:38:98:15:71:88:97:6d:b1:03:1b:8a:a1:e9:ad:
19:81:fc:10:cf:da:32:9d:fb:fa:44:c2:c9:66:64:
59:18:55:f6:22:35:ea:2b:26:f3:77:9e:21:56:3c:
7d:f0:f5:14:81:d2:12:43:e4:5c:ab:44:82:fc:89:
44:91:54:98:6a:c1:c5:3e:45:c9:9a:3e:c3:16:62:
8b:ad:1c:0d:df:a3:38:9c:7d:5e:9e:7f:0b:5b:47:
5d:fb:f8:4b:c0:23:0c:d8:a3:62:67:b8:2e:09:03:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:29:DB:81:DC:76:E8:43:97:59:FC:1C:1F:D8:91:A8:FF:D1:E4:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4D18A38C19311EFB2738075762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.159.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c3:2a:c4:85:6f:18:bd:88:cc:29:d6:f0:90:45:d2:dd:20:
4d:c9:ec:cc:a4:51:6b:b4:7c:fb:46:eb:52:5d:3e:16:3d:e5:
20:9b:84:87:64:aa:6d:26:fa:1c:12:82:05:c6:f2:f6:82:00:
99:63:15:4e:67:e2:7f:bc:bf:cd:68:a0:bc:c4:a0:32:36:ab:
9a:f5:b4:72:77:e2:e3:08:49:a1:25:14:f4:5a:33:20:5e:91:
53:76:02:09:3d:cb:9d:3c:1e:79:be:5c:30:24:49:e1:9d:36:
e4:26:3c:4c:16:e6:c0:2e:5d:e5:0a:94:b0:bc:9f:e9:e5:16:
d7:95:33:d2:ed:75:c8:44:c8:34:19:d1:b9:25:94:ed:4c:a6:
45:15:a6:31:69:6b:bd:3a:7c:ff:a1:9e:f7:94:8b:ff:b1:4b:
4a:85:62:a8:92:d4:39:81:0b:26:74:55:51:c3:fc:40:b2:c4:
34:bb:38:c5:26:fe:32:a1:fd:cc:81:41:f3:ed:d2:36:83:06:
aa:18:41:9d:d7:77:5a:ae:6c:42:12:0c:f9:fe:49:53:75:1e:
d6:41:36:59:a7:0f:a0:22:0a:8f:3c:d3:ec:ac:9a:2b:7b:1b:
b6:5d:70:73:a6:d9:ca:b0:1c:5c:a8:7a:4f:82:c3:bb:ba:dd:
db:85:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:20 2025 by rpki-client