Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2639C2D6C0DC11EFABE2AB7F762E951A.roa
File: 2639C2D6C0DC11EFABE2AB7F762E951A.roa (raw, json)
Hash identifier: xWv4cOF8DP/QPv1iwT1n+yoCGUB9ibLYf3e3yGdIDNw=
Subject key identifier: 4C:50:F6:A1:67:32:9A:62:EF:B7:0C:6E:D5:A9:8E:CA:A2:53:A8:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2639C2D6C0DC11EFABE2AB7F762E951A.roa
Signing time: Mon 23 Dec 2024 03:15:24 +0000
ROA not before: Mon 23 Dec 2024 03:15:20 +0000
ROA not after: Wed 10 Dec 2025 03:15:20 +0000
asID: 984
IP address blocks: 154.89.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73388 (0x11eac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:15:20 2024 GMT
Not After : Dec 10 03:15:20 2025 GMT
Subject: CN=6768d5cc-4eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:06:bf:ff:ca:66:da:d7:73:ed:d6:50:20:
d2:35:dd:cd:14:8f:9a:9a:78:85:ed:c0:39:02:ce:
d3:36:de:2b:b7:f3:bb:1d:23:cd:13:07:fb:f5:b4:
f7:21:c6:60:81:74:ac:ae:6e:aa:31:7f:b6:bc:60:
90:cb:1c:74:f5:ac:7e:a1:c1:a2:83:49:d7:cf:89:
00:8f:b0:a2:54:af:be:5d:40:f5:f5:24:41:66:d8:
1b:c9:7d:bd:f3:14:c3:f9:4b:7e:bb:be:c0:d8:51:
e9:f8:f3:9a:51:13:db:65:21:08:2f:06:8c:8f:66:
6d:f4:fe:5b:9f:39:37:50:47:4f:12:85:02:da:61:
81:ed:20:55:66:95:39:8d:d5:b4:af:0a:fc:b2:e8:
dc:0c:64:28:56:d4:a2:26:f6:e2:a7:81:56:03:d6:
ce:b6:3b:95:fc:9a:9e:64:9d:54:3f:9d:d3:64:4a:
cf:38:6f:68:32:c1:fe:65:a7:2e:c2:90:58:a1:86:
dd:90:40:72:7a:78:97:b5:56:5e:56:79:46:61:37:
9a:89:5b:a7:5d:90:7b:5b:e4:2e:d2:93:d6:80:46:
51:a0:f2:cd:9a:21:24:0f:f6:1d:5a:d6:c1:2f:1a:
7f:f7:f1:09:d3:f7:94:c0:dc:a7:4c:fa:ea:c8:fd:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:50:F6:A1:67:32:9A:62:EF:B7:0C:6E:D5:A9:8E:CA:A2:53:A8:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2639C2D6C0DC11EFABE2AB7F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:85:86:11:43:20:ec:f3:e9:f3:76:55:38:d6:89:33:50:d6:
ba:44:88:ff:c6:de:87:50:f2:9d:36:3a:05:f9:d9:8e:c5:fe:
5a:fa:ad:b4:7a:38:24:94:40:c3:5c:ff:74:37:8b:c3:d6:99:
e3:00:d4:1e:48:ea:c8:f0:a5:29:66:53:e5:38:0e:8b:4b:f0:
28:21:a4:f3:4b:32:99:af:5c:9f:2a:49:4d:13:a3:ad:ba:1d:
8c:b3:9f:bd:c0:f5:6b:0d:f6:d5:82:0f:a3:00:f2:6b:2f:7d:
06:25:03:5b:eb:97:3c:52:25:72:35:79:e7:bc:d8:be:e1:db:
a4:13:72:eb:0d:7d:cb:b1:d0:de:e2:65:c6:12:1d:c4:66:54:
4e:ac:16:5e:7c:17:9d:7f:63:e0:e7:f4:e2:84:62:1f:b4:86:
33:13:dc:73:eb:bc:7f:a4:59:90:77:c4:28:f7:7d:66:d6:02:
86:b2:ee:a0:41:ef:42:aa:7c:ee:31:e6:4a:34:c1:40:3a:73:
fa:8b:4e:d1:62:ce:65:1a:42:35:86:95:6b:9a:30:7e:96:b1:
3c:db:a9:d8:c2:7b:12:6f:0e:d9:fc:79:bc:a3:2a:7a:1f:6c:
c2:d5:e0:ef:b1:c3:e0:5b:8a:f4:c9:65:cc:c8:21:cb:f0:09:
97:de:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 01:50:25 2025 by rpki-client