Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/240309CCCDDF11EFBCC601BC762E951A.roa
File: 240309CCCDDF11EFBCC601BC762E951A.roa (raw, json)
Hash identifier: tg4mpR/2pL8O+bTbe+1foCDAfrCNQ4Aka24B1RWv/To=
Subject key identifier: DD:FD:93:64:C8:AB:63:81:BE:C1:86:00:6A:A4:CD:6E:19:99:1D:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/240309CCCDDF11EFBCC601BC762E951A.roa
Signing time: Wed 08 Jan 2025 16:39:34 +0000
ROA not before: Wed 08 Jan 2025 16:39:30 +0000
ROA not after: Sat 03 Jan 2026 16:39:30 +0000
asID: 984
IP address blocks: 154.89.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79793 (0x137b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:39:30 2025 GMT
Not After : Jan 3 16:39:30 2026 GMT
Subject: CN=677eaa46-4b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:79:a6:6d:20:10:39:0d:81:88:fd:8a:15:83:
12:7c:b6:f0:a3:98:1f:dc:16:4c:03:8f:ab:fb:59:
19:4b:9e:de:65:a9:5f:dc:d7:52:58:a8:c5:cf:e2:
cf:a4:57:d0:82:ca:38:0b:14:4d:b8:1b:96:4c:8b:
5e:4e:fa:5d:87:5d:d3:4e:72:31:d8:7e:95:17:f7:
08:5d:6d:97:6f:4b:da:be:d0:73:52:6d:a7:d5:cf:
db:07:79:79:2e:15:10:91:d8:24:83:1c:13:6a:0d:
d6:a6:80:9c:67:0a:ca:a9:48:9c:d1:13:ee:a8:b9:
8b:78:48:49:dd:fd:19:8f:59:d8:cf:12:ef:da:84:
0f:0d:36:37:7c:5b:63:2c:d5:0c:d6:5c:de:5a:2a:
e1:83:8d:67:4d:e2:d4:77:1b:67:1e:c6:e2:7b:61:
16:77:7a:9d:93:d7:42:27:b8:50:68:ab:7d:b6:17:
06:68:aa:14:73:44:b4:af:b3:30:a1:00:82:ea:8c:
e7:40:92:f8:a7:25:f8:3e:f5:fb:6f:e1:ee:82:48:
c5:f8:f7:eb:57:60:22:1b:85:34:00:25:1e:5e:f1:
fb:7f:82:aa:c5:7a:cf:95:83:6d:ec:23:62:d1:22:
46:29:a3:dc:42:cf:10:cc:14:2a:10:06:da:87:e3:
42:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:93:64:C8:AB:63:81:BE:C1:86:00:6A:A4:CD:6E:19:99:1D:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/240309CCCDDF11EFBCC601BC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.167.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:f2:38:04:75:79:e0:46:b8:10:1a:63:70:29:89:ea:a4:30:
c9:e0:13:31:ad:77:6a:21:d7:20:6a:92:17:d5:40:22:25:5c:
9b:e2:54:df:8b:2e:6d:ef:e9:62:3a:4d:23:90:88:0f:ce:8c:
d7:5a:10:59:9c:93:e9:d3:dc:0b:5f:71:d4:14:34:d2:32:a4:
4f:1f:4a:70:1a:70:56:01:bb:2a:4c:e6:b8:e4:79:f2:00:41:
fe:3a:b5:58:29:8b:47:b8:97:a7:0c:a8:e3:24:35:19:5e:d1:
b4:6d:13:87:46:99:b5:1c:4d:0b:38:db:86:00:dd:c5:72:6d:
31:c4:91:26:3e:f2:58:73:bd:01:24:b0:ed:eb:61:2c:ff:44:
17:62:50:92:78:f1:67:04:d8:23:eb:a4:6f:53:95:22:50:c4:
de:e7:53:a1:63:25:73:e4:45:a2:ea:6d:95:9c:e1:f5:f4:16:
d6:5d:b6:09:b5:db:bd:d6:e1:ec:3e:1c:c9:c7:23:b5:91:fa:
a9:70:66:ca:30:b1:ab:a5:82:9e:67:b8:27:bb:4c:43:5a:59:
dd:f8:aa:9d:78:44:bd:3f:b7:1e:36:a1:73:47:2e:92:39:e9:
07:0b:6f:12:cd:7b:00:fd:71:a2:5d:10:42:ae:91:15:b9:28:
28:4e:b7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:50:48 2025 by rpki-client