Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3435AFFECDE711EF9B62606F762E951A.roa
File: 3435AFFECDE711EF9B62606F762E951A.roa (raw, json)
Hash identifier: xQ6edlMJYn0qg9pYw0ddalKRM5+IM3SOgJuCXMm2sI0=
Subject key identifier: 27:D6:C9:0B:DE:2C:DC:2B:D0:9E:C1:71:0A:2D:4A:E6:C2:B8:99:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3435AFFECDE711EF9B62606F762E951A.roa
Signing time: Wed 08 Jan 2025 17:37:17 +0000
ROA not before: Wed 08 Jan 2025 17:37:13 +0000
ROA not after: Sat 03 Jan 2026 17:37:13 +0000
asID: 984
IP address blocks: 154.89.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79851 (0x137eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:37:13 2025 GMT
Not After : Jan 3 17:37:13 2026 GMT
Subject: CN=677eb7cd-933c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:33:2c:d4:53:97:f5:a4:f9:c9:83:62:25:
b5:1f:fe:0b:44:02:d3:39:b4:f5:91:b8:49:de:b6:
ad:93:bc:46:05:4f:ed:6e:0c:38:97:1e:3b:d9:9a:
a9:fb:a0:aa:37:66:7b:1b:2f:bf:d1:bc:86:92:18:
19:45:6a:c7:15:5f:c4:f9:37:a7:aa:61:83:2c:fc:
1c:20:43:b1:c8:73:7f:9f:ea:73:66:20:4a:a0:01:
7a:10:89:99:aa:4b:82:22:97:ea:ed:27:51:9d:e7:
56:c7:25:8f:be:f8:03:5d:25:21:d4:fe:c3:4c:d3:
3b:cb:9e:3b:b4:b6:01:78:b2:8e:53:33:b8:6c:f0:
8d:24:ff:ed:0c:23:27:f7:bb:c1:ee:81:97:4d:37:
d3:79:8a:8c:79:d5:cd:98:2e:89:97:6a:a0:2c:e8:
4e:4d:92:ae:78:f8:8a:97:31:95:f7:84:95:2b:75:
ea:35:07:51:a3:52:c5:2e:8f:9a:33:82:37:92:6d:
61:34:d1:9d:50:43:52:16:27:e7:50:e7:8a:69:ab:
92:03:14:84:c5:e3:f7:26:b9:80:dd:03:3c:65:1d:
eb:a4:e6:cd:43:e6:40:0d:8e:83:be:13:47:ed:a1:
3d:d0:67:ab:94:b3:0d:db:e1:4a:dc:e9:b3:db:bd:
ea:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D6:C9:0B:DE:2C:DC:2B:D0:9E:C1:71:0A:2D:4A:E6:C2:B8:99:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3435AFFECDE711EF9B62606F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.196.0/24
Signature Algorithm: sha256WithRSAEncryption
70:61:e7:64:59:96:76:c3:00:cb:53:e7:53:68:be:d8:82:81:
4e:d8:e1:c2:e2:78:a9:93:7e:0f:9b:2b:9a:b7:00:23:8b:8a:
18:49:47:39:02:26:bb:a7:91:24:d0:2b:c0:55:b6:69:bf:98:
0c:cb:8e:9f:a4:32:70:b5:1a:4b:15:17:b6:df:50:3d:a1:77:
e9:ce:db:a5:33:b1:98:10:59:20:25:96:0b:e1:e3:71:5a:5a:
01:20:08:64:76:f0:d5:78:c5:27:9e:d8:ba:b0:89:f0:61:32:
fd:a2:60:c6:ac:80:5f:dd:8c:ea:38:5b:ad:c2:92:21:14:37:
3a:3b:7c:d2:ad:25:69:b3:d2:fe:8c:3a:ef:c9:de:c7:4b:00:
c7:49:af:41:dc:73:04:d9:f2:8a:41:0e:1c:d7:9f:1f:3d:07:
5b:f0:14:f5:84:4e:06:7e:79:83:4a:f3:77:19:28:54:48:a1:
cb:4e:a9:5e:f6:78:46:99:4d:73:0f:a3:b2:43:11:41:7b:7a:
50:71:07:5c:ab:33:98:96:1d:4d:dc:8b:07:78:be:c4:df:bf:
ef:77:73:f4:4d:6c:ae:e7:24:f9:29:99:30:57:29:fe:30:cc:
a8:b0:dd:29:23:f3:8c:d2:56:e2:b0:01:db:d2:11:cb:7f:53:
17:08:d7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:17:02 2025 by rpki-client