Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7AE83B4C19B11EF9639B7B0762E951A.roa
File: F7AE83B4C19B11EF9639B7B0762E951A.roa (raw, json)
Hash identifier: XT5fMetCfWb9RLPNoVB5Ey1aeCpusKm+8xLTsXOM8xU=
Subject key identifier: A1:05:C1:66:28:D0:74:3F:63:EA:62:54:44:28:88:5E:9D:8F:03:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012075
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7AE83B4C19B11EF9639B7B0762E951A.roa
Signing time: Tue 24 Dec 2024 02:08:29 +0000
ROA not before: Tue 24 Dec 2024 02:08:26 +0000
ROA not after: Wed 10 Dec 2025 02:08:26 +0000
asID: 984
IP address blocks: 154.90.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73845 (0x12075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:08:26 2024 GMT
Not After : Dec 10 02:08:26 2025 GMT
Subject: CN=676a179d-8564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:5c:21:bc:e6:35:a3:cd:b0:8a:ff:af:55:
8d:1b:8d:90:0a:5c:f6:0b:52:6f:2c:86:60:c0:c5:
c5:81:e1:9c:e5:cc:4c:55:0a:3c:24:77:6b:69:56:
29:63:fd:40:b6:ac:f7:e7:2f:8c:08:aa:3b:10:c0:
9b:b3:cd:26:d5:7c:d6:30:58:ec:0f:29:ef:5f:d1:
86:53:e5:d7:c4:50:a0:d0:ea:5b:49:4a:52:b7:39:
72:33:a4:3f:9e:f9:17:f0:bf:51:87:22:fc:ff:4c:
10:11:c5:34:b2:e5:0c:e2:e6:86:10:b6:b4:ff:f8:
98:30:03:7c:df:67:2f:9b:77:73:71:79:61:42:a4:
5a:aa:d7:b3:9a:2b:9a:ea:04:24:da:39:28:2c:10:
13:16:a4:e9:26:8e:c9:dd:d9:34:3a:75:5b:ae:f6:
59:7b:5b:39:5d:86:f3:ce:02:b2:4c:d9:19:dc:fc:
46:0d:ac:46:1a:a0:c4:44:86:f2:ca:90:ca:1a:2b:
e9:ac:66:0b:44:87:90:fd:51:6f:4b:d2:65:bc:c4:
cc:7f:50:61:c4:11:f0:38:f5:c7:8c:58:9a:c5:e8:
1e:cb:8d:96:60:13:95:0a:04:77:11:3f:0d:89:1e:
1b:36:79:6d:47:99:98:ad:12:a3:2c:70:52:8b:14:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:05:C1:66:28:D0:74:3F:63:EA:62:54:44:28:88:5E:9D:8F:03:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7AE83B4C19B11EF9639B7B0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.214.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:81:39:a9:6c:73:d9:45:c4:96:c1:47:93:99:3e:33:c7:cf:
59:fd:01:05:1c:6f:ec:09:76:b6:b8:d4:8f:a3:c3:81:41:20:
ed:97:b5:ef:40:06:e3:48:98:5b:cb:8b:da:4b:88:a3:5d:f6:
b6:8f:86:98:51:4d:7d:f5:79:b0:41:e7:eb:fa:e1:3a:26:df:
e0:27:5b:32:74:28:82:8d:f6:2e:ce:4e:fe:a0:1e:83:00:3f:
71:d4:a3:95:2b:a4:cc:66:db:ee:03:90:05:36:3c:7a:0c:09:
5d:8e:65:00:16:21:a9:94:92:84:ac:9c:2a:fb:df:90:bd:4f:
cf:7b:6f:ba:13:84:a4:a4:09:97:f5:81:48:d8:f5:78:ef:44:
44:e8:59:60:15:d2:46:87:32:f1:52:47:f6:e7:13:b4:e6:67:
c8:5e:c3:2d:c4:39:d8:96:09:41:d5:50:90:0a:84:72:66:86:
ae:d9:14:db:25:f5:14:8b:70:b7:07:9f:d1:3f:f8:39:9f:98:
14:2f:dd:b9:47:fa:79:3a:48:e2:08:44:9d:a9:5b:80:79:33:
19:86:af:f2:4d:df:98:20:1c:76:4f:22:c6:29:1f:c0:14:a4:
59:65:8c:64:6b:c1:7f:09:36:bc:e1:76:7b:1e:99:e4:82:3f:
8a:d9:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:40 2025 by rpki-client