Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021436A6C0D811EFA8A1AA62762E951A.roa
File: 021436A6C0D811EFA8A1AA62762E951A.roa (raw, json)
Hash identifier: x7GmEdPWNGsl5mMXxqeTpFtCwc7IoT4a5+aBNdL9OFQ=
Subject key identifier: 10:64:EE:DA:9E:35:81:5B:23:EB:F2:7A:2D:DB:66:5C:D7:87:A5:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021436A6C0D811EFA8A1AA62762E951A.roa
Signing time: Mon 23 Dec 2024 02:45:45 +0000
ROA not before: Mon 23 Dec 2024 02:45:42 +0000
ROA not after: Wed 10 Dec 2025 02:45:42 +0000
asID: 984
IP address blocks: 154.89.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73334 (0x11e76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:45:42 2024 GMT
Not After : Dec 10 02:45:42 2025 GMT
Subject: CN=6768ced9-fe73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:f1:db:a6:09:5d:4b:b5:2f:98:e8:58:3b:
12:f4:ef:32:92:24:14:29:65:38:e0:97:29:5a:c8:
89:31:ba:7d:3d:f7:fd:5a:ae:1f:c3:49:06:ee:d7:
b8:9d:cc:58:6a:39:68:0e:3e:8e:aa:6d:e1:78:c8:
b5:c7:0f:ad:6e:4d:e5:e7:57:ee:a8:35:93:49:e2:
77:cf:2b:0c:a0:56:29:9f:0f:9c:0c:dc:79:1f:21:
b7:42:e8:19:e8:d0:a0:11:51:6c:8f:25:9e:71:e8:
cd:18:51:11:5f:66:04:f9:07:52:ec:9e:99:75:8f:
6f:30:5e:2a:c0:b1:ad:e5:5b:ed:3d:b7:60:52:09:
7b:0f:3b:76:eb:ce:03:06:d9:ae:3f:5c:27:c9:47:
54:c8:62:ca:73:d9:a4:84:76:9c:fa:21:bd:09:61:
72:a2:1f:de:a4:67:75:16:6b:4a:b9:db:0f:d8:78:
be:6e:57:99:ff:aa:91:0f:89:e6:4e:d3:fb:da:80:
89:d8:83:d3:e1:d1:6c:de:e0:e5:e4:89:0e:10:17:
d5:3f:e2:c9:17:32:ee:82:93:0e:33:be:7a:19:97:
4b:9f:b6:48:24:8e:93:2c:3e:13:93:c1:69:57:fa:
bd:c1:d6:20:07:22:f1:c1:30:27:a9:33:f4:d6:60:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:64:EE:DA:9E:35:81:5B:23:EB:F2:7A:2D:DB:66:5C:D7:87:A5:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/021436A6C0D811EFA8A1AA62762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.153.0/24
Signature Algorithm: sha256WithRSAEncryption
66:e4:c1:1e:f0:32:2c:e2:17:11:d1:69:d2:f9:2c:06:94:89:
60:87:4f:18:23:72:78:5b:74:7f:b5:b0:28:5a:10:e0:e6:73:
c3:ba:03:c5:cf:cb:7d:ea:7b:47:eb:3f:4b:33:7c:dc:f5:85:
77:12:28:2b:25:25:48:7b:24:d6:d4:34:89:ce:48:c6:5c:19:
98:45:47:20:91:55:50:71:ea:d0:d1:96:6c:b1:98:6c:ac:37:
50:30:be:0a:98:5e:8c:f0:3c:10:fe:57:6a:e3:10:3e:70:19:
2f:c8:20:72:d4:d8:65:d6:96:8a:98:d7:de:bc:52:35:92:ce:
fe:05:59:02:e7:0b:34:6e:06:86:e3:cf:bd:fa:2d:d7:52:54:
9b:74:69:ac:28:2d:b0:ae:fe:9f:59:00:37:8e:b7:0b:34:3f:
44:d4:1f:55:43:bb:ae:29:76:1f:be:16:86:17:62:4e:45:b8:
92:f8:8e:f1:b6:40:63:af:f2:ef:8e:0b:70:d3:dd:b5:08:72:
5b:06:2b:27:ee:0a:5e:3e:bd:29:24:cc:ae:5c:be:27:f8:ec:
b9:ac:6c:f6:cc:35:19:de:c4:57:e5:6f:e2:d1:1b:89:c7:f2:
1b:b9:0a:d2:49:ef:9e:5b:c8:41:e4:ee:1a:aa:b4:53:50:6a:
b5:72:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:56 2025 by rpki-client