Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF57F1CEDC9E11EFB5A6A76A762E951A.roa
File: DF57F1CEDC9E11EFB5A6A76A762E951A.roa (raw, json)
Hash identifier: R8aU/omNumy0pvSThmVV753NGL++vF0vMr53V79INOA=
Subject key identifier: 62:DC:03:47:6C:7B:44:03:60:32:56:65:21:83:0C:AA:67:7F:4E:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014BC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF57F1CEDC9E11EFB5A6A76A762E951A.roa
Signing time: Mon 27 Jan 2025 11:07:18 +0000
ROA not before: Mon 27 Jan 2025 11:07:14 +0000
ROA not after: Sat 08 Feb 2025 11:07:14 +0000
asID: 22773
IP address blocks: 154.90.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84935 (0x14bc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 27 11:07:14 2025 GMT
Not After : Feb 8 11:07:14 2025 GMT
Subject: CN=679768e6-33fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:d9:97:9e:e2:83:c7:2c:81:8d:5a:31:65:
4f:ce:aa:fe:79:6b:87:69:d4:3c:46:6d:6f:82:07:
dd:15:84:ce:c4:a9:ff:f8:61:44:c6:c0:e4:e6:2b:
7f:fb:70:4c:41:0a:66:84:9c:88:b2:86:cc:34:12:
99:fb:8c:f9:d9:96:51:6b:02:2b:83:8a:5e:a7:3b:
a4:22:a3:d9:e5:9d:be:59:c7:46:35:fc:3a:ee:4e:
1d:da:d8:99:ef:a9:fd:2f:a7:39:6c:e3:89:c4:48:
73:40:cf:f1:6c:78:ca:88:74:31:38:26:59:e4:05:
62:3b:8b:92:5d:38:3c:d3:73:4c:f7:9c:49:5f:16:
fb:bd:91:42:cb:1d:68:c2:34:6b:82:1f:43:9d:f7:
23:2b:be:d9:e2:60:74:4d:c5:b9:3a:6a:4a:c9:2b:
18:67:0e:95:d8:bd:f6:c7:51:6f:27:bf:c5:f4:ed:
04:14:98:b3:3f:01:a6:88:ba:cc:6e:ee:5a:b9:6f:
4c:39:cc:16:20:90:be:d8:45:d3:0e:c9:99:64:c3:
dd:e9:f1:66:30:4f:dc:2c:93:fe:8d:46:4a:68:3f:
91:b5:3c:cc:e1:68:2c:d6:b2:6f:7b:11:70:4c:d7:
9b:4e:48:65:29:e4:50:ea:f4:41:65:5b:af:95:1e:
d2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:03:47:6C:7B:44:03:60:32:56:65:21:83:0C:AA:67:7F:4E:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF57F1CEDC9E11EFB5A6A76A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.2.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3a:4a:f3:77:40:31:1b:f5:59:b3:c7:e0:ce:fb:f3:18:b2:
b1:80:bf:86:aa:08:4c:3f:8b:81:ba:d3:43:69:06:33:0c:4a:
67:57:48:75:0f:4e:2e:97:1a:c1:c7:ff:0e:53:e8:87:be:31:
b3:d0:e0:c9:26:ae:8e:66:a2:c5:af:06:0a:07:7a:83:03:d1:
d1:89:ed:14:3d:75:39:86:1c:b6:c2:de:9a:f0:52:69:e3:0f:
fe:ec:18:e8:62:2f:a6:ff:6f:07:e0:5d:0e:72:6e:58:d3:78:
49:e1:d5:7e:64:c7:5a:2e:2c:b3:dd:5f:e7:71:df:6f:d8:a3:
c9:5a:99:d8:1d:4b:d9:e0:23:4f:ee:51:e1:9a:f9:4a:ad:91:
d1:71:9a:b9:1d:34:15:83:7a:ab:06:9b:d2:26:32:b1:95:bf:
58:f0:a1:c2:91:3a:8b:37:0b:02:92:97:71:6e:66:d2:8e:26:
99:17:2b:d7:09:ba:b3:9a:71:df:28:17:db:a4:26:d7:29:01:
d5:c9:5b:08:79:f7:d9:6c:28:b0:af:cb:a7:f6:db:e3:be:7c:
22:9a:f9:52:d6:13:f4:b7:15:1f:b3:a8:48:7b:99:ab:b1:2a:
a9:36:f3:0c:67:7b:5e:da:ae:26:58:e3:60:fe:63:97:21:c4:
b3:ec:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:33:20 2025 by rpki-client