Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB08C7F2C19E11EF81F9F046762E951A.roa
File: EB08C7F2C19E11EF81F9F046762E951A.roa (raw, json)
Hash identifier: zxeVNh/H6B7EjF4dCzF666USG7CQpiZwVgN/hBox47s=
Subject key identifier: DA:C6:3E:EB:A4:80:C3:CF:AB:63:B5:BA:D6:25:0B:AE:7F:7B:4C:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012099
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB08C7F2C19E11EF81F9F046762E951A.roa
Signing time: Tue 24 Dec 2024 02:29:36 +0000
ROA not before: Tue 24 Dec 2024 02:29:33 +0000
ROA not after: Wed 10 Dec 2025 02:29:33 +0000
asID: 984
IP address blocks: 154.90.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73881 (0x12099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:29:33 2024 GMT
Not After : Dec 10 02:29:33 2025 GMT
Subject: CN=676a1c90-fbf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:94:67:ba:d6:79:31:21:78:4f:e1:05:84:67:
68:a5:8e:c4:1c:1a:1c:ea:56:0e:f8:85:14:f1:08:
91:23:68:ad:11:75:d4:5f:92:f8:ae:46:e7:b9:2a:
cb:56:73:fb:95:a5:14:31:bb:7f:29:e2:44:05:79:
37:0e:fc:fe:fc:2d:d1:21:41:45:8a:e1:7f:7a:40:
c8:8c:14:a0:66:b2:aa:68:72:29:56:6e:fb:19:b1:
4c:66:43:b9:3f:62:23:70:3d:c5:8b:a9:a8:dd:7e:
0d:bc:9d:bc:58:d2:ff:b2:68:5a:c7:92:07:bc:e7:
81:ee:e8:28:d4:e3:91:3c:72:10:a8:21:12:b2:6b:
c0:c7:79:10:49:08:01:dc:2c:a1:48:f7:3e:f6:19:
8f:86:e6:a1:c3:63:83:64:b5:71:17:4b:ad:85:2d:
79:cf:5c:ce:65:35:83:6f:53:aa:db:75:b1:44:da:
7b:f3:f8:a6:95:4c:7a:8c:ab:88:a9:9e:0b:9b:b5:
c1:0e:a9:7c:a7:03:8f:69:f0:40:81:a9:a8:43:88:
c2:b0:49:a2:4b:ea:b4:4f:67:0f:56:a4:4b:8a:49:
53:a2:13:cd:2a:a4:cc:5e:d6:43:f0:98:46:62:a3:
b7:6f:8b:c6:06:1c:bf:aa:1c:7e:3f:c8:a9:01:6b:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C6:3E:EB:A4:80:C3:CF:AB:63:B5:BA:D6:25:0B:AE:7F:7B:4C:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EB08C7F2C19E11EF81F9F046762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:43:dc:70:62:f2:b8:d4:f2:40:35:d6:a1:a8:1d:04:50:93:
c7:20:ff:59:50:af:34:ae:6a:de:7c:2e:a1:c0:c2:21:da:94:
9e:ac:b0:5f:df:7d:5a:58:23:6f:17:9d:b7:a3:c0:06:ac:c4:
43:eb:49:48:4d:75:07:6f:47:ef:54:84:79:c7:99:ef:f5:cb:
ad:b1:57:f4:54:8d:bd:b9:0c:b2:ce:d9:31:0d:ff:2f:97:db:
13:e2:9c:45:10:eb:ea:a7:17:24:8d:55:a3:29:7b:e1:e3:bd:
01:f8:04:a1:b4:cf:66:aa:3b:27:61:8a:8e:68:1b:25:c1:f5:
12:8c:c7:bc:6b:c6:a1:3c:98:7a:86:a8:4e:34:f2:96:35:fb:
6a:5e:87:04:77:ad:e3:cf:83:ec:ba:cc:8b:2e:e2:cf:f0:2a:
cc:b9:ba:88:16:7a:61:00:4f:b3:6d:75:15:ca:5a:84:4f:84:
d7:a8:8e:50:21:fb:1e:4d:ee:9e:a2:1e:6f:b6:79:00:46:d5:
56:40:d3:67:0b:5d:e4:f3:b5:83:09:d8:2d:87:06:f5:9e:82:
cf:57:2e:f5:39:53:76:d0:ff:82:17:ac:b7:d4:32:52:9c:d0:
00:19:31:c7:ec:1a:83:da:72:c2:f7:6b:9a:7b:36:f1:fb:33:
9b:2a:66:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 23:50:35 2025 by rpki-client