Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5BE158EC32111EFB833A15E762E951A.roa
File: E5BE158EC32111EFB833A15E762E951A.roa (raw, json)
Hash identifier: MhsoNHh2ApA9f9nDl1Rq4/jvw39FgH0Sk/0mfwOx1oc=
Subject key identifier: F8:AF:93:7C:9E:28:6B:E5:7F:9E:CD:71:F7:8C:32:7B:ED:B6:2E:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012572
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5BE158EC32111EFB833A15E762E951A.roa
Signing time: Thu 26 Dec 2024 00:39:43 +0000
ROA not before: Thu 26 Dec 2024 00:00:39 +0000
ROA not after: Sat 01 Mar 2025 00:00:39 +0000
asID: 984
IP address blocks: 154.90.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75122 (0x12572)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 26 00:00:39 2024 GMT
Not After : Mar 1 00:00:39 2025 GMT
Subject: CN=676ca5cf-e64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:55:cb:e0:e3:75:51:4a:2f:3f:1f:c9:92:
f6:6d:1d:ea:d8:d4:dc:8f:43:6b:dd:de:a1:73:3c:
0e:c1:4c:32:13:1e:bf:56:80:af:8a:13:a9:c8:a6:
e9:ea:af:9f:b1:c5:f5:11:37:0d:d3:8d:01:3b:a9:
7e:07:1a:64:37:90:67:c0:26:4a:ef:7b:4e:7d:3a:
22:41:4d:4e:0b:8b:a8:7d:98:55:f2:2d:00:4b:a9:
47:76:a3:47:31:39:68:8d:45:f8:7e:a6:26:3b:a0:
74:c5:40:ba:90:18:f3:f7:a8:62:8a:c2:63:d4:67:
f3:f0:79:ba:dc:c8:b5:f8:cf:2b:30:00:72:1f:0c:
3e:e1:ae:ed:3a:e0:68:c1:33:ed:1b:06:0d:41:23:
0a:f5:6b:b1:e7:55:b0:92:cf:05:42:c3:e5:5d:53:
c5:f7:d0:1a:51:e5:2c:2d:e3:f9:a5:a1:ae:26:bd:
a4:94:62:bd:8f:8e:d0:cb:3a:38:73:6d:4a:21:d8:
9b:18:c2:2a:fb:ab:2c:d5:e7:68:4f:21:b7:b5:71:
99:1d:70:0a:e8:52:d1:82:4b:28:c9:38:0e:82:7f:
ca:fc:14:44:6d:06:62:a0:c2:4c:c0:b1:c2:04:b3:
b3:92:15:42:60:41:12:a6:41:ad:63:52:78:4a:78:
fa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AF:93:7C:9E:28:6B:E5:7F:9E:CD:71:F7:8C:32:7B:ED:B6:2E:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5BE158EC32111EFB833A15E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:ef:0e:6a:33:a3:0a:cd:56:b9:97:23:77:9a:3c:3e:37:43:
82:e7:c6:23:2a:a3:8c:b2:a0:06:3d:4b:d8:7a:78:3f:2b:ab:
cf:3e:5c:71:e5:49:d6:03:81:60:f9:00:5e:32:f5:5e:97:84:
e0:3c:ee:ce:9a:63:60:96:ab:dc:f0:43:64:a2:7c:51:37:40:
98:87:3f:66:3a:5a:da:06:b5:85:18:32:40:0d:b3:7b:7e:8a:
e5:e2:e0:8a:8b:34:a8:3a:30:a3:59:3c:83:ac:e1:2d:39:47:
52:34:c8:3b:c0:4a:98:ea:82:37:56:b0:cb:56:a3:a3:80:ea:
6d:54:32:d6:66:70:5b:c1:51:d7:73:13:43:1a:37:75:de:57:
29:0f:58:07:5e:85:0c:e8:3a:03:af:75:d3:11:c7:e4:17:07:
6c:cd:fd:33:d6:bd:fb:88:fc:d2:16:48:11:ce:c0:f5:77:4c:
0e:c9:4a:7d:17:03:34:e4:fd:69:84:b0:84:e9:b9:aa:a2:b6:
55:90:60:19:27:c3:7c:6b:55:b3:d9:2b:5a:b2:88:80:5b:5b:
3c:8e:6c:44:9d:5f:f1:c8:16:3a:fa:99:31:42:19:a2:6e:ac:
49:19:46:40:e5:d5:a9:f3:38:a6:f2:f4:87:7e:8c:d2:18:86:
11:4c:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:40:39 2025 by rpki-client