Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB0C404CDE611EF837BC368762E951A.roa
File: 1DB0C404CDE611EF837BC368762E951A.roa (raw, json)
Hash identifier: B05RgJHHlOPx+E293hRbyYIkpnSEw0NXxWKnbcllezw=
Subject key identifier: 86:AB:09:48:46:89:1D:0D:A5:81:98:04:EA:72:93:09:E6:D5:95:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB0C404CDE611EF837BC368762E951A.roa
Signing time: Wed 08 Jan 2025 17:29:30 +0000
ROA not before: Wed 08 Jan 2025 17:29:25 +0000
ROA not after: Sat 03 Jan 2026 17:29:25 +0000
asID: 984
IP address blocks: 154.89.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79843 (0x137e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:29:25 2025 GMT
Not After : Jan 3 17:29:25 2026 GMT
Subject: CN=677eb5fa-7d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:3a:7c:dd:a5:e1:cc:22:c9:7c:c6:6c:96:b8:
6a:0b:29:1a:51:d6:81:a1:9f:75:27:dd:ea:f0:8a:
93:cb:9e:79:cf:93:d9:2c:c4:dd:79:4d:cf:ff:ff:
c8:b2:e3:85:1d:8c:ab:10:a2:3a:b6:f1:43:33:29:
01:62:0c:4d:62:9a:51:2a:2e:0b:24:59:b6:54:64:
c5:4e:1e:c8:f8:44:06:bd:56:04:fe:6f:a8:a7:5a:
4f:9e:be:05:b8:93:e5:dc:d4:45:ba:4a:33:61:75:
73:41:31:f5:17:6c:11:9a:9f:88:5c:19:e3:d2:34:
39:50:c4:56:73:9d:ec:26:02:7e:4f:81:37:ff:07:
e9:ea:49:e0:d8:19:c3:ab:6c:01:b0:08:64:1d:f8:
52:1c:42:58:85:45:66:3b:b1:72:e3:62:cc:75:35:
79:cc:ad:b3:6d:a5:0a:99:5c:15:12:94:2f:4d:33:
06:49:4d:80:cb:a1:15:1a:4c:01:a0:03:04:ef:5d:
89:c1:d3:79:53:ec:37:37:e4:95:06:e2:98:c0:c4:
2c:38:12:fa:35:27:09:43:61:48:4d:9f:6f:10:fb:
e5:6e:d7:fa:10:03:92:15:2d:4f:dd:65:f6:18:a9:
70:ef:f7:28:e4:1f:40:aa:17:17:d2:31:a9:a9:0f:
2c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AB:09:48:46:89:1D:0D:A5:81:98:04:EA:72:93:09:E6:D5:95:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DB0C404CDE611EF837BC368762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.192.0/24
Signature Algorithm: sha256WithRSAEncryption
04:37:e0:11:14:92:74:d2:a0:06:89:04:fb:d9:d5:55:02:60:
20:00:61:50:fe:b6:3d:a3:52:49:3b:91:b8:b7:76:56:4e:0e:
60:c8:52:7e:22:94:b8:75:d7:ec:a1:4e:15:0a:91:d9:7f:20:
08:6f:eb:7f:67:76:8b:78:00:01:3a:aa:52:e9:d5:5a:52:96:
f5:0a:d6:b9:aa:02:18:dc:f9:9f:d6:3b:7b:61:d4:88:32:d4:
a9:51:b9:17:96:03:20:8d:a4:3a:86:d8:ba:4a:12:2f:82:6a:
3f:dc:aa:91:79:d4:59:6b:ba:d5:8a:80:1b:8e:01:ce:0c:fd:
38:d1:ca:b9:6a:4e:5d:a0:af:18:c3:6e:fe:dd:92:7d:99:01:
ba:54:f0:67:80:35:07:83:02:6c:9d:c3:c2:52:9b:8d:93:b9:
ac:42:e9:34:b7:f8:dd:12:dc:ad:a7:d1:c4:f1:1d:92:2d:4f:
f9:5f:33:7b:3d:b8:6a:41:b0:a3:63:27:7b:b1:44:67:3a:99:
60:a0:eb:f4:f2:8f:d2:96:8a:25:0f:11:6a:a4:d3:ec:61:00:
05:1f:e9:0a:ba:36:04:e4:0d:56:26:be:b5:79:02:0a:80:fb:
91:75:d8:c1:75:73:1f:ac:d1:0a:f9:2a:63:be:46:a2:3c:b3:
5e:63:ac:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:21 2025 by rpki-client