Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4ADF1BEDB6111EFAF6DA688762E951A.roa
File: B4ADF1BEDB6111EFAF6DA688762E951A.roa (raw, json)
Hash identifier: Cp1/+ZGiLl+S76vMtzyrTS4je7n+FkI98ATHkIn9Q6I=
Subject key identifier: 11:11:EA:22:68:FA:B0:5E:6A:47:01:C7:54:01:12:36:C3:5A:6D:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4ADF1BEDB6111EFAF6DA688762E951A.roa
Signing time: Sat 25 Jan 2025 21:16:56 +0000
ROA not before: Sat 25 Jan 2025 21:16:53 +0000
ROA not after: Wed 19 Mar 2025 21:16:53 +0000
asID: 138915
IP address blocks: 154.90.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84576 (0x14a60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 21:16:53 2025 GMT
Not After : Mar 19 21:16:53 2025 GMT
Subject: CN=679554c8-2a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:6d:5e:7d:49:7d:22:36:89:0c:9b:f2:ca:
fe:8f:98:55:eb:ca:c8:02:61:0d:7e:fd:25:05:ef:
da:51:84:ad:e5:68:3d:50:bd:c4:1c:bd:56:40:07:
71:d9:39:87:26:c5:2f:63:92:39:82:55:01:a9:59:
eb:bf:52:7a:1a:98:a0:1c:f4:29:f9:b3:6a:a0:58:
d2:14:5d:55:d8:ac:c2:6a:71:75:e1:93:64:a9:ea:
e1:ec:31:e7:c0:9c:70:82:2e:9b:79:d9:e4:d6:9a:
cb:3a:ad:4d:ce:30:ef:4f:65:9f:bc:f7:63:7f:33:
d2:cc:a5:c2:a9:fb:89:4e:b4:1b:b1:75:7e:c3:a8:
f0:07:4a:9e:3c:6f:4a:ad:9e:11:6b:fd:46:0d:d2:
63:90:a3:4e:e4:1f:48:27:ef:a6:7a:33:42:a8:a8:
3d:9e:bf:27:ff:9f:62:95:6e:d9:8a:b0:61:6c:c6:
aa:11:ec:81:ce:a8:c8:b3:22:31:ba:cb:4d:5b:66:
7a:7c:50:5f:77:ab:ca:56:e5:f8:cc:43:9e:c0:4d:
eb:8c:cb:11:22:b2:69:87:c0:aa:83:ea:5a:d6:a8:
55:22:74:4b:3d:36:37:41:19:e4:86:43:95:91:4c:
9f:f2:fc:93:ed:8e:38:e9:8f:8f:ed:e9:91:ad:09:
a9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:11:EA:22:68:FA:B0:5E:6A:47:01:C7:54:01:12:36:C3:5A:6D:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4ADF1BEDB6111EFAF6DA688762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:fc:4c:dd:c4:37:44:0a:90:66:01:73:f6:a1:c8:7b:5c:d8:
aa:6f:27:5c:85:af:9d:fe:6b:40:66:be:3d:b8:6d:96:1e:60:
34:89:ae:22:af:d2:c3:83:07:ca:2f:82:e1:27:f9:84:76:7c:
c7:5f:a1:41:54:07:f4:cc:64:0d:c9:64:bd:b1:fb:e5:de:61:
81:7b:eb:17:26:c2:cf:b8:35:58:c2:c0:4b:fc:a7:c5:e4:b0:
84:5f:64:3a:44:1c:af:89:0c:6c:16:51:bf:e9:eb:80:bc:4f:
b3:72:bf:d4:42:6d:74:97:c2:a0:b1:9e:75:fd:6d:af:e3:1b:
c0:95:d5:cb:51:b5:c6:d3:58:62:99:c8:8d:9f:48:22:53:48:
1b:40:00:f5:5a:7f:56:f9:82:65:0c:4f:d6:9a:86:31:6a:63:
fc:95:fe:4d:d1:bc:17:93:7f:39:d5:a9:04:f4:99:75:8c:f9:
0f:13:b8:c0:6b:7f:39:81:d7:46:20:9b:92:9b:69:e4:37:2f:
12:c6:e0:92:4f:49:7a:49:5e:0f:f2:6a:36:97:45:1d:9d:a9:
f1:3a:c3:a9:9c:ee:dc:1d:8e:9c:77:37:9a:4e:83:84:b3:33:
19:03:14:17:6d:2e:76:fa:09:4f:a4:21:e3:04:1c:b6:67:ae:
a1:c4:10:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:05 2025 by rpki-client