Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEAED97ADBDB11EFAD694F49762E951A.roa
File: FEAED97ADBDB11EFAD694F49762E951A.roa (raw, json)
Hash identifier: fgQMgnYMRoHnqWJdFwyfTMiMR4h6dhhcEpuFzWRCwdM=
Subject key identifier: D3:FE:F2:57:88:67:09:01:2C:99:AC:65:5C:2B:F4:DD:66:91:05:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 014A7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEAED97ADBDB11EFAD694F49762E951A.roa
Signing time: Sun 26 Jan 2025 11:52:19 +0000
ROA not before: Sun 26 Jan 2025 11:52:15 +0000
ROA not after: Tue 25 Mar 2025 11:52:15 +0000
asID: 6079
IP address blocks: 154.90.0.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84606 (0x14a7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 26 11:52:15 2025 GMT
Not After : Mar 25 11:52:15 2025 GMT
Subject: CN=679621f3-3628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5f:4e:10:68:75:e4:3f:09:3c:31:8c:2a:69:
ca:a7:fe:fa:10:ca:9c:ac:9b:af:a4:78:d2:1e:15:
48:08:62:a6:38:89:1f:29:17:34:3a:5f:ca:98:08:
ca:6d:55:9a:a7:b6:e2:fc:6a:24:74:c4:6d:ed:8a:
e6:37:42:c1:0d:fa:bc:52:39:99:7a:ac:64:0c:c6:
d9:99:57:e6:5b:95:0b:5b:c1:02:9d:52:36:56:18:
f3:59:4b:8d:61:7e:05:86:0b:53:5b:93:02:cf:04:
e6:65:4c:b6:78:b2:36:0a:f1:43:05:ca:dc:d2:ff:
03:e7:af:fc:67:0e:1e:42:a3:32:cc:d0:31:24:32:
32:9a:cd:fb:5d:ce:c1:a6:b4:f5:1b:d8:96:84:e6:
7f:e3:5d:cb:f3:ce:31:88:87:9d:ef:96:59:ce:11:
76:bf:ad:3c:99:0a:71:9b:f2:33:34:06:ee:09:8c:
10:80:15:b2:c3:cc:d5:28:1d:63:ed:58:4e:b2:61:
d4:74:46:50:1b:84:71:18:2a:93:af:fe:f9:dd:89:
12:51:cd:20:ba:f6:b5:fc:b0:bc:a8:82:10:06:f1:
80:61:dd:7a:09:31:2a:c0:67:d2:5a:75:74:ae:19:
3c:18:eb:2e:da:0a:7a:1f:ec:1f:15:e6:12:12:44:
b8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:FE:F2:57:88:67:09:01:2C:99:AC:65:5C:2B:F4:DD:66:91:05:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEAED97ADBDB11EFAD694F49762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.0.0/24
Signature Algorithm: sha256WithRSAEncryption
70:00:71:d8:6c:1d:fd:2d:45:cc:91:c4:b1:29:a8:01:5a:00:
0d:8a:43:15:ef:ec:43:53:78:96:f7:d9:5b:33:65:b4:fd:84:
c3:5c:2a:c7:de:89:bd:55:cb:05:32:44:ce:ef:49:98:fb:fa:
f2:75:6b:17:5e:47:67:01:c8:6b:da:04:f3:81:64:f7:0d:06:
fc:c8:2f:3d:fb:32:b0:39:8c:40:a5:7a:17:5d:4a:1c:56:30:
88:25:46:4f:8e:bf:db:53:30:63:01:c6:18:79:72:d3:f3:02:
4e:a8:cb:40:ae:6e:5e:63:0e:07:84:b9:7c:03:dd:b1:de:21:
09:e1:cf:c1:83:d7:c5:ab:af:7a:95:04:3e:2a:06:28:ed:0f:
28:16:ff:20:01:91:be:6e:e6:cf:b1:5d:f8:e7:c3:82:f7:60:
10:d5:c0:ab:8b:6f:a8:fd:82:ac:45:84:c2:ab:24:91:d8:a6:
56:98:a6:0f:84:36:2c:8b:60:53:c0:f3:5a:bd:96:d7:ad:16:
67:5a:0d:62:66:9b:29:94:6b:7d:1b:fd:4a:31:2a:66:64:1e:
6a:e4:6a:9e:e6:94:32:02:2a:11:b9:77:3c:70:11:08:3e:98:
04:f4:c5:ff:17:a4:ec:41:7d:55:ec:ba:a4:2f:7e:8f:18:74:
1d:65:92:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:29:59 2025 by rpki-client