Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F0E54D4C0DF11EFB5CA0591762E951A.roa
File: 0F0E54D4C0DF11EFB5CA0591762E951A.roa (raw, json)
Hash identifier: XDAMoRQU43gcI8yI8i68TEbBc0Upyz3pbZPXzW3aPh0=
Subject key identifier: 8E:3F:8F:EF:DD:A4:93:D9:0F:33:F8:CE:DB:82:EA:34:DB:04:6B:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011ED2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F0E54D4C0DF11EFB5CA0591762E951A.roa
Signing time: Mon 23 Dec 2024 03:36:13 +0000
ROA not before: Mon 23 Dec 2024 03:36:10 +0000
ROA not after: Wed 10 Dec 2025 03:36:10 +0000
asID: 984
IP address blocks: 154.89.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73426 (0x11ed2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:36:10 2024 GMT
Not After : Dec 10 03:36:10 2025 GMT
Subject: CN=6768daad-d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c7:e3:d2:91:c5:d5:59:42:43:15:68:d7:f9:
8f:2c:88:9c:43:ea:ad:a5:ac:a7:f3:10:b4:33:0e:
f1:ab:43:3c:2f:11:cf:b5:f1:95:4f:c7:04:5f:fc:
d3:59:cb:c5:22:36:5e:13:32:c2:45:35:eb:d8:fc:
00:45:b1:28:8c:0c:db:2c:e3:29:de:d6:ac:c9:eb:
9e:69:f8:2b:56:1b:ef:88:41:47:d9:2e:33:6e:40:
a8:0e:4f:4a:4d:fc:65:21:e1:a9:7e:11:eb:b7:2c:
04:3d:e5:22:1b:6b:b5:9c:42:d5:32:a3:f5:82:fd:
ea:8a:81:48:60:cc:d0:34:d6:07:69:f4:4b:7e:65:
44:aa:47:4b:80:2a:32:9e:0e:54:cd:a3:ad:38:62:
67:f1:4e:0f:cc:eb:a0:6b:7c:9c:eb:88:88:17:61:
29:d6:bf:48:e2:eb:10:d5:f2:31:f1:1e:bf:05:e1:
99:cc:13:fb:fe:b5:d3:82:a5:84:ee:ce:db:b9:70:
fc:ad:48:94:4b:0b:46:4a:8b:23:8a:40:f0:8a:08:
ee:cf:84:34:db:2f:65:ec:ec:3d:66:26:6a:e5:e5:
c3:6a:20:c3:86:0c:09:6a:58:5a:8f:30:2b:6d:fd:
33:68:46:da:53:e2:61:df:c2:df:e6:16:67:ec:b0:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:3F:8F:EF:DD:A4:93:D9:0F:33:F8:CE:DB:82:EA:34:DB:04:6B:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F0E54D4C0DF11EFB5CA0591762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.199.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0c:f2:02:2d:d6:5e:42:5f:d0:88:fb:f6:4e:27:53:19:45:
d0:d5:61:a2:34:c8:29:9a:86:64:75:b9:a4:d8:27:34:ca:9f:
f6:e6:9e:81:f5:97:3b:c2:7b:71:7d:6d:6c:79:93:e6:a8:ab:
64:37:17:6b:fe:03:b9:d1:c3:fa:31:22:21:b9:55:cb:eb:90:
3a:85:99:ea:24:29:e3:d7:a2:51:76:1d:64:56:d6:4c:4f:7d:
81:3d:44:b6:4a:3d:8f:36:59:31:11:83:ae:27:3f:d3:13:1b:
b0:1a:7b:5f:36:c9:23:5e:69:95:52:4a:e5:c3:4e:bd:24:bb:
41:48:c4:71:e2:90:9e:c5:a6:82:51:95:c1:8e:a6:b2:eb:60:
df:e3:0a:64:af:b0:33:8d:94:6c:89:46:31:2b:0c:88:8f:7d:
f4:ad:8b:08:0d:95:f2:2b:e4:e0:1a:5d:c7:f6:84:f6:2a:33:
77:b2:42:21:92:c1:39:08:24:ad:e4:20:6c:65:39:dd:e9:a0:
ac:7b:e5:c6:62:35:2b:c7:cd:5b:69:0a:2b:f0:c3:0c:66:e4:
af:53:1b:b8:b8:e7:50:a3:89:56:a6:19:65:68:20:24:d4:1f:
00:53:75:65:8c:94:06:bd:5d:01:7c:b8:8b:37:c9:0f:7a:2b:
a9:3f:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:50:53 2025 by rpki-client