Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027FD4C6C0D611EFAD8AAF53762E951A.roa
File: 027FD4C6C0D611EFAD8AAF53762E951A.roa (raw, json)
Hash identifier: tcNOtOe4KyAj98jU81VfjIklFfmvcwcDqs/XkNLXc3I=
Subject key identifier: BB:91:CB:3F:D5:68:E4:6D:1B:8B:6C:5D:84:FF:AF:BB:4A:99:4E:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027FD4C6C0D611EFAD8AAF53762E951A.roa
Signing time: Mon 23 Dec 2024 02:31:27 +0000
ROA not before: Mon 23 Dec 2024 02:31:23 +0000
ROA not after: Wed 10 Dec 2025 02:31:23 +0000
asID: 984
IP address blocks: 154.89.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73308 (0x11e5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:31:23 2024 GMT
Not After : Dec 10 02:31:23 2025 GMT
Subject: CN=6768cb7f-ecb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:60:d3:ee:96:f2:bf:2f:f1:8a:be:20:9f:
91:b1:f4:8c:0e:85:9c:24:09:a8:a4:24:88:6c:72:
8f:b0:ca:67:00:61:71:c6:18:c2:89:e0:15:39:44:
f3:f5:6c:02:c6:62:d9:87:20:ec:37:9d:b0:36:ed:
a4:b5:e9:4c:9b:ec:12:35:be:cf:4c:d5:9e:d9:e4:
0d:0e:d6:44:d3:7b:1a:ca:45:87:e6:18:a2:84:3a:
23:48:ad:51:36:c2:3e:be:92:7c:0c:71:99:94:fa:
b0:82:72:af:ab:7d:e8:58:78:6a:a0:7b:ac:53:c3:
3e:12:54:86:b7:21:99:c3:91:e8:4c:48:92:e9:de:
7f:98:ec:52:5e:44:cc:8f:55:91:29:65:48:59:81:
45:03:8c:79:4e:f8:47:37:e8:ab:04:c7:77:a6:5d:
94:b2:dc:a7:e7:f4:c7:19:10:7b:e4:d1:03:bd:89:
28:ce:19:80:6a:15:e1:a8:49:09:4e:00:27:7e:f0:
a6:31:9e:9f:c4:90:b7:73:20:49:ff:c4:b4:91:03:
1c:9c:52:17:02:93:9f:23:77:8f:8e:4c:d3:aa:49:
72:76:05:72:2b:b8:35:71:bc:93:c1:02:f6:9a:ad:
c2:b5:9b:cc:a9:f7:25:2f:9d:12:23:55:21:68:fc:
64:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:91:CB:3F:D5:68:E4:6D:1B:8B:6C:5D:84:FF:AF:BB:4A:99:4E:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/027FD4C6C0D611EFAD8AAF53762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.140.0/24
Signature Algorithm: sha256WithRSAEncryption
81:38:81:fe:cb:f2:a8:d0:a8:12:dc:52:1e:8f:fc:87:04:e2:
8c:e8:02:18:24:a6:64:7a:a8:02:12:37:d7:8b:fd:93:24:b0:
88:0d:73:a3:47:c9:76:b5:09:f5:f5:22:1c:3c:cb:12:a8:a9:
02:ba:db:49:15:96:69:16:47:f2:e0:74:26:65:7a:36:4e:33:
a8:68:00:eb:20:e0:df:8e:55:c6:60:8a:91:38:30:5e:9a:a8:
38:86:35:39:ef:ba:1f:7c:92:f3:0e:7f:95:fd:23:26:0c:2a:
ba:60:8d:3f:34:74:b7:78:4a:fe:73:5d:c7:c8:40:3f:44:12:
64:d9:d5:d6:d9:db:b1:a9:87:31:ee:54:3f:d1:2e:33:5c:74:
b7:14:50:de:3d:09:9a:30:fe:ac:74:10:c8:ab:f6:fe:3b:b8:
be:f4:6c:3e:97:88:71:f8:24:c3:d0:32:1a:09:fd:e6:67:b5:
92:7e:e0:9d:c6:f4:e0:28:eb:73:9a:16:58:d2:92:70:2b:e3:
4d:82:c9:c9:c5:d6:6d:da:44:fd:8e:ff:b4:76:32:33:4d:97:
d9:11:08:21:87:06:6d:e2:92:af:ad:17:30:c5:7e:41:17:e9:
93:08:8e:ff:33:a6:e4:74:4e:09:9c:f9:3a:6f:87:52:a6:01:
d7:91:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:50:31 2025 by rpki-client