Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA152F28C0EB11EF87F0FE64762E951A.roa
File: FA152F28C0EB11EF87F0FE64762E951A.roa (raw, json)
Hash identifier: 4uWzxsND3UN2phEkfPRu4HyEhbb22eatF0bj5uqa8Rw=
Subject key identifier: 11:32:F9:8D:FB:C2:BC:A5:B7:F9:35:79:91:77:02:59:3F:13:43:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA152F28C0EB11EF87F0FE64762E951A.roa
Signing time: Mon 23 Dec 2024 05:08:42 +0000
ROA not before: Mon 23 Dec 2024 05:08:38 +0000
ROA not after: Wed 10 Dec 2025 05:08:38 +0000
asID: 984
IP address blocks: 154.90.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73512 (0x11f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:08:38 2024 GMT
Not After : Dec 10 05:08:38 2025 GMT
Subject: CN=6768f05a-81e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:8f:c0:14:82:c2:b3:1d:d1:5f:c7:19:b1:
18:58:36:65:3d:29:dc:d7:d0:0d:d9:44:33:0f:f5:
0d:b9:4b:5b:dc:fd:85:32:33:bd:96:ce:29:9c:62:
57:e3:ee:1f:26:59:1b:5e:69:71:a1:03:73:e5:c5:
b0:5f:2b:eb:8f:2c:d0:08:68:35:81:f1:dc:76:4a:
dd:e6:70:bf:66:9f:7e:f3:a0:e0:40:ac:9e:8b:0b:
c3:6f:99:a2:74:89:f9:36:c5:d9:66:02:25:02:34:
cb:3d:6e:20:b6:42:24:df:7a:e7:fd:bd:8c:e7:b2:
4c:8c:30:3c:e8:f8:f5:71:cf:b9:36:e4:2c:68:b2:
9f:76:56:f7:a9:fa:fa:22:48:0d:6c:a9:13:34:e9:
f5:6e:3f:16:0a:aa:7a:fa:9c:ca:b3:af:9c:ab:5d:
65:51:07:b8:44:3d:fe:c2:7e:85:88:7f:5b:a8:97:
50:d6:cb:8a:cc:a6:68:67:4b:5e:8e:ea:e8:55:a6:
40:16:60:89:a4:6e:50:56:64:15:41:90:36:46:58:
9c:cf:10:e0:ac:a0:23:89:f1:8d:b6:e0:42:e3:cc:
67:8a:b1:14:c8:31:ad:2d:9e:c9:6f:b3:2e:34:28:
0e:96:ab:6a:42:2b:e9:0c:80:3d:88:0b:b5:ce:19:
17:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:32:F9:8D:FB:C2:BC:A5:B7:F9:35:79:91:77:02:59:3F:13:43:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA152F28C0EB11EF87F0FE64762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.74.0/24
Signature Algorithm: sha256WithRSAEncryption
58:01:6f:48:1f:18:dc:91:61:d5:de:04:38:b2:e1:75:83:8e:
d8:a8:c4:e0:6d:ea:28:cd:6e:21:1d:65:4e:dc:b8:52:de:58:
fd:24:05:73:cf:b6:87:62:ac:b1:27:aa:52:d6:b7:ff:d7:7f:
c2:ae:8e:69:58:a3:26:e7:a8:3e:2a:53:37:81:e5:b7:92:88:
63:38:6b:7a:94:b0:ae:1b:bd:83:ad:51:f2:84:7f:39:dd:67:
5a:01:97:9c:0c:b2:1d:e5:48:87:91:be:84:5d:1a:7d:da:67:
ef:f8:37:cc:08:8b:55:17:7d:b8:81:41:87:0e:d3:c9:f7:1e:
d4:1f:d7:f1:32:f4:eb:eb:1c:6f:28:8f:55:70:4b:02:29:b5:
05:59:25:c9:7a:57:6e:6c:65:7e:ad:a0:f1:65:2a:f1:0e:29:
95:97:c7:e2:04:06:1a:b2:aa:54:0f:02:f1:39:d9:f9:9e:cc:
2a:df:59:25:43:e0:10:fd:27:97:f2:81:48:f7:33:f5:82:5e:
ba:7e:9f:8b:77:3a:e2:9a:03:58:82:a9:8f:2d:23:c6:63:70:
a8:5f:61:c7:9c:97:12:85:41:b3:93:36:d3:cd:31:7b:49:0c:
74:c9:68:9c:94:a0:8a:b9:46:65:7b:20:d7:23:b4:75:1a:fa:
ea:46:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:08:20 2025 by rpki-client