Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F08CBEECDE411EF8D9F065E762E951A.roa
File: 3F08CBEECDE411EF8D9F065E762E951A.roa (raw, json)
Hash identifier: c5LaFHzdExLYjZITePpychVSvYRUVh+w2OAIcOtBez8=
Subject key identifier: 23:F3:A0:E0:BC:F1:02:56:5E:5A:5A:54:64:2A:71:5B:8B:D8:7D:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F08CBEECDE411EF8D9F065E762E951A.roa
Signing time: Wed 08 Jan 2025 17:16:07 +0000
ROA not before: Wed 08 Jan 2025 17:15:58 +0000
ROA not after: Sat 03 Jan 2026 17:15:58 +0000
asID: 984
IP address blocks: 154.89.186.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79831 (0x137d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:15:58 2025 GMT
Not After : Jan 3 17:15:58 2026 GMT
Subject: CN=677eb2d7-fd37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a9:35:5e:72:44:3e:2f:9d:7e:d7:98:79:cd:
3b:b8:c7:d1:29:f6:e2:05:68:53:bb:99:0c:a8:81:
3b:68:4a:3c:90:c1:a4:b3:53:44:ea:fc:8b:11:14:
39:f6:ef:73:5d:75:36:32:6c:c2:e6:56:91:cf:b2:
9a:48:6a:65:5a:08:bd:37:41:3c:31:8c:6f:cf:14:
30:13:f6:0f:08:dd:11:01:01:26:af:f3:49:fe:8b:
1d:f5:e6:65:5a:0c:f7:90:52:88:a3:8d:9e:85:2e:
85:3d:b0:a7:6b:65:10:3e:a9:24:25:38:0c:ff:8f:
eb:6c:f4:4b:b1:f0:b4:c3:46:77:0b:27:0e:1f:2c:
bf:12:f4:34:ff:1e:dd:36:43:d2:0f:aa:2b:31:f5:
c1:a3:9d:1e:9d:a3:99:69:89:cd:79:f3:2d:75:d4:
ca:fb:8f:73:fd:bf:ff:e7:fd:90:f5:6b:b3:24:bf:
ce:85:25:35:fe:30:3f:f6:10:01:84:b1:86:23:b3:
16:6f:1c:e0:55:28:99:da:bc:93:41:a9:c7:f1:ed:
22:3d:8e:78:56:9a:88:00:76:d7:0c:71:a3:ca:1c:
7a:f3:18:94:33:6a:e9:6f:02:09:25:5a:58:8f:0f:
6e:91:d5:7e:ac:e2:a5:49:7f:13:ed:45:8f:c3:ca:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F3:A0:E0:BC:F1:02:56:5E:5A:5A:54:64:2A:71:5B:8B:D8:7D:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F08CBEECDE411EF8D9F065E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.186.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:88:02:a4:ea:e7:6f:2d:3e:fa:e5:87:4f:89:c9:13:bd:dd:
d0:c5:45:87:7b:79:ca:8f:15:45:88:e7:61:0e:ab:4f:18:a1:
3b:10:13:b5:23:6f:82:1a:8c:3c:50:cf:39:e8:54:e4:b6:f4:
5b:fc:97:0e:7c:38:97:e4:72:6d:8c:87:ba:d4:b4:98:1d:42:
99:12:1e:d0:87:6a:c4:cc:ef:a2:8f:8b:3f:36:aa:6a:81:e7:
06:de:2f:c5:4b:0b:9c:f6:1f:17:4e:18:bb:13:67:c2:8c:6e:
31:a6:d9:21:70:41:5d:d4:77:63:e5:f1:9f:56:81:53:6b:6a:
d9:67:4c:5a:24:12:6a:92:62:f3:a1:ce:be:d7:0f:24:4a:8b:
a8:c5:ba:05:20:3b:96:eb:8e:5c:21:54:9a:06:df:ca:bd:79:
15:df:a0:08:e8:6c:a0:cd:52:00:1c:71:21:cf:6d:b3:37:9d:
ed:5a:ba:c0:5a:46:55:b1:ab:89:18:77:42:76:29:4c:4d:f5:
ff:ba:69:7e:f4:2d:ef:b5:fe:4d:2f:03:c1:d3:e5:61:d1:5f:
28:7e:5d:1c:cc:53:fc:c5:a1:e2:90:ad:21:2c:35:16:cb:32:
b8:08:cb:b1:59:18:06:60:de:15:74:73:52:c4:19:7f:16:47:
f1:98:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:54:43 2025 by rpki-client