Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8268B8E2DBED11EFA41546BC762E951A.roa
File: 8268B8E2DBED11EFA41546BC762E951A.roa (raw, json)
Hash identifier: 2IK1gJs3kwZ98lwhtJnKIvhRH22ax+1fNau78C0W9+I=
Subject key identifier: 14:B4:34:E8:5B:CB:7B:2F:00:62:1A:76:07:9C:66:26:3C:F6:7C:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014AAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8268B8E2DBED11EFA41546BC762E951A.roa
Signing time: Sun 26 Jan 2025 13:57:41 +0000
ROA not before: Sun 26 Jan 2025 13:57:37 +0000
ROA not after: Fri 21 Mar 2025 13:57:37 +0000
asID: 138915
IP address blocks: 154.90.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84654 (0x14aae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 13:57:37 2025 GMT
Not After : Mar 21 13:57:37 2025 GMT
Subject: CN=67963f55-9671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:9d:da:69:7c:97:d8:31:72:4a:a1:b3:fa:
6b:9e:a1:d9:53:1a:bf:61:2c:7e:2e:d3:9d:f7:86:
ec:2c:86:1a:e2:98:07:b6:b5:8b:d5:3b:2f:c1:8b:
97:d6:7d:68:51:86:14:be:6f:7b:26:b3:64:aa:21:
7a:4e:8c:1d:28:17:eb:d7:09:b8:53:54:ab:af:6c:
b5:fb:c9:bd:6f:ea:d5:7d:13:69:98:2a:bd:1b:7c:
71:84:4d:50:e1:73:e3:e2:00:50:20:43:a9:5f:02:
fe:43:b8:30:c0:f5:61:b5:07:17:e3:6b:16:44:77:
d9:f4:d7:8a:8e:84:82:4d:1f:31:bf:15:08:a9:3b:
64:81:55:2b:b7:cb:86:34:44:61:3a:d6:e4:b7:46:
c8:d7:06:95:cd:95:86:77:f0:fd:6f:73:1f:bc:a4:
56:32:3f:eb:55:cf:14:4e:cc:2a:45:bb:a8:4b:4b:
92:0c:38:b7:eb:cb:71:2f:86:5a:73:92:05:0d:28:
b0:dc:60:3f:32:46:53:e7:a3:43:aa:f9:56:8c:29:
00:af:13:22:ea:29:84:58:a9:0c:5c:96:b1:39:e2:
6e:2a:ce:24:05:5b:b2:75:83:01:59:49:09:4c:da:
f4:df:1f:1e:69:28:16:2e:ea:5e:e3:f9:46:85:a6:
c3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B4:34:E8:5B:CB:7B:2F:00:62:1A:76:07:9C:66:26:3C:F6:7C:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8268B8E2DBED11EFA41546BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.62.0/23
Signature Algorithm: sha256WithRSAEncryption
99:49:e1:fd:18:dc:5e:fe:0a:15:1f:17:25:37:aa:98:f0:6f:
61:3e:fe:9c:42:e7:49:d8:b1:3c:d3:84:14:7e:9d:3f:51:82:
0e:ed:ce:4b:2b:7a:8b:67:3a:00:7e:36:0e:a4:0d:1c:e3:09:
8b:bb:a8:47:57:6d:f2:af:6a:f1:5e:b8:ad:89:4e:a0:a6:3c:
33:ac:2e:62:8a:f3:c2:6e:13:78:bd:99:e3:f6:40:c2:be:c5:
dc:75:fc:a4:40:47:62:59:e6:39:5b:93:19:e6:07:17:4e:3b:
00:62:2e:e3:5a:4b:ec:cd:36:a3:8d:e5:20:49:87:89:ba:f9:
86:9c:27:fc:d0:56:58:ee:d3:50:c5:ec:d4:3e:4d:a6:26:cd:
24:20:d3:99:48:ad:89:61:6c:9d:85:f1:fd:58:e4:ea:b6:2a:
a9:4e:63:32:c8:bc:25:fa:51:f0:40:e2:77:fc:b2:c1:22:0f:
63:07:e3:4a:c1:f6:ef:49:81:78:19:6c:ab:0d:c9:fc:e9:b2:
17:0b:4b:ba:97:ea:f4:63:71:15:75:20:0e:ef:32:60:2a:f8:
ab:0b:53:d6:ca:3c:db:73:68:90:35:5b:01:2e:d9:1d:34:f8:
22:f8:54:b8:4a:76:7b:ba:36:02:07:1d:07:eb:b7:86:23:a8:
bb:66:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:07:13 2025 by rpki-client