Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC762D4CDED11EFB6059096762E951A.roa
File: 2CC762D4CDED11EFB6059096762E951A.roa (raw, json)
Hash identifier: vsd8NuabKEqLvWlNt3CSLSW8oHGoqhIjHu4wyDR33dw=
Subject key identifier: 2E:3E:57:B6:8C:2C:99:AB:3C:F0:FC:94:C5:48:5D:13:EC:D7:A9:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013819
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC762D4CDED11EFB6059096762E951A.roa
Signing time: Wed 08 Jan 2025 18:20:01 +0000
ROA not before: Wed 08 Jan 2025 18:19:58 +0000
ROA not after: Sat 03 Jan 2026 18:19:58 +0000
asID: 984
IP address blocks: 154.89.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79897 (0x13819)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:19:58 2025 GMT
Not After : Jan 3 18:19:58 2026 GMT
Subject: CN=677ec1d1-fce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7f:17:59:4a:73:3e:6e:a6:31:da:a3:7c:08:
13:c5:2e:d9:e4:30:9b:d9:22:8a:8e:75:95:69:db:
4f:cb:35:5b:7a:ea:20:e7:aa:77:b1:6a:f7:d4:41:
bb:be:f3:25:0a:ee:bc:7d:c3:c9:58:7c:c9:97:c6:
4b:0c:fc:24:4d:4f:d4:e0:10:cd:2a:7f:26:6c:9c:
c2:c8:c1:5d:bf:f0:14:df:32:e0:3d:bb:52:80:a8:
cf:dd:13:b1:91:41:3f:4d:6d:04:83:e7:c0:aa:ee:
60:8c:66:06:47:cf:e5:3a:3f:2d:54:38:be:28:b5:
be:4a:01:f5:56:54:a5:4d:eb:c5:be:5b:a7:e4:de:
ff:ef:f2:e0:9e:32:1f:92:ed:c0:c9:e6:2b:be:88:
69:0a:a6:b5:f0:16:d9:41:c7:04:27:16:ba:8b:d7:
c7:e2:6b:11:90:41:87:e9:78:a4:15:89:0b:51:a5:
75:16:81:7e:a8:f1:6b:01:4c:61:2d:cf:1c:71:24:
7b:4e:89:14:59:fd:74:95:f0:13:fd:d7:dd:ed:3c:
b4:e4:87:19:01:56:90:53:d6:db:6c:2a:d1:70:a0:
4b:db:9b:43:ed:56:6b:fd:6a:41:35:b8:dd:e2:14:
4e:7e:02:30:fb:f6:df:ea:34:44:7e:6a:14:ce:37:
3a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:57:B6:8C:2C:99:AB:3C:F0:FC:94:C5:48:5D:13:EC:D7:A9:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CC762D4CDED11EFB6059096762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.219.0/24
Signature Algorithm: sha256WithRSAEncryption
07:e0:bc:17:7a:43:bc:e9:47:29:10:3d:a8:24:ef:a8:c0:44:
0b:dd:3d:b0:30:64:ee:ce:e2:d3:8c:c2:3a:64:ff:b9:a4:b6:
41:1e:19:35:27:16:ae:0d:01:8f:e9:1e:7a:af:60:d4:1a:82:
20:5a:72:58:b8:ba:87:34:b2:39:b1:26:0e:ad:7e:a8:9a:34:
5e:d0:06:32:0b:1e:04:a7:38:6a:ea:dc:ef:26:72:74:0b:b3:
41:b2:94:37:5d:0b:c9:8d:dd:c9:0e:80:a4:f8:40:92:d6:25:
84:6e:0b:74:e8:d9:c8:80:6b:46:1a:f5:42:74:b6:13:16:29:
0a:08:a0:3e:01:f9:7d:5a:aa:e0:48:2f:01:4c:31:40:77:12:
2e:ed:f4:6e:bf:7f:90:73:3e:39:64:2c:02:ac:27:41:9e:3c:
08:d5:66:a4:18:85:0e:6a:11:3f:4d:cb:64:17:91:03:08:43:
90:b0:29:e4:74:3b:05:bf:82:53:19:c4:bb:d2:0e:34:0b:8d:
96:ed:c0:08:71:90:79:5b:91:9e:58:8a:c1:59:24:c9:67:7a:
ba:95:ce:c1:ef:ba:23:c0:f8:1b:97:86:bc:e4:69:da:10:04:
86:60:f6:f6:7f:e1:bf:e9:01:de:23:37:0d:05:cc:80:29:c2:
63:a7:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:31 2025 by rpki-client