Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A93184DBDB11EFB4865F47762E951A.roa
File: E3A93184DBDB11EFB4865F47762E951A.roa (raw, json)
Hash identifier: QhBNdFFSezi8WKVE4/vtJEPoeTsY/nQ5tF8t3heDCsU=
Subject key identifier: D8:85:30:A2:75:09:A3:35:81:A8:7B:17:B2:92:F7:87:7D:FE:CA:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A93184DBDB11EFB4865F47762E951A.roa
Signing time: Sun 26 Jan 2025 11:51:34 +0000
ROA not before: Sun 26 Jan 2025 11:51:30 +0000
ROA not after: Tue 25 Mar 2025 11:51:30 +0000
asID: 6079
IP address blocks: 154.90.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84603 (0x14a7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 11:51:30 2025 GMT
Not After : Mar 25 11:51:30 2025 GMT
Subject: CN=679621c5-6c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:93:1f:9c:4d:97:f4:c9:87:fa:cd:bb:c0:
3b:32:00:af:79:f3:1d:a6:40:40:ed:9e:ba:7b:c6:
46:a3:cd:5f:1e:41:c4:1f:fd:55:27:c7:b7:ff:ef:
41:8d:91:b2:84:db:47:31:90:39:90:4a:e7:d8:9c:
17:74:51:32:65:59:f9:60:87:00:36:a3:70:a0:70:
25:34:29:b9:64:78:35:8f:71:ff:64:12:b0:12:99:
7c:7b:43:a0:9b:f4:60:83:59:e8:39:be:11:df:58:
2b:19:e2:81:70:be:aa:45:3a:4c:2e:94:30:05:92:
22:f4:44:6d:e8:92:8a:21:4e:e3:71:a9:e1:07:f4:
51:bf:f5:5c:a8:e3:21:db:64:4f:0d:ec:aa:05:2e:
fc:9b:f9:f8:f5:78:af:52:b4:70:8e:f6:d5:11:94:
87:52:ba:17:15:4f:c8:39:cb:55:1f:a1:4f:f6:d0:
b0:fa:73:0c:9b:48:ad:f1:b5:d8:62:16:c4:b5:6b:
a1:61:0b:6b:d2:e3:fa:f5:c2:4d:da:d9:76:a7:a2:
2c:44:54:ec:57:e0:d2:1b:f2:86:4c:e6:99:e7:4f:
58:0a:0f:47:30:b6:04:61:42:01:dd:66:ce:51:85:
37:1b:88:7e:43:6f:21:16:12:b0:76:8a:00:4b:fc:
45:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:85:30:A2:75:09:A3:35:81:A8:7B:17:B2:92:F7:87:7D:FE:CA:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3A93184DBDB11EFB4865F47762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:b3:d4:b1:a6:83:51:70:4f:71:72:41:6c:b5:73:4c:36:01:
02:f6:ae:43:01:5d:8a:82:2a:77:09:70:8b:80:c4:94:02:86:
ce:1e:a6:0f:41:5b:5f:f7:a2:ff:cd:83:82:fc:6f:c6:d0:6e:
f0:8b:fd:b1:cf:10:e2:2a:0d:15:00:d1:ce:8e:01:0c:21:5b:
5d:7d:19:ba:37:d3:00:1c:90:e5:04:b6:7e:6b:7d:e2:cb:5b:
f9:b8:e4:18:da:18:72:8b:66:6f:e5:1c:03:7e:df:09:a2:3c:
9b:9f:c3:f2:74:c0:a3:ac:97:f8:37:be:95:89:a5:ef:39:38:
cf:26:3c:b5:7f:e1:b6:c7:32:d3:99:7c:58:27:d2:c0:e0:cf:
26:55:56:fd:45:f5:35:4d:4e:d7:93:70:f7:02:bb:b3:db:ec:
88:8f:67:43:16:e9:09:5c:58:bc:35:48:53:23:7c:b5:f0:ae:
44:33:ef:96:b9:96:8f:3b:13:d6:ff:bf:98:4a:ef:e8:af:17:
66:cd:c7:c7:58:66:99:8c:4c:0f:f7:f5:6a:66:70:39:66:3f:
8e:56:7b:80:e4:cb:a0:56:b5:5a:43:9a:5a:85:34:04:8b:9a:
fb:1b:17:5f:81:65:82:62:ae:1a:88:04:3d:a3:a0:c1:b4:62:
7b:dc:3f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:28:07 2025 by rpki-client