Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90117D48C74411EFBF0C7BB8762E951A.roa
File: 90117D48C74411EFBF0C7BB8762E951A.roa (raw, json)
Hash identifier: caYioH176fy5RhjkKYTwY2kLeLzLF5HlXGWz14nnMVg=
Subject key identifier: 97:0A:7E:DF:24:CA:AC:72:EA:39:9A:1E:F1:25:89:0C:18:64:32:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0130FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90117D48C74411EFBF0C7BB8762E951A.roa
Signing time: Tue 31 Dec 2024 06:57:56 +0000
ROA not before: Tue 31 Dec 2024 06:57:52 +0000
ROA not after: Sun 09 Feb 2025 06:57:52 +0000
asID: 51896
IP address blocks: 154.194.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78078 (0x130fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 31 06:57:52 2024 GMT
Not After : Feb 9 06:57:52 2025 GMT
Subject: CN=677395f4-5980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:87:3a:25:60:4a:82:02:8c:46:52:f4:ca:
d1:dd:f4:c2:ab:80:e0:de:b7:e3:4e:b8:44:49:2e:
57:d7:d6:85:b9:2b:ee:cc:55:25:3b:62:da:ea:67:
24:a3:3c:44:4f:1f:a6:df:53:cd:37:4f:bc:a7:23:
01:69:02:ab:66:9a:ec:eb:6c:ca:f5:47:83:8f:ed:
59:a4:24:97:92:0c:1e:93:f1:e2:53:06:64:44:f7:
e9:8d:7e:64:b5:3e:49:ab:bc:1c:98:6f:d2:5f:1f:
d8:77:16:16:9a:9f:3b:a5:2f:e6:f4:23:b0:1f:a3:
7b:a2:b9:7a:fb:86:40:3a:1a:f2:3f:2a:b8:cf:70:
e3:96:da:50:1f:bd:1b:32:b9:7a:88:4d:61:93:0f:
d0:e2:b5:e9:8e:bf:dd:fe:59:e1:9e:76:cb:fb:37:
74:ae:3a:5f:71:43:8b:24:17:1d:d5:aa:1d:e9:96:
ff:26:5b:5e:d2:94:87:3b:bd:f5:17:ff:3e:c5:17:
ed:37:fa:2b:b0:9c:b0:2b:f8:48:22:71:42:7b:bd:
9b:ba:63:1b:c4:13:5e:18:db:be:c5:cd:f1:9e:bf:
9c:63:25:6c:de:e7:d9:e6:7b:8a:74:8c:56:84:57:
7b:d4:7c:05:27:8f:8e:e7:69:fe:48:c8:59:fe:b5:
fb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:0A:7E:DF:24:CA:AC:72:EA:39:9A:1E:F1:25:89:0C:18:64:32:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90117D48C74411EFBF0C7BB8762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.43.0/24
Signature Algorithm: sha256WithRSAEncryption
86:d0:16:da:36:9c:13:71:b6:38:84:78:04:96:5d:a9:96:07:
56:a4:a1:37:08:99:d4:f0:e9:04:e8:f1:0c:8e:74:3a:a5:e2:
94:c9:7d:d4:49:95:a4:5f:a1:6d:98:2b:ff:ff:1f:e2:55:c5:
7a:05:9b:e7:bc:ec:4d:9a:9c:a2:81:23:29:e6:15:9e:62:bb:
9f:e3:19:0c:54:75:8d:a2:a1:50:32:f0:ea:bb:5f:37:88:86:
9a:43:4a:c7:0e:ba:6f:4c:bd:22:49:2b:90:94:f9:ce:93:36:
64:a2:e6:c9:4e:e2:41:84:03:30:84:48:c7:45:a5:50:0c:f3:
94:36:d8:ac:2a:95:fb:c1:9a:49:3b:2c:b0:26:3e:72:87:6e:
da:0c:f2:e6:30:d4:45:0b:0e:98:53:6b:59:c6:f7:4a:9d:3d:
93:a3:d5:e8:4b:66:f4:58:eb:07:65:cd:8e:2f:54:d6:31:3c:
f5:e1:1c:a8:e6:e4:a8:bb:55:65:ea:e9:70:5a:40:ee:1b:f0:
ea:48:7b:95:b1:e0:5a:2c:d6:6b:be:91:2a:2a:23:8f:7d:68:
f2:b8:61:6a:1c:23:4e:12:a9:77:5c:44:6f:94:d5:e8:7d:5d:
15:47:b8:8d:1e:c8:34:61:2a:81:e7:20:d4:ac:4f:65:61:23:
b0:1a:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:45:25 2025 by rpki-client