Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FE41894DB5F11EFA47C2779762E951A.roa
File: 6FE41894DB5F11EFA47C2779762E951A.roa (raw, json)
Hash identifier: 8l/9kaKTa94nN1yWcXTIEh6oGoKxcx1M6G58xUlDnXc=
Subject key identifier: F4:69:EB:19:4F:07:1A:F4:F4:70:9D:F9:CA:DF:CC:05:7D:B3:B9:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FE41894DB5F11EFA47C2779762E951A.roa
Signing time: Sat 25 Jan 2025 21:00:42 +0000
ROA not before: Sat 25 Jan 2025 21:00:38 +0000
ROA not after: Wed 19 Mar 2025 21:00:38 +0000
asID: 138915
IP address blocks: 154.90.32.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84562 (0x14a52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 21:00:38 2025 GMT
Not After : Mar 19 21:00:38 2025 GMT
Subject: CN=679550fa-9065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2d:75:c9:cb:98:8d:eb:77:85:28:fd:bf:47:
f2:04:7a:80:ea:0d:e9:c7:42:30:a1:9f:62:7e:02:
15:88:b6:2b:de:90:a7:ac:8e:58:30:38:af:99:21:
7f:f2:2d:c3:08:47:3f:43:7f:91:90:8b:35:a0:95:
bc:17:48:58:4a:4d:74:cc:5b:eb:ca:cf:54:bc:3a:
93:03:e4:fc:e1:91:aa:1f:94:09:68:96:08:c8:5b:
8f:9a:c3:44:d5:30:eb:4b:83:3f:6b:66:53:66:91:
d4:48:9c:53:63:92:05:c5:16:57:dd:02:02:db:8a:
d5:38:6b:2a:0d:e8:ee:d6:0e:6f:19:8d:cc:7b:ba:
48:7d:c8:5f:f8:fa:da:3d:bf:6e:cd:2c:cb:17:cd:
8e:d3:72:36:f3:ed:5b:da:20:e0:99:69:63:b6:b6:
8e:f5:14:37:0a:9f:7b:d6:8e:44:1f:60:58:4a:c9:
fc:09:56:68:92:9d:1a:b7:d4:e0:ab:80:ec:4f:9f:
c2:3a:4e:d5:af:0f:fe:1e:87:b6:e9:17:51:7c:bd:
6b:0a:fe:45:66:77:ee:08:cb:8d:a4:4f:93:a4:90:
40:91:88:8a:ac:c8:8d:ad:8b:c1:fc:9e:ce:01:ca:
91:25:33:dc:b0:33:2a:99:da:75:8b:13:42:fc:02:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:69:EB:19:4F:07:1A:F4:F4:70:9D:F9:CA:DF:CC:05:7D:B3:B9:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FE41894DB5F11EFA47C2779762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.32.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:c8:2f:c6:29:d4:06:3e:a3:ab:5c:0c:39:02:e3:65:82:01:
99:7f:38:81:e0:a7:59:7e:e8:e6:07:35:a2:f0:f7:ab:de:99:
65:f9:7f:e1:a4:f4:eb:37:44:e6:17:b6:fc:71:1a:52:05:ff:
9e:bd:e0:60:c8:37:29:8e:47:be:ac:f2:d5:70:85:34:1a:d8:
e9:52:85:c4:e7:72:fa:f6:6b:53:fa:b6:f6:f0:87:35:61:ee:
ef:7c:db:80:01:c7:20:30:47:9e:ed:3c:d2:63:52:ae:5f:b6:
09:29:85:64:d4:e3:ed:7d:de:88:ce:52:a9:3d:b1:92:d6:2b:
62:c7:eb:4a:11:b6:48:05:32:a9:37:f7:47:79:f9:14:dc:87:
77:3f:f9:6a:50:1e:37:97:62:ec:f6:61:fd:d8:7e:03:0a:e6:
e5:e0:fc:05:c3:f4:f9:7b:03:0b:0c:f7:c3:f0:c0:2c:59:c2:
6d:8b:94:ad:06:68:8a:9f:4c:9d:be:33:6d:4e:7e:51:96:d0:
3d:c4:78:2c:2b:dd:1e:ff:b0:2e:2c:dc:4c:a8:cc:09:9a:db:
65:e6:7f:fa:63:ed:48:0e:11:13:f0:53:30:2f:18:48:7a:46:
dd:7a:0d:d6:14:2b:f0:da:94:1e:a3:86:fc:49:5d:40:67:1e:
78:0c:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:34:06 2025 by rpki-client