Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE75DDBAC19A11EF990D4DA8762E951A.roa
File: FE75DDBAC19A11EF990D4DA8762E951A.roa (raw, json)
Hash identifier: gx4ntsQHoanindy43MhH9nc8iYfM4M1NRt7dJzhCqCk=
Subject key identifier: D8:04:72:DF:42:69:23:49:2D:70:F7:71:A1:FA:93:AC:C6:45:AF:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012069
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE75DDBAC19A11EF990D4DA8762E951A.roa
Signing time: Tue 24 Dec 2024 02:01:31 +0000
ROA not before: Tue 24 Dec 2024 02:01:27 +0000
ROA not after: Wed 10 Dec 2025 02:01:27 +0000
asID: 984
IP address blocks: 154.90.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73833 (0x12069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:01:27 2024 GMT
Not After : Dec 10 02:01:27 2025 GMT
Subject: CN=676a15fb-01a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:48:e3:b7:94:c4:1d:49:23:30:6a:16:23:26:
21:08:cf:fd:6e:bd:ad:07:0c:e8:dd:ba:d8:4d:c6:
bc:b9:b7:36:90:60:12:74:8b:ae:5b:2f:37:c0:e6:
cb:75:90:4a:d9:99:26:1f:30:f0:34:a7:64:31:d7:
89:b2:7f:19:d1:bb:2d:e1:92:d2:46:96:da:4c:9a:
3e:e1:c4:b0:a5:2b:cd:b2:2b:f6:a4:97:0a:00:f7:
b0:48:43:22:f9:62:c2:5d:c9:83:af:11:38:c2:96:
15:96:d1:e5:f5:dd:aa:27:19:97:90:fb:da:09:b7:
cc:b6:1e:1f:56:9b:81:13:ee:aa:3c:39:70:c9:fb:
e5:b7:b6:44:ed:bb:f8:a1:be:2a:1c:53:33:7a:04:
02:f5:46:30:01:19:a1:44:4d:05:0e:4c:70:18:50:
41:5a:0b:b8:94:5e:74:c6:73:f6:50:57:d9:6c:41:
7a:56:10:c3:b1:51:37:13:74:fe:d1:8b:3a:77:62:
4e:8e:22:25:ef:fd:f6:b9:65:a3:a4:50:af:70:ab:
27:74:c3:19:88:cd:30:b9:f7:7d:a8:85:cf:d7:2c:
04:76:bb:a0:4b:38:86:59:f3:d0:75:2c:d8:65:c6:
54:b0:a1:f7:b2:53:9f:67:76:23:27:7b:3e:c6:8e:
4d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:04:72:DF:42:69:23:49:2D:70:F7:71:A1:FA:93:AC:C6:45:AF:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE75DDBAC19A11EF990D4DA8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:33:df:6a:a1:7c:ea:4b:9c:14:98:1c:06:72:bf:da:a3:61:
b6:84:0b:59:94:51:86:89:78:04:a5:36:81:35:6f:60:dc:42:
8b:0f:06:1d:47:c9:b1:31:ec:90:d0:c6:e5:42:85:48:be:8a:
9b:7b:89:75:18:1b:6c:ab:87:88:d1:09:f0:c9:16:ab:d7:e2:
83:f6:2a:46:4f:d5:1d:c8:92:04:48:85:ae:12:b3:c5:3b:2d:
24:0f:08:b5:51:58:67:07:fc:cf:08:20:35:e0:0a:94:9a:dd:
e3:55:e6:42:0a:80:9c:17:d8:a9:54:94:21:3b:df:50:83:e7:
e4:ef:b8:d4:4f:cb:29:95:5a:7f:b9:1c:93:50:31:1d:3c:46:
f3:94:31:99:0a:38:1f:20:6b:dc:72:94:9e:9a:38:ee:d9:d4:
5c:1a:b0:a8:92:2f:1c:b5:a0:a0:1a:7d:36:f8:c9:c6:f9:f9:
1e:ea:93:d1:df:67:5e:5b:3a:4e:ad:3c:d9:84:29:f0:3b:3f:
1c:6d:48:ae:ca:03:42:fd:b2:13:ce:08:17:cc:83:e1:2c:ed:
b0:8c:c9:25:9d:ed:e8:0a:b4:4e:83:30:b8:9b:0a:50:e6:67:
85:11:a7:ca:1d:79:8d:53:1d:53:42:ee:4a:4e:e4:73:53:aa:
c5:80:85:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:32:27 2025 by rpki-client