Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E33210CCD8DE11EF90F12A96762E951A.roa
File: E33210CCD8DE11EF90F12A96762E951A.roa (raw, json)
Hash identifier: gYDm+0XDj7CrAcGGYTfeiuhSzJssJvc1ut7cznNzxd0=
Subject key identifier: 8F:4E:62:F5:A6:20:5A:1E:95:97:3E:BF:D2:45:AC:FA:D2:61:E7:DC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013FE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E33210CCD8DE11EF90F12A96762E951A.roa
Signing time: Wed 22 Jan 2025 16:35:28 +0000
ROA not before: Wed 22 Jan 2025 16:35:24 +0000
ROA not after: Sat 15 Mar 2025 16:35:24 +0000
asID: 138915
IP address blocks: 154.206.90.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81896 (0x13fe8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 22 16:35:24 2025 GMT
Not After : Mar 15 16:35:24 2025 GMT
Subject: CN=67911e50-f915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:27:89:fe:aa:10:e0:a2:25:46:01:14:69:
92:66:eb:19:44:53:5b:b1:23:2e:3d:16:f2:6d:5d:
26:88:b0:01:58:ea:9a:52:66:ce:ef:19:72:3f:e0:
ac:4f:a7:b8:04:c5:d6:ea:20:04:18:ec:5b:72:c3:
43:eb:72:ff:8b:ef:1e:8f:e9:6f:06:8c:06:36:ce:
fc:81:f3:31:b5:5e:6d:b8:e5:2b:c3:55:37:38:a0:
d0:03:69:6f:23:db:6d:e6:b3:4a:eb:62:db:1f:95:
f6:cf:d2:0a:2a:e6:a8:be:23:a2:18:10:0d:6c:c9:
ad:1e:00:4b:7f:7f:06:4e:1a:c5:bf:cf:0f:e0:2e:
54:0f:c1:4d:5f:d5:cd:af:0d:a0:53:30:ed:84:61:
4c:07:af:b3:2f:ef:d1:f7:9d:7a:78:74:dc:88:7e:
09:0b:46:ec:00:92:13:af:ce:9c:d7:b7:a7:e8:08:
eb:0b:90:45:d7:d2:38:73:12:d4:5e:0d:20:e5:18:
41:9d:fc:6a:f3:de:9f:f8:59:76:bd:31:4f:f6:73:
bc:7f:c7:e5:12:69:9f:d8:3a:43:d7:ef:54:c8:91:
33:53:4c:50:ee:8c:79:8f:41:1b:27:3c:59:31:7b:
ae:b3:36:00:3f:28:01:1e:60:d3:96:f7:09:ee:e8:
f7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:62:F5:A6:20:5A:1E:95:97:3E:BF:D2:45:AC:FA:D2:61:E7:DC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E33210CCD8DE11EF90F12A96762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:b3:34:f5:26:7d:5a:52:22:00:21:88:ee:46:93:39:85:c8:
d3:a8:2f:97:3a:7e:9a:4c:0c:32:7e:42:1d:1f:91:38:81:32:
cd:c3:b1:74:2d:fa:7e:c0:3c:cb:74:90:74:74:6b:89:f4:5a:
16:cc:ab:f0:af:78:2d:f4:be:6a:30:52:d3:0d:6b:7b:01:52:
5e:d1:3d:aa:1c:ac:45:be:c1:e6:46:70:f8:90:91:7e:26:d9:
7a:d2:8b:c5:8b:31:f2:0e:99:37:fa:4e:5a:ea:3b:e3:db:ad:
3d:6a:dd:5e:00:ac:89:e6:2d:bb:0e:26:26:34:4f:f8:ce:55:
c4:ef:bd:79:bb:ec:72:83:60:76:49:3f:73:e4:c5:05:fc:a8:
50:40:d6:0b:70:1f:d2:cc:a4:7f:da:46:47:3f:68:f8:fd:a2:
a5:31:d7:03:be:13:d9:75:d1:61:a9:48:77:ea:70:90:8b:3e:
5f:52:5e:76:86:75:13:4c:07:7f:9d:b5:da:80:f7:e4:cc:f7:
ad:27:e5:57:14:99:a1:6e:6d:1e:72:c5:34:a6:ea:33:e9:22:
0a:07:ce:16:e4:1d:c0:d4:d5:30:3a:9d:31:25:23:84:45:b5:
8a:1e:77:c9:24:c9:cb:bb:ab:da:67:f9:be:5d:38:04:db:0a:
9e:9f:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:54 2025 by rpki-client