Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F94862AC0D511EFB7A1344E762E951A.roa
File: 1F94862AC0D511EFB7A1344E762E951A.roa (raw, json)
Hash identifier: J+RgXUob5pqZ/L1Bh6LWG5X3WmWaDaHKYEBPFhXYJ60=
Subject key identifier: 7E:E6:9E:EC:E2:AA:17:4C:80:26:7F:2A:52:42:5A:40:6C:BE:58:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F94862AC0D511EFB7A1344E762E951A.roa
Signing time: Mon 23 Dec 2024 02:25:06 +0000
ROA not before: Mon 23 Dec 2024 02:25:03 +0000
ROA not after: Wed 10 Dec 2025 02:25:03 +0000
asID: 984
IP address blocks: 154.89.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73296 (0x11e50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:25:03 2024 GMT
Not After : Dec 10 02:25:03 2025 GMT
Subject: CN=6768ca02-e75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:c5:2e:c9:b0:23:04:61:b7:88:9c:0e:fe:
10:ca:3a:dd:84:06:0e:e7:06:72:45:93:4d:fa:79:
43:62:83:2b:0c:94:2f:ed:7b:c8:ad:dd:89:7f:64:
9f:7e:5a:ce:70:78:cc:55:07:14:54:05:9d:15:c1:
14:4f:8d:2d:d1:d7:f9:5f:e7:68:07:a7:04:13:b2:
98:ec:35:f9:9a:0a:13:fb:cd:45:01:4a:19:12:94:
20:5b:26:c1:27:90:4d:05:48:a3:7c:d0:b1:ac:36:
ef:9e:1c:9b:80:9d:70:04:06:5f:30:66:ea:5e:16:
0d:4c:67:ac:8d:bb:a3:e8:55:75:30:9b:86:45:66:
33:78:70:9e:f8:4a:12:76:fd:5e:d3:dd:97:6c:44:
d8:47:aa:67:a5:4f:f7:9e:8f:d4:3d:35:77:10:60:
14:f8:8e:eb:22:95:17:6d:af:81:db:93:11:ce:b8:
71:4d:41:f1:09:3c:dc:a0:41:b8:c3:03:22:93:e6:
55:31:8d:08:6a:6b:95:09:72:ac:e0:9b:31:6b:9e:
29:7d:0b:e3:2b:86:e8:ad:37:b1:c3:3d:b8:98:cf:
64:b5:b2:b9:cd:54:03:9a:b8:e9:c7:13:56:8f:9c:
4c:fe:27:cd:b4:01:a4:ca:67:e5:8a:53:b7:9f:42:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:9E:EC:E2:AA:17:4C:80:26:7F:2A:52:42:5A:40:6C:BE:58:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F94862AC0D511EFB7A1344E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:10:34:07:7b:c9:11:45:6b:8e:19:4e:6c:c5:c4:4d:7a:4b:
a6:70:89:bb:99:45:11:05:6f:1e:07:c0:5e:9b:54:8c:8b:ca:
51:c6:55:b3:9b:f2:ef:01:0d:fc:16:28:0f:a7:f6:40:cf:2f:
ee:b4:bf:6b:2e:84:f9:5d:7e:78:8e:99:00:98:fa:ec:64:ee:
fe:01:1f:48:99:37:a1:34:79:d4:3d:4f:62:6d:2e:c4:0a:72:
10:9d:ef:a8:44:d7:0b:fd:75:97:ce:79:8a:34:e3:24:37:7d:
b6:ac:e1:5f:c3:54:04:e6:58:ac:8b:af:15:72:7a:29:ce:6a:
d6:90:74:30:95:76:71:87:23:82:16:8b:8e:1e:89:1e:4d:d1:
8c:b0:37:37:d7:17:d6:bb:b7:cd:40:21:28:45:16:cc:18:b3:
f7:ff:6e:c5:a1:23:fa:91:1f:43:48:5a:37:f5:bb:a1:b8:aa:
72:7e:d9:da:ab:1c:0f:91:a6:85:b7:5a:61:3c:92:9b:91:ea:
67:9f:3a:8b:fa:7b:a2:d8:d4:ff:93:68:86:11:27:bc:00:2d:
15:27:d3:dc:ba:81:67:ad:49:e9:ea:d6:ef:48:d4:80:96:85:
de:72:3c:4c:92:f4:3b:36:80:20:50:17:32:01:1f:a9:92:4f:
10:7d:bc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:48:37 2025 by rpki-client