Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E94DE744C0F411EFB33DC99A762E951A.roa
File: E94DE744C0F411EFB33DC99A762E951A.roa (raw, json)
Hash identifier: MkEaEr8LQsqbtk236+/AEH4U6mC0VkrnH5tQuN2Y8gI=
Subject key identifier: 5C:1F:2E:9D:72:26:32:88:99:09:E8:82:AC:9E:47:5F:59:45:3D:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E94DE744C0F411EFB33DC99A762E951A.roa
Signing time: Mon 23 Dec 2024 06:12:39 +0000
ROA not before: Mon 23 Dec 2024 06:12:35 +0000
ROA not after: Wed 10 Dec 2025 06:12:35 +0000
asID: 984
IP address blocks: 154.90.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73606 (0x11f86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:12:35 2024 GMT
Not After : Dec 10 06:12:35 2025 GMT
Subject: CN=6768ff57-08af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:18:51:98:06:2d:28:d2:05:8f:24:ef:9c:
7e:d7:58:2f:16:81:35:d9:3e:81:1f:7c:5f:66:4b:
78:6c:f9:8b:4f:66:bc:ab:73:6a:0b:a0:5f:66:69:
43:65:8e:85:97:18:a8:f1:c1:79:3d:89:5d:27:b4:
1f:38:0b:55:80:36:8f:1c:20:b2:55:65:ec:8c:e0:
b6:14:d7:84:ae:a6:b9:6a:2a:1a:87:db:5c:ab:c0:
47:4b:82:3c:bc:73:14:d5:9d:59:dc:02:ab:26:71:
e2:e3:0b:8c:33:32:44:5f:9b:08:d7:db:43:46:77:
00:6e:50:79:d1:d2:7a:79:30:43:e5:76:37:76:22:
ce:83:85:c9:c3:f5:39:34:8a:d2:67:ad:f2:c3:ef:
35:3a:19:a4:c6:e2:f5:57:9a:6a:a7:80:49:55:28:
0d:a1:d5:76:ff:45:31:5c:bc:ec:5d:08:b0:87:57:
36:8c:c8:11:85:35:93:45:de:6c:41:fb:e6:9f:b1:
b3:6b:ce:99:0f:90:f8:78:48:fe:78:bc:9b:e6:8d:
58:a8:c8:b0:4f:0d:aa:31:54:ca:a7:c3:3a:8e:e5:
20:a2:48:4b:e4:68:35:ea:1e:1f:1c:9e:fc:80:39:
ff:86:0b:10:a0:7b:8c:54:7b:ac:04:d0:81:f0:9c:
b9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:2E:9D:72:26:32:88:99:09:E8:82:AC:9E:47:5F:59:45:3D:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E94DE744C0F411EFB33DC99A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.121.0/24
Signature Algorithm: sha256WithRSAEncryption
85:67:42:10:77:24:7a:15:d6:25:58:77:b9:9f:26:5f:e6:ff:
23:ad:cf:7f:97:05:c3:0a:93:58:0b:a7:6b:d9:73:4d:b1:37:
1a:90:42:07:71:7e:30:0f:10:57:ee:21:10:5f:71:7f:c4:49:
9f:89:10:57:5c:2d:bd:9b:97:ad:0f:6c:7e:ef:1a:7f:fd:87:
fe:4e:2d:fa:88:df:6b:d3:47:ac:43:dd:79:ea:06:08:ed:66:
20:bf:6d:f1:e6:f0:74:f1:e9:0f:59:39:a1:a1:58:ba:59:e6:
9b:f7:fc:e2:86:ac:58:e8:90:2a:56:9f:63:b9:7a:21:b0:76:
04:71:27:1b:f3:b9:a7:95:b3:cb:e6:fe:5f:a2:8a:19:15:78:
cc:fa:85:5f:67:21:e6:7e:45:61:ca:4e:3d:09:4f:6c:4d:5f:
6b:99:ed:35:1b:e3:55:17:12:75:25:ee:e9:d6:53:7d:30:79:
32:b9:6c:6e:ec:4d:a7:40:46:58:da:29:48:6a:50:55:b0:ed:
af:f2:1a:7e:38:79:f0:af:40:a4:f4:1f:fd:0a:98:92:26:18:
4f:57:24:28:10:48:a0:ac:4c:a0:0a:81:db:7f:bc:32:56:5b:
43:bc:91:3e:71:db:80:63:7d:2d:8f:34:f8:d0:84:3b:e1:51:
73:af:4c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:22 2025 by rpki-client