Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEFDFA8EC19F11EF9022E04E762E951A.roa
File: EEFDFA8EC19F11EF9022E04E762E951A.roa (raw, json)
Hash identifier: 2sNYRw6ZoTVOCBc7gqN3dcKI0uRZExdvxNPeOL5KEgY=
Subject key identifier: 8E:59:FA:B6:73:F5:D1:33:A4:E5:87:36:8D:3B:63:16:5A:39:E1:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEFDFA8EC19F11EF9022E04E762E951A.roa
Signing time: Tue 24 Dec 2024 02:36:52 +0000
ROA not before: Tue 24 Dec 2024 02:36:49 +0000
ROA not after: Wed 10 Dec 2025 02:36:49 +0000
asID: 984
IP address blocks: 154.90.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73893 (0x120a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:36:49 2024 GMT
Not After : Dec 10 02:36:49 2025 GMT
Subject: CN=676a1e44-1b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:03:0f:e8:07:99:f9:ee:13:81:75:37:42:
89:79:fc:c6:46:07:99:7b:ec:1f:70:b6:d6:36:4a:
8d:f9:f5:56:3b:d0:4c:3e:48:d8:17:a3:2d:b9:8a:
3b:d1:5e:d5:ab:37:13:4d:83:71:0c:e2:d9:8c:42:
28:ca:1b:79:75:06:dc:4f:2c:79:36:00:ec:5d:19:
94:3b:76:46:92:60:ce:ae:b9:53:a5:60:40:62:a9:
7b:bd:ea:33:bf:70:e7:8a:97:44:60:a1:8a:ca:dc:
19:44:c2:b3:79:c1:d0:01:bf:83:7a:7e:a0:93:bb:
af:cf:82:3f:f0:96:e2:f5:46:8f:b7:cd:5d:9f:ba:
36:18:c9:b5:3b:be:a1:3e:94:ce:bd:ea:61:f9:72:
ec:5a:67:ed:9f:87:df:1c:05:34:d2:e8:f5:1a:ff:
9c:c2:56:9a:68:be:61:e9:9e:11:2b:42:0c:52:2e:
93:6a:ef:3e:cd:66:68:19:03:df:2a:46:fd:ee:9b:
04:83:d7:cf:35:0f:8d:ef:d7:e8:23:b1:b2:6f:5a:
4a:14:20:e0:8a:7b:1a:a0:7f:dc:20:0d:da:ce:af:
ed:21:58:7d:7b:f6:cd:29:bb:9e:a5:73:f9:59:39:
cf:f1:fd:96:de:0e:e8:f0:e1:b8:41:b9:53:6b:71:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:FA:B6:73:F5:D1:33:A4:E5:87:36:8D:3B:63:16:5A:39:E1:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EEFDFA8EC19F11EF9022E04E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6a:77:25:17:4f:13:41:0d:0e:e3:ad:cf:ec:45:40:13:63:
25:f9:04:bb:f3:20:cb:f6:07:0a:8b:79:43:c2:2c:33:00:5d:
52:4b:a9:1c:0b:6e:e8:ce:5b:4c:b1:20:b6:dd:9d:d8:dd:0b:
ad:1b:d2:b3:2f:01:b0:32:bd:bc:13:d8:29:5e:72:55:2a:78:
fb:71:07:10:f3:ad:57:8b:be:07:60:69:15:9a:5f:7d:3f:c8:
57:96:5d:4c:a8:7c:74:e8:1c:94:ff:98:6e:6c:e4:4e:28:2d:
2b:de:58:9d:a6:65:1a:86:5a:41:1e:2e:c0:c5:eb:c3:4d:19:
64:c0:8c:52:bb:84:0b:3c:88:29:4f:9e:90:a8:a2:6a:51:04:
58:71:b3:07:21:53:1b:30:07:85:40:99:7f:b1:55:38:4b:9d:
f4:c0:b6:7a:d2:cd:b8:aa:3a:45:88:bd:78:d7:55:b0:eb:18:
cf:a7:af:ee:d1:d7:67:6b:e0:e6:ed:86:b6:c4:90:75:6c:01:
52:8c:e4:e1:e3:e3:12:99:7a:8e:ed:2c:e1:9f:07:4f:35:78:
95:58:98:97:ad:db:f7:49:37:da:ba:97:d7:b4:30:0a:80:9a:
67:b7:28:1b:25:9e:2a:b0:f1:11:78:f2:50:a6:c0:65:27:34:
3c:06:88:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:26:19 2025 by rpki-client