Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB64326CDE011EFAC883944762E951A.roa
File: 2CB64326CDE011EFAC883944762E951A.roa (raw, json)
Hash identifier: dRqoSyaCLRQaokWA4FnFclxOBzMUwG8HuFhBHZwmCtU=
Subject key identifier: 92:41:39:91:53:54:A5:EC:5D:B1:F1:BA:D8:1A:E5:F8:13:4D:51:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137B9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB64326CDE011EFAC883944762E951A.roa
Signing time: Wed 08 Jan 2025 16:46:58 +0000
ROA not before: Wed 08 Jan 2025 16:46:54 +0000
ROA not after: Sat 03 Jan 2026 16:46:54 +0000
asID: 984
IP address blocks: 154.89.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79801 (0x137b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:46:54 2025 GMT
Not After : Jan 3 16:46:54 2026 GMT
Subject: CN=677eac02-fe40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d6:33:69:41:c1:db:72:99:5a:32:d2:86:d8:
45:7e:1b:42:24:ee:51:13:06:1a:57:d0:6a:36:ee:
04:42:1d:29:6a:1f:b2:c2:12:90:b8:64:74:63:05:
63:82:61:d8:d4:5b:d4:c2:fd:30:27:3a:77:83:8f:
b4:bf:2d:3b:f0:12:26:ba:45:71:ee:da:b5:2e:e4:
cd:4b:28:2d:7e:fb:27:88:46:8c:a0:db:6c:8a:68:
e1:80:a9:66:8f:e5:87:b5:dd:4c:ab:43:f3:89:4f:
77:39:1d:cc:8c:c8:8f:55:32:17:cf:cb:3f:4d:0d:
fb:bd:08:2b:b0:2b:e9:ed:04:95:4f:9e:15:36:83:
9b:7c:85:2d:33:dd:51:d4:ae:ed:e0:e9:c6:4d:df:
a8:8e:b4:02:5e:de:07:0f:10:68:36:c6:6b:cb:22:
0e:ff:2e:03:7a:33:12:54:9e:5b:16:93:0d:fb:7c:
a1:cf:8b:3b:e1:61:2e:fc:fe:26:26:2f:72:44:af:
d8:80:a3:33:a0:47:23:62:b0:37:d2:1c:9c:40:be:
ab:d7:41:6a:49:c0:58:d3:ed:9c:7a:8c:42:36:28:
94:6b:85:1d:b3:35:fc:39:44:16:04:93:8b:10:54:
15:e1:5b:4f:c8:d0:aa:5f:17:3c:3f:97:f7:33:92:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:39:91:53:54:A5:EC:5D:B1:F1:BA:D8:1A:E5:F8:13:4D:51:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CB64326CDE011EFAC883944762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.171.0/24
Signature Algorithm: sha256WithRSAEncryption
65:de:8e:8b:1d:08:aa:5a:c0:e4:0a:42:c3:4c:26:35:49:c8:
4f:64:29:3e:48:5c:47:dc:e2:93:b3:33:90:55:15:0b:9b:78:
c4:58:16:6a:14:98:3c:d5:c0:67:60:d1:bb:a1:cc:9b:80:ea:
bd:f4:e5:7b:58:d3:b3:62:28:c0:56:40:63:2b:b8:ec:b3:ec:
2c:1f:2c:db:05:33:f8:96:3b:d4:ca:6d:3c:ea:c8:77:f6:80:
54:84:9f:1e:6a:ea:69:c6:71:40:c3:ec:67:5c:0c:1d:eb:34:
4d:a8:47:64:55:e5:b2:de:6d:84:b7:00:7a:fe:a0:87:3e:0b:
f9:b8:27:f9:88:16:55:11:eb:82:16:85:d5:de:8d:fa:b9:92:
6b:26:72:a9:d5:4c:aa:73:1a:97:5a:f5:c5:34:2a:90:3e:6a:
35:25:e2:10:15:d3:60:66:04:f2:82:89:14:08:43:11:a5:39:
bb:0c:c9:59:82:b3:42:ce:5a:be:45:01:2f:5d:cb:e5:f3:40:
ef:62:05:8a:9b:9e:d1:a8:39:91:a8:e0:ce:b9:87:cc:5e:52:
83:e2:19:67:0c:6c:98:53:a0:79:7f:e9:4b:e6:b9:a5:66:41:
b5:91:73:c6:a2:93:c1:65:c6:58:47:fd:54:4b:e6:a0:09:0a:
81:54:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:45:01 2025 by rpki-client