Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696A1DB4DB6011EFA90E6481762E951A.roa
File: 696A1DB4DB6011EFA90E6481762E951A.roa (raw, json)
Hash identifier: NvyC1DznpFl6Mi+ct838LJUnXV5VrWR8qAhOigxXaNg=
Subject key identifier: B9:DD:19:44:1D:33:3A:9F:6C:8D:96:6A:D3:66:80:59:A6:77:27:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696A1DB4DB6011EFA90E6481762E951A.roa
Signing time: Sat 25 Jan 2025 21:07:41 +0000
ROA not before: Sat 25 Jan 2025 21:07:37 +0000
ROA not after: Wed 19 Mar 2025 21:07:37 +0000
asID: 138915
IP address blocks: 154.90.38.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84568 (0x14a58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 21:07:37 2025 GMT
Not After : Mar 19 21:07:37 2025 GMT
Subject: CN=6795529c-fee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:d4:eb:c7:17:b5:17:38:66:4e:c2:a6:d9:
ee:49:cf:11:bd:b6:37:fe:bf:55:88:5c:cb:86:e1:
47:90:f6:1f:0a:b8:56:e2:ff:5a:49:32:b0:7a:96:
9a:1a:93:ea:61:69:77:fa:6a:f9:f0:61:48:77:60:
12:46:53:77:96:ba:38:b4:95:9f:be:42:87:1e:a4:
a2:30:35:27:1d:96:96:8f:ae:f4:c9:b0:7a:3d:ca:
62:82:23:ce:3e:d5:6e:b9:ee:f8:2d:58:88:f6:13:
46:a8:9e:48:06:28:bb:ff:14:d7:36:54:08:f5:93:
52:e9:72:13:0c:6a:cc:7b:de:9f:4b:20:92:42:f5:
c8:b8:8e:34:77:73:45:2a:a2:da:f6:99:6d:07:5a:
e1:01:7a:1a:cb:a1:7c:55:78:e4:d4:09:a2:30:3d:
e3:13:e1:7d:02:62:d9:4e:94:68:89:d0:c2:8e:4c:
f4:60:42:ef:0e:5a:a0:bd:22:af:5e:7e:58:fe:db:
91:c2:89:83:8a:f1:24:87:01:1f:31:2e:e9:a2:fe:
0a:b2:f8:ff:03:e1:f8:43:4f:56:25:ad:7d:8c:16:
3e:5c:70:d3:73:0e:38:58:69:cd:97:be:dd:58:a6:
80:de:59:49:8b:d4:5f:9e:2e:81:e9:3d:9d:e3:65:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DD:19:44:1D:33:3A:9F:6C:8D:96:6A:D3:66:80:59:A6:77:27:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696A1DB4DB6011EFA90E6481762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.38.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:20:c9:58:40:ac:7b:82:04:df:2e:5d:e4:3f:27:fd:03:32:
ae:01:20:1b:60:da:e1:8c:2f:4e:4c:55:a3:e9:18:f4:29:78:
6c:06:c8:ef:e7:e5:33:39:d0:07:14:24:d4:19:fe:c8:43:42:
52:c0:54:19:46:c6:4b:97:34:0c:95:5e:29:29:8f:b3:14:58:
bc:bf:d9:4b:3a:f5:ac:ae:24:3a:c0:f7:2d:8d:ae:38:cd:2f:
07:77:49:d1:6e:13:ba:47:6d:5e:1d:31:f9:41:21:3b:1f:02:
a7:cd:f5:aa:e8:ba:5a:bb:5e:3b:7c:61:6e:50:47:12:dd:48:
5b:d9:54:6c:fd:61:01:4b:4d:71:5e:da:58:44:38:ea:e3:7d:
7e:56:b9:1f:59:11:04:48:6e:05:5b:0a:e2:91:91:d8:e9:4f:
b7:32:a1:ed:99:2e:3f:37:e3:32:68:65:5d:58:91:b6:b4:7c:
90:61:9b:b8:67:8c:71:50:ee:02:49:b5:c4:f4:1c:d9:4b:79:
99:94:86:71:bb:11:5e:bf:53:1a:87:d4:3f:2c:7e:38:20:cd:
e5:66:77:25:10:5e:50:43:ee:e7:d7:ca:2a:cc:b8:6e:ac:da:
ab:26:ad:30:e6:6c:b0:61:19:49:8b:fe:08:e4:f8:a0:03:12:
5d:af:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:15:13 2025 by rpki-client