Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9275CB0ADC9F11EF8973306F762E951A.roa
File: 9275CB0ADC9F11EF8973306F762E951A.roa (raw, json)
Hash identifier: gdPA9CbYuUKJ5nuAteY9yOKoK+EPdQSdPXoG7/CV+Ss=
Subject key identifier: 9E:3A:DB:CA:42:E4:DE:3A:9F:1A:B2:21:D5:1F:64:D0:1B:04:79:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BCB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9275CB0ADC9F11EF8973306F762E951A.roa
Signing time: Mon 27 Jan 2025 11:12:19 +0000
ROA not before: Mon 27 Jan 2025 11:12:14 +0000
ROA not after: Sat 08 Feb 2025 11:12:14 +0000
asID: 22773
IP address blocks: 154.90.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84939 (0x14bcb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:12:14 2025 GMT
Not After : Feb 8 11:12:14 2025 GMT
Subject: CN=67976a13-50d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ef:6d:5b:13:a9:da:bb:be:19:93:b6:32:78:
90:c6:93:d7:30:ea:48:bc:01:80:d6:bf:57:68:cb:
19:06:de:c1:d2:76:29:63:a4:6e:99:d2:a6:8a:fb:
44:66:94:3f:89:3e:44:17:d2:4e:9e:db:a2:fa:4c:
35:07:89:20:4d:0c:49:5b:5d:87:ea:5f:fa:e1:72:
93:ce:84:8d:19:c1:46:9e:67:34:b5:e7:5d:46:12:
d2:eb:c9:0a:64:91:d8:4e:04:c3:47:b0:93:8f:c1:
27:e9:a4:b7:94:4c:06:02:bb:de:5e:27:2c:f0:38:
71:44:8f:98:5e:99:2c:d5:10:02:3a:ef:a7:9b:90:
f0:d3:62:d6:e0:09:49:b9:a4:1f:f0:15:5e:1b:b1:
cb:46:47:cf:4f:6e:99:87:38:51:c8:b3:70:b9:53:
08:a0:b6:6e:80:94:3a:dd:0f:b6:71:11:cd:61:09:
00:6e:35:b8:5b:95:d3:d7:9d:10:84:23:98:9d:26:
63:6b:7b:30:af:b6:ba:bb:21:2a:5a:95:ed:75:9e:
5f:9b:0e:b4:b6:60:63:a8:9c:62:8e:9a:b1:48:10:
35:12:dd:27:19:32:14:5f:0f:1e:11:eb:99:2d:fa:
8b:e0:82:34:09:a6:5a:01:21:2c:58:11:4b:4d:00:
63:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3A:DB:CA:42:E4:DE:3A:9F:1A:B2:21:D5:1F:64:D0:1B:04:79:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9275CB0ADC9F11EF8973306F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.4.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:6d:60:26:18:be:ac:1d:24:e4:fc:44:01:32:f2:36:4a:ae:
cb:e5:0d:dd:14:fc:f9:d1:36:bf:98:f5:48:75:a0:47:b7:5f:
f9:39:39:60:80:22:9d:56:8b:c2:73:9e:84:ee:e8:f9:c8:f9:
d2:6c:eb:8d:04:ca:be:91:c0:ab:93:5a:16:6f:c7:29:d5:f1:
e5:87:00:b3:cd:20:e5:0c:0c:9e:42:9d:7b:28:1b:9b:34:17:
eb:47:ee:05:db:90:21:53:8b:99:82:7a:29:8b:65:35:5c:da:
43:55:47:17:ca:94:8e:6d:03:ed:25:de:f1:a2:39:11:4a:31:
04:48:21:f5:3d:67:cc:f9:da:8f:33:9c:28:60:dc:94:5c:20:
c0:74:d6:39:b9:15:ea:14:72:0a:13:18:ac:58:c1:5e:5b:55:
28:5a:34:66:02:68:94:24:af:5e:14:8f:a5:d6:89:59:3d:25:
a2:91:0d:28:c5:a9:a1:60:90:e0:57:c1:ec:55:06:46:b3:6a:
81:72:bf:92:ee:b4:80:55:24:3f:95:da:42:07:58:5c:95:34:
47:0e:92:21:f3:12:bf:ab:b1:1b:c2:c3:2c:d6:ff:3b:e8:ce:
64:09:1a:f9:71:42:fb:78:ba:a7:73:c0:b8:99:82:db:80:3c:
84:0c:8d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:30:11 2025 by rpki-client