Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384F1960C0D911EF9B15A26A762E951A.roa
File: 384F1960C0D911EF9B15A26A762E951A.roa (raw, json)
Hash identifier: xSVExUQnbhY8AzOOUCyDIFwgze6UekHwYX/u7b9RFMI=
Subject key identifier: 4E:CF:C4:43:E1:D5:9F:E2:4D:81:3B:D2:EC:FE:59:6F:AF:0B:77:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384F1960C0D911EF9B15A26A762E951A.roa
Signing time: Mon 23 Dec 2024 02:54:26 +0000
ROA not before: Mon 23 Dec 2024 02:54:22 +0000
ROA not after: Wed 10 Dec 2025 02:54:22 +0000
asID: 984
IP address blocks: 154.89.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73350 (0x11e86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:54:22 2024 GMT
Not After : Dec 10 02:54:22 2025 GMT
Subject: CN=6768d0e2-4505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:c9:61:df:02:44:0f:55:69:6d:61:5c:74:
97:9a:fe:e3:38:b8:a6:cd:7b:a5:80:73:18:c6:0d:
a5:c4:89:3f:fc:57:ab:65:12:a9:f7:6e:31:39:76:
a6:4d:c8:77:d8:b5:3e:07:74:66:c5:17:5e:ca:38:
0e:59:56:20:ef:71:a2:50:3a:bd:51:60:47:07:e6:
b0:a2:69:21:89:ee:56:a6:5e:f0:30:c5:ac:c9:d8:
c6:3d:64:b7:85:76:51:da:f9:38:c0:54:b3:b2:0b:
4f:62:37:a4:26:90:fe:56:9e:dd:31:54:18:33:64:
9b:21:28:d7:78:84:e1:9d:96:03:7c:36:20:2f:14:
44:d3:a1:5e:e0:f2:4c:1f:36:4e:cd:a6:7c:0f:67:
cf:49:19:bd:a3:cf:b8:3f:ff:d9:d5:59:37:5f:cb:
33:a3:04:25:54:62:28:8c:02:89:9b:cb:29:1b:3b:
dd:59:27:ed:21:8a:7f:6d:a0:7c:44:ff:8b:ec:f7:
86:3d:e4:48:4d:89:b4:9b:53:66:6f:44:89:7a:e5:
02:93:48:03:c3:d3:77:9b:a6:90:1b:57:d2:69:62:
b8:24:9b:28:b5:38:ca:72:7e:5e:d2:c4:a2:1b:43:
c6:87:9a:8e:41:98:b5:63:b2:11:10:c2:71:2c:05:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:C4:43:E1:D5:9F:E2:4D:81:3B:D2:EC:FE:59:6F:AF:0B:77:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/384F1960C0D911EF9B15A26A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.161.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cf:3e:96:d4:06:1d:b6:d8:4d:cf:87:4f:76:26:ea:36:f4:
d6:a1:0e:cd:9f:33:a9:5b:8e:7c:67:67:5e:ec:4f:82:5a:88:
54:82:83:20:02:f3:83:f0:68:6f:7d:b3:d4:9e:01:3a:e5:9c:
ce:7d:d1:f1:5c:d7:14:e0:bb:30:e9:d8:44:07:e7:cc:55:40:
35:55:9c:83:35:85:ea:96:c8:aa:68:03:77:6d:3c:26:d4:70:
85:55:02:dc:f4:4e:64:46:c8:d5:4b:c3:0d:63:f2:c5:2f:96:
3d:44:9c:6f:fa:d4:5f:f5:e5:01:e3:89:c7:90:b9:cc:eb:04:
81:3c:45:bb:15:38:17:af:97:20:2b:ca:7b:58:56:2c:3b:fe:
5e:4c:48:34:52:43:72:16:02:02:1f:83:86:27:48:78:49:43:
3b:6d:d0:3b:f4:f1:f1:85:ec:fb:f7:a8:68:a3:78:2e:79:9c:
c6:e4:30:b0:5a:d6:c7:90:e8:f7:29:b1:b7:d2:f2:c7:d0:1e:
52:ba:f8:15:32:45:7c:11:00:90:bf:4d:29:f2:03:5c:10:e6:
23:92:fa:d3:c7:b7:e6:62:5b:f2:f2:7f:8e:ab:ea:d6:9b:3c:
e1:93:b0:2a:3f:f6:6e:d3:88:fb:16:7c:da:14:48:a9:97:28:
c1:35:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:08:54 2025 by rpki-client