Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122D0224C32211EFBF18DA60762E951A.roa
File: 122D0224C32211EFBF18DA60762E951A.roa (raw, json)
Hash identifier: gqN7DiThHKjDQtnxZJHUBBmhKrppmywrIbZuAYiyLTU=
Subject key identifier: CF:6D:BB:C8:D3:A0:BB:77:4D:97:A4:04:6A:05:F6:69:33:04:A4:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012574
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122D0224C32211EFBF18DA60762E951A.roa
Signing time: Thu 26 Dec 2024 00:40:57 +0000
ROA not before: Thu 26 Dec 2024 00:00:54 +0000
ROA not after: Sat 01 Mar 2025 00:00:54 +0000
asID: 984
IP address blocks: 154.90.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75124 (0x12574)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:54 2024 GMT
Not After : Mar 1 00:00:54 2025 GMT
Subject: CN=676ca619-bcd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b9:89:67:36:58:50:1c:69:89:bc:d6:0b:88:
97:79:16:e6:c6:91:d4:41:8c:f0:8b:c6:84:15:61:
30:cf:85:70:2d:3b:3f:5d:ae:18:89:31:3d:4d:e7:
27:ff:35:a8:39:a7:7e:f6:cd:b6:6a:6b:74:81:34:
72:50:ec:6c:a5:66:99:e8:07:1f:2b:b7:2a:62:0b:
e7:3c:3e:b2:27:04:70:eb:ca:17:f2:89:26:40:37:
dd:ef:a1:06:18:3a:f6:e7:e5:18:5e:42:90:fc:c9:
e8:d6:3f:ca:d3:7d:93:75:a4:43:29:97:db:65:d9:
cd:8e:19:32:20:bd:ec:a8:1c:02:c4:32:fa:62:45:
1d:4d:a4:f9:87:f0:51:42:b1:cf:76:08:05:f7:32:
21:9c:bf:8c:cb:80:02:fb:ab:a3:4e:32:69:51:53:
ef:e0:62:f3:3a:6c:41:19:3a:33:1c:cb:fd:1f:d9:
07:e5:4f:f5:fd:a6:f1:b7:f1:58:09:83:d1:3c:cd:
57:a0:ca:eb:e0:06:fd:6f:54:1a:9c:ee:99:d4:b3:
22:01:49:1b:81:db:2c:7a:c5:79:7f:18:e8:62:10:
f7:17:7c:6d:f7:02:ec:b0:56:1a:3f:b0:ee:eb:01:
9a:e3:88:12:03:05:ee:f6:32:0a:07:0b:14:07:c9:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:6D:BB:C8:D3:A0:BB:77:4D:97:A4:04:6A:05:F6:69:33:04:A4:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/122D0224C32211EFBF18DA60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.64.0/18
Signature Algorithm: sha256WithRSAEncryption
78:0e:bb:27:8b:b1:90:61:ac:df:8b:e3:2e:ec:43:96:02:84:
c3:c7:91:0e:1a:0b:eb:99:bb:a9:cd:76:62:60:18:99:8a:b5:
20:a8:75:b9:2f:72:e5:65:d7:3b:8b:da:fb:ff:61:cd:26:46:
92:9a:0a:04:cd:a6:93:16:4c:81:0d:c9:be:bc:cb:8b:21:5e:
51:9f:45:8b:41:3a:a4:55:e4:59:05:37:a6:34:99:ed:75:24:
2e:22:5b:68:80:75:47:7e:a7:23:36:62:47:5d:f7:e2:b5:d6:
33:58:86:a8:0c:43:d9:18:ac:0a:1d:83:1b:b0:dd:3c:48:82:
7c:b6:fc:2b:96:a4:85:8f:47:30:cc:e0:d0:2f:99:21:ed:53:
ed:02:f9:9f:67:74:02:2d:54:3e:4b:4f:d9:f7:16:92:8f:38:
6a:c7:03:48:fc:f5:7e:9b:20:2a:ac:3a:0a:f9:75:08:e9:19:
90:0e:39:21:ff:20:fd:8a:b0:b5:9f:81:bc:2e:f9:de:22:3b:
47:af:b1:33:37:d9:42:50:9a:cb:53:bf:93:59:8f:52:71:77:
66:75:db:c7:9f:7a:09:77:39:8c:03:0d:45:20:f4:5c:86:07:
c9:0f:8d:91:32:a6:9b:06:b5:6b:6d:06:86:94:3b:fa:e6:93:
f8:e3:03:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:21:26 2025 by rpki-client