Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/012694BCF41A11EF9E8838BA762E951A.roa
File: 012694BCF41A11EF9E8838BA762E951A.roa (raw, json)
Hash identifier: Dr2GyCV4xmnEt6yBUNuQKWUd7wsYEYhMXwpIvTHUqx0=
Subject key identifier: E1:DC:34:F2:0E:EC:DE:CF:D1:FB:F0:BF:2E:3A:94:BA:39:3A:1C:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01613E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/012694BCF41A11EF9E8838BA762E951A.roa
Signing time: Wed 26 Feb 2025 08:16:40 +0000
ROA not before: Wed 26 Feb 2025 08:16:36 +0000
ROA not after: Sun 20 Feb 2028 08:16:36 +0000
asID: 17561
IP address blocks: 154.89.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90430 (0x1613e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:16:36 2025 GMT
Not After : Feb 20 08:16:36 2028 GMT
Subject: CN=67becde8-e21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:de:4b:f5:7f:69:ed:cb:69:a4:23:05:58:
96:fd:ef:7c:a7:3d:bc:43:84:93:46:ba:53:19:61:
5d:6a:3e:40:39:d0:b7:38:e6:c1:14:10:70:d9:46:
4d:89:f9:c7:82:2b:c8:2d:c5:bd:28:20:fe:c4:31:
d7:ad:ba:d0:34:a7:7d:58:f0:7e:49:7c:3c:67:86:
10:d1:b7:97:75:12:45:a6:63:40:ec:1b:b4:10:a9:
2f:dd:8b:fa:ef:da:33:75:68:43:1d:4e:66:1f:d4:
41:70:99:fa:22:9e:e8:65:f6:6c:60:da:21:da:e0:
5c:cb:80:4f:f5:cf:15:a5:0a:d9:38:db:fc:83:18:
e1:2e:43:bd:19:bb:59:b7:42:e2:99:84:38:1c:56:
67:19:2d:36:cb:7e:c6:a4:33:f3:82:25:01:5c:76:
de:dc:49:c3:74:b7:60:e6:bd:cc:10:7e:37:09:2e:
90:f0:ea:09:0a:81:91:b7:e3:1c:a8:bd:c8:97:26:
91:22:ea:7b:fc:2a:c3:51:29:05:5b:f8:95:fa:e3:
06:ed:e7:64:b6:26:67:60:bd:e6:16:d1:b0:e5:e4:
45:00:74:be:24:79:c3:8e:51:fa:0d:6d:4a:e3:8d:
69:9e:3a:4b:c1:0d:71:6d:a2:b7:aa:a7:62:39:ff:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DC:34:F2:0E:EC:DE:CF:D1:FB:F0:BF:2E:3A:94:BA:39:3A:1C:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/012694BCF41A11EF9E8838BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.20.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5d:20:52:49:f4:ea:b4:23:a1:de:ea:39:ab:92:3f:60:c4:
ff:77:89:c3:0c:ff:bb:69:7e:b2:39:a9:de:b3:91:63:be:20:
78:cf:eb:e2:62:ae:61:dc:e5:15:c0:d4:77:22:a2:ac:8d:0f:
88:7a:d8:cf:ae:92:7f:76:3d:c0:a2:ec:bb:8a:50:ea:83:f1:
c8:60:ba:7e:19:37:fd:f1:22:54:97:e2:08:dc:2a:3e:bc:77:
48:19:36:d4:4a:15:4d:4f:c2:d2:48:de:92:9f:1d:4c:12:26:
84:c4:f8:e4:86:08:46:ac:74:56:54:e3:23:8d:6c:49:b4:47:
28:49:d9:8c:c2:4c:7a:81:07:c7:8e:1b:90:e0:f1:14:c1:ac:
09:4a:09:c2:06:e3:42:ef:8f:c3:78:1d:65:b1:85:c4:e9:e3:
43:a2:60:57:a0:d4:e5:f4:46:da:82:3a:52:0c:6a:70:54:f3:
c9:d7:04:9c:19:16:fb:95:20:a4:4b:04:28:84:61:82:83:26:
e3:d5:4f:44:5b:02:f0:0a:f0:76:3d:f9:1f:e9:55:94:18:11:
66:7a:c8:a8:9e:3a:04:13:56:5a:d2:35:a5:d5:5f:82:c3:19:
5e:8f:7c:e4:c9:68:eb:66:51:63:f4:0d:13:db:ad:95:ee:79:
20:59:e3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:11 2025 by rpki-client