Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F852F9D0C0F611EF921B88A7762E951A.roa
File: F852F9D0C0F611EF921B88A7762E951A.roa (raw, json)
Hash identifier: 8UyGQo1soPuTO4KD4OAKidKJ3+jh6a48G1c7gauU4H0=
Subject key identifier: 34:2C:2D:1C:8D:C0:05:A7:B0:5B:71:44:75:30:23:1D:39:06:3B:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F852F9D0C0F611EF921B88A7762E951A.roa
Signing time: Mon 23 Dec 2024 06:27:23 +0000
ROA not before: Mon 23 Dec 2024 06:27:19 +0000
ROA not after: Wed 10 Dec 2025 06:27:19 +0000
asID: 984
IP address blocks: 154.90.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73626 (0x11f9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 06:27:19 2024 GMT
Not After : Dec 10 06:27:19 2025 GMT
Subject: CN=676902cb-efb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:c7:86:6c:2a:1e:c8:05:f5:f7:1b:0f:bd:
33:fb:5b:9e:d9:bf:91:9f:14:07:62:86:ad:b3:cc:
b6:4a:35:d8:16:e2:ba:37:82:69:53:c8:d3:f1:79:
59:90:46:44:c0:97:1f:53:7a:00:39:34:69:10:be:
65:e8:41:35:10:81:c4:f0:6b:33:02:f6:80:b8:e2:
2a:0c:56:1b:63:cc:5a:d3:df:ef:2f:0c:dd:b0:2c:
38:ca:6b:fa:9f:d1:1e:73:51:d5:e7:72:ed:ef:e5:
59:c3:68:1c:6c:98:45:17:7c:1c:5e:b4:e6:99:f4:
30:0e:79:9b:b5:07:81:6d:3f:1d:c8:29:81:f6:6e:
80:7f:fa:a9:61:6d:58:7b:64:a6:8f:58:21:f8:04:
68:d9:51:cd:76:ac:b6:11:b4:d0:f2:22:7c:43:8d:
ff:c0:7e:f7:15:5c:c2:7f:45:ae:3d:e0:14:87:ae:
d1:7e:cc:74:6e:23:9a:02:ae:89:9a:16:ab:a4:4c:
65:7f:d3:eb:86:db:24:40:5c:b7:bd:7b:71:e2:45:
2a:b2:75:12:1b:d3:7a:7b:83:04:4a:ae:1d:60:1a:
ea:a4:56:53:8c:a8:b8:09:8c:04:0d:fb:b5:0f:69:
1f:82:77:a3:57:ff:b3:0f:18:21:08:78:ee:f4:48:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:2D:1C:8D:C0:05:A7:B0:5B:71:44:75:30:23:1D:39:06:3B:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F852F9D0C0F611EF921B88A7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.145.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:a4:a1:c2:db:2e:51:d0:7a:69:c8:42:00:50:8a:b2:56:25:
d9:8d:da:af:6c:a7:80:ea:2e:d4:11:e7:b0:79:fa:ab:d8:2e:
8d:63:c9:ab:18:39:a1:48:19:48:11:a4:6c:66:f6:b2:10:95:
f3:d2:f6:22:c9:b5:6a:34:36:37:00:6d:73:12:67:42:f4:1a:
29:2b:7e:86:f1:63:17:0f:ed:47:a1:1e:8b:2b:1d:49:e8:3b:
ca:63:31:28:01:bc:e0:85:20:5e:b7:8b:8a:a6:97:18:6f:78:
1c:27:7f:9f:86:57:2c:60:e4:5a:e5:57:98:63:21:39:7a:2f:
de:60:9a:33:0d:50:3f:f1:2c:97:c1:c8:4a:d2:18:15:31:7e:
71:11:57:a7:e4:07:02:28:43:b1:00:d6:da:fb:13:1d:74:e2:
6c:c2:8b:d5:0d:58:43:c2:05:ac:1d:db:bc:0a:c4:18:d2:b9:
5f:fd:03:c5:8a:15:af:c1:35:10:cf:00:63:a3:98:d3:27:47:
3c:7f:63:87:42:85:59:5d:c6:76:bf:fb:a3:52:89:6e:89:c0:
bc:f1:14:51:e4:76:e5:93:3e:67:fb:1b:e0:d0:ff:4b:4d:2e:
27:46:c5:0e:c7:07:67:ca:83:cb:bd:87:69:98:fb:ae:2a:08:
7d:00:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:55:00 2025 by rpki-client