Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/293A9CFCC0D811EF8B5E2A63762E951A.roa
File: 293A9CFCC0D811EF8B5E2A63762E951A.roa (raw, json)
Hash identifier: 6O7yx7mFrlWBmYniiOlq5oEMsWKFODzjVLi05hKUu1M=
Subject key identifier: DB:56:C9:20:B2:48:E1:00:B8:78:D3:CD:29:C2:6D:E4:86:ED:18:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/293A9CFCC0D811EF8B5E2A63762E951A.roa
Signing time: Mon 23 Dec 2024 02:46:51 +0000
ROA not before: Mon 23 Dec 2024 02:46:47 +0000
ROA not after: Wed 10 Dec 2025 02:46:47 +0000
asID: 984
IP address blocks: 154.89.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73336 (0x11e78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:46:47 2024 GMT
Not After : Dec 10 02:46:47 2025 GMT
Subject: CN=6768cf1b-84f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a1:9a:fd:84:35:57:51:a1:67:9c:40:3c:5d:
b0:fc:37:85:dd:a9:0e:04:7e:41:73:89:30:0a:3e:
1b:ed:49:4d:37:c2:f2:39:35:8e:42:96:f4:34:44:
03:67:4a:6f:bc:fb:4e:b4:b0:bb:55:b4:1f:2e:f3:
0d:aa:f1:44:e6:c7:2e:76:51:a7:21:26:31:21:fb:
81:89:74:0d:b4:18:51:dd:8f:5e:66:be:cd:47:c0:
fe:5a:2d:41:f9:b4:e3:f0:c9:b6:f2:93:2e:6e:67:
bf:7a:b8:db:f6:17:e3:6b:3c:e6:1e:39:2d:0e:42:
92:d8:ff:d5:06:3e:f9:3a:e5:35:03:e1:c0:13:f8:
a7:74:44:ca:fd:1b:57:18:ed:a6:7f:fc:9f:0b:fa:
cd:e0:50:7f:9a:a9:e3:d1:b6:08:e9:31:9a:42:dc:
7c:30:92:1d:4f:1e:de:0d:1e:08:ac:4a:7e:b0:ca:
67:e8:60:a9:15:48:58:a0:f2:1c:e0:cf:19:bb:12:
bd:e4:3f:e7:c2:b5:f2:c8:ba:1e:28:fe:7a:66:44:
ad:83:1a:e3:76:c0:ba:cc:38:13:68:0a:10:71:f8:
8b:62:27:4c:b9:4d:b9:a0:00:dc:e2:02:7e:9f:5e:
c0:54:82:b8:57:4c:d6:59:a5:65:f7:87:49:1f:d0:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:56:C9:20:B2:48:E1:00:B8:78:D3:CD:29:C2:6D:E4:86:ED:18:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/293A9CFCC0D811EF8B5E2A63762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.154.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ae:f6:8b:66:fc:3e:d7:58:8a:2e:e1:fe:b9:10:d7:04:dd:
cd:29:f4:95:bc:b4:96:d7:82:03:71:68:08:98:4e:41:3b:1d:
aa:ce:da:bc:fb:42:43:a4:dc:97:c9:6d:68:4a:0e:c5:29:39:
e3:5c:1c:a1:96:f0:c4:3f:ff:2b:6d:e5:25:e0:62:40:6a:38:
00:fb:f9:00:68:06:ff:87:5a:36:09:5c:1f:28:b7:d9:b2:e1:
25:48:35:ac:39:ac:ca:bc:12:73:b3:0e:0e:9e:62:36:11:73:
31:33:1e:49:3d:fe:7d:55:4b:ac:1e:6e:39:ef:a9:1e:4a:c5:
57:51:19:b4:19:1b:52:4a:cd:69:a6:f5:77:ff:1f:fa:23:21:
4e:af:fb:6d:84:28:f8:7a:f0:30:eb:54:a0:1b:92:bd:e0:42:
79:c9:15:d3:ee:06:8e:e6:9c:40:b5:b0:04:da:ff:66:9d:d5:
e6:4f:e2:99:2a:12:20:e6:80:a2:e0:58:17:c6:95:ee:5d:08:
45:e7:e8:e7:68:de:90:a4:51:83:f4:b9:8c:23:50:8a:a1:7a:
64:7c:f0:4c:8f:35:af:98:39:83:d2:3b:af:62:64:83:7f:77:
41:ee:ef:64:ce:aa:33:42:5b:09:cc:a4:80:30:6b:82:1d:79:
1b:1b:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:19 2025 by rpki-client