Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/391AC45AF41B11EF9CB75643762E951A.roa
File: 391AC45AF41B11EF9CB75643762E951A.roa (raw, json)
Hash identifier: JAHm2rWouDaDcUMDH5qaGtcRV+cBFNP5tw7xWdtd/vM=
Subject key identifier: 94:28:16:8B:57:37:75:0F:1B:08:44:89:F0:70:8C:29:C3:29:38:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016151
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/391AC45AF41B11EF9CB75643762E951A.roa
Signing time: Wed 26 Feb 2025 08:25:23 +0000
ROA not before: Wed 26 Feb 2025 08:25:19 +0000
ROA not after: Sun 20 Feb 2028 08:25:19 +0000
asID: 17561
IP address blocks: 154.89.27.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90449 (0x16151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:25:19 2025 GMT
Not After : Feb 20 08:25:19 2028 GMT
Subject: CN=67becff3-28ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:a0:41:32:26:93:d9:66:16:da:52:2a:1f:
20:f2:0b:3e:b1:f7:ef:77:78:a5:51:f0:01:36:01:
6a:49:64:2f:60:47:cf:4f:ac:59:e2:25:26:a8:72:
4e:7d:ee:d3:88:6f:95:5e:b6:bf:cd:e8:d4:ff:80:
7c:ea:11:3a:be:e6:76:dc:2a:be:85:f8:80:e9:3b:
59:6d:21:e4:1e:8d:0f:68:41:a6:d6:7f:1d:0b:49:
be:7d:a5:17:46:73:eb:2e:de:67:d5:e9:90:32:0e:
69:26:8f:4b:47:fa:57:90:2e:bc:d6:54:ea:f2:e4:
1a:c0:09:bb:1d:09:fa:6b:69:fd:09:8e:47:22:d0:
2a:68:e3:26:ff:d1:50:d4:39:fb:51:6e:c4:d1:4b:
66:e3:60:40:e0:0c:4f:3a:75:dc:00:2d:c4:2b:e8:
fc:3f:71:c4:55:9c:b2:62:0f:80:9d:35:77:56:a7:
e4:f1:07:b0:9b:07:5e:1a:e2:56:e2:4e:71:52:21:
72:72:41:5e:4d:da:6e:16:25:c0:c2:a8:8c:d9:d0:
0e:0c:a5:82:93:6a:87:97:d0:28:9c:e9:00:ea:d3:
b9:5f:25:2c:b8:13:f6:78:40:cf:bc:5a:b3:62:fe:
20:11:6a:69:44:18:3d:65:80:c7:15:72:bf:30:04:
47:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:28:16:8B:57:37:75:0F:1B:08:44:89:F0:70:8C:29:C3:29:38:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/391AC45AF41B11EF9CB75643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.27.0/24
Signature Algorithm: sha256WithRSAEncryption
40:9e:0a:04:00:e5:f4:a9:a3:a8:6a:aa:98:65:9d:d4:88:bf:
2c:e4:28:0c:05:62:cf:13:96:08:49:f4:37:9f:68:08:a4:6b:
45:dc:58:6a:5c:77:d2:bf:5e:e1:9f:8f:25:a1:ac:6f:00:03:
b7:5f:d9:12:88:46:ed:f3:d6:65:c2:68:9d:ab:c6:ab:64:e7:
24:85:13:68:83:8c:07:ce:6d:ba:1f:8c:3e:66:58:15:c6:38:
db:34:6f:a3:b1:08:1c:1f:e4:53:ed:11:41:81:6e:a8:0a:4d:
41:53:9e:be:d7:c8:ee:b4:de:09:25:ff:8b:38:78:19:da:85:
6a:7c:7f:33:f4:87:a8:a4:b7:23:bb:a6:fb:ca:9e:e5:95:30:
7e:87:47:2c:d2:72:f3:8f:07:72:b2:54:66:17:7b:1f:31:c9:
49:6c:7d:66:00:d3:f8:3a:20:02:bd:f5:6c:aa:d9:53:0f:73:
e2:8e:19:8c:a6:78:f7:b9:fc:db:44:3a:f6:a9:78:bf:1b:15:
3c:b2:d1:35:e2:78:4f:5a:28:84:39:87:bd:1d:34:62:6e:cb:
fe:9a:bd:8e:d0:ad:0e:91:e9:90:13:00:16:c4:c9:cd:4c:af:
cf:0a:4d:13:93:02:42:04:c4:bd:34:90:34:2f:b4:73:49:29:
f1:77:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:23 2025 by rpki-client