Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12EE7BDEC0D911EFB5F65A6A762E951A.roa
File: 12EE7BDEC0D911EFB5F65A6A762E951A.roa (raw, json)
Hash identifier: uWxiYtw6BUpTfaPh8pUfvz3RErWZe71AKkaZzA46ob0=
Subject key identifier: A5:29:0D:A4:76:CC:B7:9D:F5:90:AE:60:B2:69:3A:73:1E:24:57:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12EE7BDEC0D911EFB5F65A6A762E951A.roa
Signing time: Mon 23 Dec 2024 02:53:23 +0000
ROA not before: Mon 23 Dec 2024 02:53:19 +0000
ROA not after: Wed 10 Dec 2025 02:53:19 +0000
asID: 984
IP address blocks: 154.89.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73348 (0x11e84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:53:19 2024 GMT
Not After : Dec 10 02:53:19 2025 GMT
Subject: CN=6768d0a3-84eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c9:1f:01:9c:6c:9e:18:62:f2:8c:84:fc:f9:
4e:2c:3e:19:c2:bd:16:1c:57:95:71:f9:a1:76:4b:
ff:1a:1f:95:82:84:69:54:18:57:99:f0:cc:60:c7:
58:0d:b1:cb:74:67:3d:22:8e:e3:1f:66:36:70:41:
43:2d:eb:98:eb:83:e0:a9:b9:b7:21:c8:3e:ab:d4:
5c:de:ed:3c:32:af:84:74:b1:84:9e:23:17:05:5b:
a0:b1:2a:49:32:a0:37:8e:ae:1c:be:69:9e:3e:17:
80:d2:0e:6e:b5:55:e6:7f:ab:29:e7:c1:7a:51:d0:
dc:85:1e:54:18:7a:42:44:c7:09:62:d4:02:c4:5c:
d8:a7:7e:53:f9:3e:cf:71:76:12:09:76:a0:c5:8b:
59:88:d4:aa:3b:25:16:2a:f1:5f:68:24:9a:25:ba:
b6:c0:3d:67:88:f1:87:89:73:a8:f1:a8:04:76:ba:
f3:90:5b:34:85:cc:a7:4d:fe:a0:33:03:82:12:7e:
6f:25:41:37:56:e1:5e:f7:7c:63:62:44:8d:f5:fc:
15:02:09:5f:d5:92:58:1f:a0:bc:93:5c:dc:22:7d:
d0:68:27:6c:c4:99:2a:e8:54:30:9a:75:9b:58:d7:
d4:96:7a:5e:5c:11:25:6f:f5:1c:e7:4a:cc:72:7f:
06:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:29:0D:A4:76:CC:B7:9D:F5:90:AE:60:B2:69:3A:73:1E:24:57:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/12EE7BDEC0D911EFB5F65A6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:b2:38:1b:b7:74:22:69:3a:b5:09:74:64:8a:bb:f8:20:98:
97:24:23:d2:7c:59:8b:66:33:99:e9:7f:04:54:52:b3:35:1d:
bd:73:a5:65:4d:82:c1:fd:fb:e9:e4:ab:a5:e7:1e:15:ad:88:
af:e9:1d:a5:a4:0e:07:d2:50:02:e3:d1:d8:43:29:42:a3:8a:
b0:17:1e:04:4f:d9:a0:84:6c:08:a8:33:0c:95:f7:58:fa:00:
50:c8:a9:1b:ae:e7:31:05:59:93:ac:12:67:9f:2f:d8:7f:b6:
07:56:9b:f2:fa:38:37:9b:e0:f7:b4:46:77:28:28:5a:4e:6e:
57:ae:d9:23:c1:22:fa:4b:b0:ed:6f:51:1e:bb:13:1e:75:32:
8b:6f:bb:16:65:bc:81:f7:ca:4c:84:4b:11:df:98:16:df:54:
a2:ea:7c:34:a3:97:ca:17:96:50:18:5b:69:29:50:17:44:25:
ff:fe:62:11:5b:0f:1b:d4:89:16:77:50:35:06:95:ba:f5:4b:
18:e5:1a:7d:aa:61:bc:3b:71:6b:b6:6a:1b:e1:39:9f:32:b5:
50:3d:52:9d:ae:e3:7c:84:42:d0:e2:14:75:e2:31:a6:dc:30:
11:1c:68:7b:14:f6:9b:95:0c:e0:f0:b3:96:7a:93:54:5c:75:
57:54:e2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:54 2025 by rpki-client