Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00262A8CCDC811EF8022F5AA762E951A.roa
File: 00262A8CCDC811EF8022F5AA762E951A.roa (raw, json)
Hash identifier: +5+82E+AU6fRvjjhYqzXDLDnEIi150/coogl8Q7xSB0=
Subject key identifier: 00:51:31:D2:D2:2E:9D:ED:0F:FB:E6:31:22:B4:65:9A:79:93:CD:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01374D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00262A8CCDC811EF8022F5AA762E951A.roa
Signing time: Wed 08 Jan 2025 13:53:55 +0000
ROA not before: Wed 08 Jan 2025 13:53:51 +0000
ROA not after: Thu 23 Dec 2027 13:53:51 +0000
asID: 17561
IP address blocks: 154.89.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79693 (0x1374d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:53:51 2025 GMT
Not After : Dec 23 13:53:51 2027 GMT
Subject: CN=677e8373-e9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:19:9f:6e:03:94:ac:4b:17:bf:b9:08:12:
18:db:07:ca:9f:1e:4b:24:99:e4:cc:8e:5b:9e:ba:
19:e0:94:37:47:00:e4:c8:16:d0:e8:48:64:cd:7b:
f9:ed:ae:a7:a7:ff:ab:d8:f7:6c:b8:08:64:fc:99:
e2:27:65:39:b3:5c:d4:be:13:43:9f:33:b7:18:3b:
64:33:21:05:28:64:33:91:43:00:d3:eb:6b:9e:bd:
25:be:17:c5:db:64:d8:dc:60:74:d8:94:1a:2c:15:
41:88:e2:33:32:e8:3b:2f:3d:89:d5:aa:ca:53:62:
b3:27:9f:79:4c:74:c0:87:f2:c1:f0:24:23:40:a5:
a3:72:76:0b:1b:2e:74:7e:f8:ac:46:1b:41:e5:85:
d0:7a:2c:04:81:58:b5:5b:23:e3:75:e4:d6:38:1f:
5e:6b:c1:e1:69:2c:25:25:d9:ec:80:aa:af:c1:c4:
86:61:2f:de:89:95:7e:ca:23:80:ed:34:23:3e:4b:
f2:10:d0:1f:bf:3b:1b:51:bf:7f:c7:c3:00:c3:45:
0a:7c:49:5e:7e:ca:b6:7f:ef:54:11:3f:79:d3:f0:
d5:a5:b8:66:a0:e5:86:5e:dc:e2:c6:b9:cc:db:3e:
4a:f7:2e:1a:32:4c:f3:bc:08:ae:67:ac:eb:88:57:
9c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:51:31:D2:D2:2E:9D:ED:0F:FB:E6:31:22:B4:65:9A:79:93:CD:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/00262A8CCDC811EF8022F5AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.31.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:bc:52:dc:c2:c3:4e:e3:5a:53:e3:e6:44:97:b7:73:e9:1b:
10:86:eb:b9:61:6b:28:a6:86:94:56:91:a5:d7:68:e4:b8:8e:
85:52:d8:10:25:97:bb:a2:c5:92:b3:cc:eb:bf:f6:68:b3:28:
9a:ea:d2:9e:43:55:96:f0:8b:8d:06:eb:aa:45:a8:e8:f9:51:
8a:3f:af:e6:37:84:d6:4a:76:d0:5c:a2:af:dc:56:85:17:08:
5e:62:e1:6a:fd:9d:2b:a0:4f:df:0f:cd:8c:07:4c:08:be:5e:
1e:14:44:dd:b1:f7:cc:12:89:16:57:b0:be:82:bf:9e:3d:9b:
64:27:36:51:ff:97:7f:37:63:18:9d:4f:25:11:b8:ae:2a:ba:
c2:59:4a:85:bb:23:61:6e:98:5b:2a:0b:66:6c:74:be:0b:f7:
8b:5d:38:7f:24:82:44:c9:99:13:19:73:1a:c1:d7:70:b1:c2:
14:db:46:8e:b4:cf:ae:47:9a:d2:69:71:d5:6c:36:ff:12:6e:
49:94:39:46:ab:49:e0:6e:d9:1b:18:68:a7:ca:3b:bd:d2:e1:
2b:2c:a5:6b:70:9a:52:c8:d4:03:1e:99:e1:ca:96:da:e5:91:
0b:e5:30:03:d3:0c:6a:5d:69:74:4b:60:55:43:38:fd:7a:96:
40:eb:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:31 2025 by rpki-client