Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C300098EDB5F11EFB157F07C762E951A.roa
File: C300098EDB5F11EFB157F07C762E951A.roa (raw, json)
Hash identifier: j0chs+cHL9gku9Nt20fthyCWf/Co1oIq2mffTep/Ui4=
Subject key identifier: 6A:0C:9A:3C:97:69:51:84:B8:E6:56:C5:9D:A8:D4:85:22:BB:30:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C300098EDB5F11EFB157F07C762E951A.roa
Signing time: Sat 25 Jan 2025 21:03:01 +0000
ROA not before: Sat 25 Jan 2025 21:02:58 +0000
ROA not after: Wed 19 Mar 2025 21:02:58 +0000
asID: 138915
IP address blocks: 154.90.34.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84564 (0x14a54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 21:02:58 2025 GMT
Not After : Mar 19 21:02:58 2025 GMT
Subject: CN=67955185-36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e2:88:0a:5c:81:c1:97:58:0e:a6:e5:06:09:
6a:c9:c5:d6:7e:a2:3c:3f:d4:c6:18:3f:cd:dc:73:
f9:cd:0f:46:62:b7:c9:20:e1:1f:7e:1d:71:23:ef:
56:37:89:47:4d:f2:ce:0c:7d:0b:7b:4a:a0:cf:4e:
72:ec:f9:aa:97:b2:02:ca:a5:7a:f8:34:98:da:72:
01:74:37:8a:65:c0:02:26:b0:48:ae:e7:ea:6e:d1:
8d:d2:99:83:62:e0:da:71:bd:e9:3f:57:11:3e:3f:
ec:bf:4c:d2:14:29:d6:87:2a:15:d6:e3:e3:6c:84:
b8:28:c0:76:7c:6e:9f:c5:7f:14:47:60:6e:25:39:
d9:06:63:12:cc:50:13:ba:f7:a4:c0:6d:34:22:64:
b7:b2:c9:01:a0:97:51:b8:cf:4f:cd:c6:30:ed:77:
3f:3f:75:ff:52:d0:05:20:0b:36:e2:50:b6:27:37:
eb:6c:33:76:7c:57:54:32:25:10:4f:5b:c6:2f:1f:
dc:5e:e4:fb:41:1e:a9:fb:a0:89:55:88:55:c5:29:
f8:af:5e:a6:bb:48:f9:20:79:55:09:12:af:74:33:
ce:a3:fe:08:bb:7a:d9:fb:d9:2a:7a:e7:df:9a:43:
32:a8:ff:dc:16:64:41:1e:22:45:d8:ec:a3:f5:15:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0C:9A:3C:97:69:51:84:B8:E6:56:C5:9D:A8:D4:85:22:BB:30:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C300098EDB5F11EFB157F07C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.34.0/23
Signature Algorithm: sha256WithRSAEncryption
82:86:6a:04:c5:7b:f8:43:71:52:b8:95:cf:88:b7:76:30:69:
6a:0a:3f:1d:cd:bc:58:ee:dd:8d:b5:c5:36:0c:27:e4:e6:af:
03:e3:32:35:e5:b4:be:ba:8c:07:1b:ca:f2:41:b3:4c:73:c5:
ac:93:11:a2:a1:cb:a0:3e:79:22:92:b4:ee:6f:63:7f:eb:84:
a8:1e:1e:89:a5:47:1a:19:6f:be:01:0b:3a:92:73:db:9d:85:
78:47:f8:2f:00:d0:51:45:92:82:7e:e3:ad:66:e4:76:9d:b9:
c1:a4:65:3a:79:ef:db:53:60:45:f1:20:57:f7:4c:ac:fc:93:
14:f6:a4:3d:46:f6:99:02:64:05:b5:c6:a6:52:27:a4:65:13:
6d:cf:c2:33:d8:ca:35:35:77:b2:dd:9c:96:5a:6f:02:11:52:
d5:27:36:97:81:40:0f:95:e6:b2:c4:71:b3:5f:70:8e:19:c9:
ef:0e:1b:d4:25:f9:a4:67:b0:a8:4b:bc:29:a5:8b:74:d6:41:
95:87:94:f5:bb:c6:a9:d2:0d:5d:80:21:1a:10:65:5b:df:a3:
d8:cf:8a:65:8f:2a:76:86:20:f1:37:7f:cc:fb:fb:eb:06:6b:
8b:76:40:06:75:b3:aa:b4:c9:67:dc:bd:68:7a:c8:56:29:df:
14:66:bc:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 00:51:58 2025 by rpki-client