Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663930B8C35911EF86F16E55762E951A.roa
File: 663930B8C35911EF86F16E55762E951A.roa (raw, json)
Hash identifier: WZX/tW3hLBc6PbSpJOQGzN4gAdoOY5D/u7IzE/W/UdM=
Subject key identifier: 14:0C:09:F3:00:5A:0F:A3:1C:00:9A:18:F7:0B:60:E1:18:E7:46:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0125F5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663930B8C35911EF86F16E55762E951A.roa
Signing time: Thu 26 Dec 2024 07:17:01 +0000
ROA not before: Thu 26 Dec 2024 07:16:57 +0000
ROA not after: Fri 21 Feb 2025 07:16:57 +0000
asID: 138915
IP address blocks: 154.90.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75253 (0x125f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 07:16:57 2024 GMT
Not After : Feb 21 07:16:57 2025 GMT
Subject: CN=676d02ed-6efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:13:0a:4b:90:f3:37:98:ec:31:f9:d5:1b:
ea:df:ca:3e:ac:69:8d:14:25:8b:3a:30:3a:11:16:
6a:52:0a:a4:04:43:46:b2:b4:b3:5d:4c:b4:0c:ed:
4d:28:8e:8e:b6:25:69:77:c1:87:55:96:d5:3b:38:
69:bd:f1:ff:91:cb:a9:47:8a:a5:b9:dd:27:52:3b:
eb:d0:45:d1:f8:59:1e:00:cf:12:1f:d0:ff:2f:dc:
b1:2e:eb:d9:cc:19:97:1c:af:ae:9d:8a:6b:a9:5e:
07:83:f3:b0:93:af:65:05:0d:b1:60:63:7b:70:66:
4b:5e:16:f8:cf:c7:20:95:95:ff:87:0e:a1:a5:22:
5e:36:cb:69:fb:00:44:fa:8e:f1:d0:8c:77:73:b9:
0a:47:0e:9c:42:b4:73:9e:78:33:33:d6:53:38:f5:
d8:d4:25:90:2d:54:ef:3d:82:b7:2e:c4:0b:14:d8:
40:49:d6:c6:31:0c:52:4b:fc:98:d7:fa:78:96:88:
75:ed:06:54:5c:32:fb:0b:a5:bb:3c:99:96:7d:17:
16:7d:c8:fe:9f:59:f1:60:3c:b7:6c:af:4b:56:82:
5a:29:ac:0a:95:c6:2f:b4:9d:a0:b8:b1:c2:2f:48:
28:72:38:fa:f3:75:1a:71:bb:d7:e0:10:ac:3a:b1:
af:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0C:09:F3:00:5A:0F:A3:1C:00:9A:18:F7:0B:60:E1:18:E7:46:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/663930B8C35911EF86F16E55762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:ff:0a:6f:cb:5a:4d:ff:63:8d:76:c2:ad:31:70:8d:ff:0b:
b7:11:3c:60:01:96:cb:12:f5:63:5d:26:4a:84:12:23:47:e5:
0c:b8:4c:fc:3f:5a:8b:c1:cf:d6:05:2d:21:4a:fe:f7:1c:69:
69:ee:06:e2:22:64:cc:30:7d:cd:01:1d:a5:1c:1b:9a:52:5a:
91:28:d8:9e:13:ae:e5:f3:a7:2e:cc:68:35:91:9c:f4:54:7a:
c6:f0:65:85:c9:65:4b:1f:02:27:78:e1:7e:ba:c0:f6:46:68:
4e:2c:9e:30:7a:eb:dd:23:4c:68:a8:b1:77:60:ce:f2:86:14:
b8:09:18:db:74:a6:52:87:66:b0:57:15:bf:48:e2:8f:c2:b0:
c2:52:14:a6:5a:4b:42:17:4f:82:0e:2f:6d:e5:b8:d4:be:9e:
3f:3d:6d:58:8b:f7:0d:fa:ca:ad:e4:e7:be:ad:d5:14:4f:93:
11:dd:cb:37:af:72:8e:89:68:8c:12:48:59:ce:41:54:c4:40:
93:7a:b1:d5:a8:b6:1c:2d:df:6f:7b:af:30:d5:20:45:e2:46:
64:4e:3c:b0:e4:41:21:32:29:80:da:92:d5:1a:96:f1:50:05:
63:01:e0:5c:c4:c8:68:5b:d7:1d:c2:1c:2e:34:51:ce:30:1b:
76:ce:0f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:11:46 2025 by rpki-client