Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D49431ACABA11EFB6E633B8762E951A.roa
File: 8D49431ACABA11EFB6E633B8762E951A.roa (raw, json)
Hash identifier: AOTTX7OC9j8qDJS8NWKy+es/wHMEQOZ+s5Zxt6Pl6Ms=
Subject key identifier: AA:DB:88:50:92:6D:79:3E:67:70:0A:E7:1B:65:5A:BA:1E:D0:C8:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0134DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D49431ACABA11EFB6E633B8762E951A.roa
Signing time: Sat 04 Jan 2025 16:40:05 +0000
ROA not before: Sun 05 Jan 2025 16:40:02 +0000
ROA not after: Tue 04 Feb 2025 16:40:02 +0000
asID: 5065
IP address blocks: 154.90.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79067 (0x134db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 5 16:40:02 2025 GMT
Not After : Feb 4 16:40:02 2025 GMT
Subject: CN=67796465-d270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:ec:2c:ba:3f:f7:97:1f:56:9f:d5:f8:65:
ce:43:31:1a:4a:71:aa:c9:08:1e:56:55:cb:45:27:
a1:ab:c3:af:4e:87:54:de:bd:1b:f7:83:b6:d9:52:
90:96:51:2a:48:8f:a9:89:ec:4e:b1:27:46:58:25:
4e:23:bc:c4:5c:3c:2a:10:9a:a4:ea:65:0e:57:80:
c6:93:2d:32:61:6d:d1:e4:b9:c8:73:12:60:3a:be:
0f:50:fa:4b:fd:99:a0:4d:95:93:74:2f:26:f1:f7:
31:0d:a7:45:c1:96:75:0f:8f:a2:bb:b5:4f:87:37:
2b:6f:44:4a:e5:d0:b3:91:46:ea:f7:35:dc:51:cc:
fb:60:85:f6:ab:5c:6b:55:d9:91:96:a5:10:d5:19:
05:53:7a:ae:4f:1a:8e:d0:93:8d:8e:66:47:3a:46:
bb:e9:50:43:d8:a0:65:50:9a:c0:57:c0:96:34:25:
d4:94:a3:85:1c:d4:da:aa:1c:f8:1c:79:4e:f4:b3:
7f:9e:98:44:ac:47:49:08:b7:23:a9:65:63:1a:d4:
2f:38:b7:25:46:36:f1:66:be:cb:2b:41:1d:9d:9c:
e1:8e:13:f2:b9:91:6b:3a:c8:3b:50:48:84:22:07:
71:7b:c8:3d:88:46:09:98:df:55:ea:a3:6a:44:c4:
01:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DB:88:50:92:6D:79:3E:67:70:0A:E7:1B:65:5A:BA:1E:D0:C8:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D49431ACABA11EFB6E633B8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.24.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:1c:de:6e:2b:fd:4a:77:ed:00:74:5f:89:4e:b9:a5:06:ae:
67:b7:a1:14:04:a1:61:fb:99:cd:f2:b2:bb:bd:51:ec:4e:e0:
87:59:43:d2:32:09:88:7f:7d:35:9b:75:b1:54:f0:59:4c:25:
2c:bd:bf:7b:8c:79:f9:f4:58:d2:10:fe:f7:93:21:9e:2e:07:
63:98:17:94:f3:88:d4:30:54:99:45:c1:d2:ab:22:b2:0f:70:
30:4f:c7:f8:6b:a7:b7:07:af:44:e5:d3:e4:33:94:ee:69:04:
1f:bf:5e:dc:4c:8a:92:47:d4:9a:ad:8d:c2:bd:d2:ab:27:44:
69:07:92:9b:33:5f:d3:dd:6a:9a:6b:87:1d:7e:7b:10:1f:1b:
8c:49:51:d8:0b:7c:0a:df:af:3a:4a:6a:f3:fb:b3:28:c2:13:
47:ac:53:b6:46:03:45:4e:44:5f:fc:8f:cb:e8:9b:ef:1c:75:
10:70:33:ca:04:e8:0c:b0:a1:58:75:8a:85:b7:9c:7a:1e:fe:
e9:35:49:dc:ed:9c:d0:f3:af:8e:fd:e9:f5:b5:37:f5:b5:ba:
8a:93:8d:54:46:58:20:17:9e:5b:57:59:6d:48:bb:13:a7:d0:
99:c2:44:e2:ee:9f:57:3a:c4:28:cc:54:88:90:e3:e2:75:4b:
af:24:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:34 2025 by rpki-client