Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115DF154CDEB11EF96DBA688762E951A.roa
File: 115DF154CDEB11EF96DBA688762E951A.roa (raw, json)
Hash identifier: xdDtBusD3pkH1Jc/pZUfVW83hUj0EXk/tU/hb4r4pbE=
Subject key identifier: 27:00:67:30:D6:48:8A:10:87:0A:02:A1:7C:03:87:D6:F5:C3:03:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013809
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115DF154CDEB11EF96DBA688762E951A.roa
Signing time: Wed 08 Jan 2025 18:04:56 +0000
ROA not before: Wed 08 Jan 2025 18:04:53 +0000
ROA not after: Sat 03 Jan 2026 18:04:53 +0000
asID: 984
IP address blocks: 154.89.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79881 (0x13809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:04:53 2025 GMT
Not After : Jan 3 18:04:53 2026 GMT
Subject: CN=677ebe48-2cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:88:ca:26:de:7e:d0:d8:6b:e1:f6:ef:77:
ce:21:27:7a:3f:21:c3:d7:1b:d6:02:0e:a6:b1:06:
09:f1:fa:0a:e7:60:96:56:ff:a5:db:c1:9a:fb:b8:
7a:fe:23:01:54:87:5c:61:69:34:39:85:e0:0e:bd:
37:04:d6:4e:8d:b9:8f:f3:2a:1a:ff:95:28:09:0d:
5e:ca:ba:25:c6:1c:76:8f:b8:76:73:14:3b:ae:8b:
7f:78:ea:e5:e6:8a:68:7f:e0:dd:21:33:62:c7:60:
dd:6f:56:b6:3a:f3:39:80:c9:26:8c:0c:c9:11:f0:
84:62:b1:7b:b6:a0:b5:66:a8:9d:2b:4b:5b:35:73:
17:01:7e:f8:bc:14:9d:99:ce:c3:89:34:80:74:d3:
92:88:6c:99:aa:b5:ec:df:ce:73:33:1e:39:96:f5:
50:0d:b3:a4:34:ed:eb:35:51:f8:91:51:1c:be:7a:
d4:20:df:4c:1f:f8:11:68:0b:08:45:7a:49:04:cd:
04:c7:d5:3e:0d:fc:65:af:3c:ba:54:5f:6a:a8:df:
ff:7b:37:73:83:52:bf:a8:94:4e:94:f9:74:b6:ec:
4c:f4:38:33:c7:ce:ee:4e:26:eb:a2:fb:d8:6f:60:
95:64:be:d2:bf:85:4b:24:12:be:ee:b9:cd:6b:7e:
fc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:67:30:D6:48:8A:10:87:0A:02:A1:7C:03:87:D6:F5:C3:03:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/115DF154CDEB11EF96DBA688762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.211.0/24
Signature Algorithm: sha256WithRSAEncryption
05:71:b0:28:e6:ff:32:0c:af:bd:ae:28:95:e2:ae:f8:1b:b8:
eb:b1:c0:1d:88:90:4c:95:f9:06:e7:49:5f:f7:28:3b:30:e5:
f1:00:20:11:34:33:aa:df:fa:4e:af:db:9b:12:f5:4e:44:4b:
9c:74:c0:33:79:d8:cf:de:c5:e6:cb:36:8e:c5:e3:dd:8e:98:
b0:1f:97:b6:35:9b:7d:81:86:b1:22:a8:c5:e8:d3:12:90:62:
60:e9:a9:51:9b:c1:7d:f1:1d:db:00:ec:c7:a0:db:46:78:32:
ea:ef:e3:5f:d0:57:3f:f8:fd:e0:62:62:c8:c8:47:78:0d:ea:
51:be:dc:5a:a0:8c:d6:4c:3a:f7:63:da:04:dc:cd:66:f9:08:
ff:cb:6a:6f:0f:c4:15:f4:af:95:2a:7c:13:dc:b3:86:52:c8:
ed:ef:12:99:cb:2c:fa:c7:37:ab:e8:6f:a1:fa:04:32:fa:88:
4f:31:c3:f3:34:af:63:a1:38:4e:14:1f:74:4a:95:d9:4d:e5:
d9:57:b0:aa:9b:b2:9c:d5:ed:76:3f:ad:20:70:77:b6:ee:0e:
cb:78:a9:bf:f3:65:e8:40:50:05:d5:19:22:e6:e9:b3:9d:22:
6c:55:6a:45:c4:d6:23:95:b8:34:b3:8e:b1:cb:8c:a5:75:9f:
64:b3:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:09 2025 by rpki-client