Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A105FD6C0E311EF85A930AE762E951A.roa
File: 1A105FD6C0E311EF85A930AE762E951A.roa (raw, json)
Hash identifier: HQdsNk1K1XbCXEwmh4ise3WHzS9TDg4yGewZLChqJVY=
Subject key identifier: 95:08:15:33:7A:0B:8D:3F:84:F1:DD:71:64:9C:DF:ED:DE:DE:92:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A105FD6C0E311EF85A930AE762E951A.roa
Signing time: Mon 23 Dec 2024 04:05:10 +0000
ROA not before: Mon 23 Dec 2024 04:05:06 +0000
ROA not after: Wed 10 Dec 2025 04:05:06 +0000
asID: 984
IP address blocks: 154.89.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73478 (0x11f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 04:05:06 2024 GMT
Not After : Dec 10 04:05:06 2025 GMT
Subject: CN=6768e176-acee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:fa:15:69:a9:12:8c:9b:2a:03:23:71:10:
aa:64:8a:4d:b6:f3:92:05:33:4c:de:33:b6:d1:09:
aa:98:2b:89:aa:97:ea:2d:49:b4:dd:34:19:f9:1f:
76:90:75:89:df:53:3c:7b:a0:21:48:92:00:9d:89:
5c:0f:cc:0e:d1:b6:2d:5b:14:73:63:c1:10:d1:ec:
63:1b:c0:22:e3:e2:0f:2e:55:2e:43:fb:b7:5a:47:
d9:e0:f9:e3:95:7e:51:85:fe:9a:35:45:94:b5:c7:
d9:e4:91:a5:b4:ca:79:cb:8d:db:a7:a1:73:55:9c:
4a:5a:57:e4:ef:05:dc:93:7b:4c:b0:83:fb:27:28:
c2:10:ba:c1:6c:5f:1e:5b:0a:2f:a0:d5:11:80:36:
34:56:cd:c1:07:84:fb:6a:9f:31:bf:1a:38:01:dc:
d1:bf:83:e7:2e:ca:fd:4d:8e:b4:97:58:67:13:c9:
d2:8b:00:1b:c2:80:d8:e9:c3:33:25:0d:33:98:77:
57:c7:f2:fb:22:7e:2b:3d:54:30:7a:c2:59:19:c9:
ac:d0:29:7a:e1:07:1b:7f:1b:50:39:61:52:5a:2a:
fc:81:e3:4f:64:c7:6d:27:b0:16:1d:25:be:8f:d1:
14:df:70:47:ec:33:c9:f4:27:96:83:11:77:64:f2:
63:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:08:15:33:7A:0B:8D:3F:84:F1:DD:71:64:9C:DF:ED:DE:DE:92:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A105FD6C0E311EF85A930AE762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.242.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ea:52:cf:f7:78:6a:bd:c1:fb:03:9f:c5:74:6f:21:db:a5:
b0:25:31:eb:1d:bc:7a:60:fb:b1:9c:78:ce:c1:18:f2:20:4a:
3f:de:29:eb:c3:e9:c9:80:6e:18:03:84:fc:e9:ef:0d:60:c4:
69:af:f0:7f:7a:24:e1:26:3f:18:a6:fe:b6:ab:15:1e:a6:a5:
4a:f0:f7:48:11:05:40:ab:8e:78:a2:ac:fb:f3:8f:53:8d:2e:
84:b6:8f:64:97:78:e8:95:09:e7:94:4d:be:e4:18:ce:bc:fa:
0b:0c:35:8e:79:28:24:6d:49:c3:c9:2a:79:d6:cf:2a:58:df:
47:d3:a5:79:c6:c4:4e:ee:5b:49:9a:fd:21:b9:97:5b:7d:fd:
dd:74:b1:5d:3f:0e:a8:85:44:b5:c7:c7:5a:cb:d6:07:09:9d:
23:b6:4f:3f:0d:1d:6b:0a:d6:81:88:a7:59:f7:f6:00:8e:c3:
9d:04:e7:bc:37:2b:3e:6a:24:02:f5:ee:27:2f:fd:7c:18:7e:
0c:f1:10:5a:f2:1e:74:4f:53:8c:4a:20:e7:9b:96:3d:3f:c4:
8c:45:2e:b2:b5:fd:62:c2:33:b7:54:42:61:5a:11:56:39:77:
60:03:09:14:82:2c:13:09:5d:b9:f8:e2:35:81:ec:be:b9:4b:
f6:72:7e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:02:22 2025 by rpki-client