Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F696638CDC711EF880C91A6762E951A.roa
File: 3F696638CDC711EF880C91A6762E951A.roa (raw, json)
Hash identifier: 65JredWdSXFTtULytygSQ4vlPFI1s1YApX/40E0qMoM=
Subject key identifier: 33:B6:55:53:8C:12:15:67:5A:B4:BB:71:C7:F1:43:4D:E1:68:5C:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013746
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F696638CDC711EF880C91A6762E951A.roa
Signing time: Wed 08 Jan 2025 13:48:32 +0000
ROA not before: Wed 08 Jan 2025 13:48:28 +0000
ROA not after: Tue 23 Dec 2025 13:48:28 +0000
asID: 984
IP address blocks: 154.89.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79686 (0x13746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:48:28 2025 GMT
Not After : Dec 23 13:48:28 2025 GMT
Subject: CN=677e8230-1510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b8:fe:d4:bb:32:41:74:fd:8a:ae:8c:7c:37:
c4:12:d3:66:53:ee:d5:fa:f4:dc:6a:cb:69:9c:46:
81:15:77:90:57:b2:d9:ee:9c:37:f0:6e:b8:e1:a0:
9b:07:a5:68:98:b3:af:7a:e2:ee:90:1b:f4:7c:7a:
f7:5d:86:b7:56:a3:e0:2a:13:c2:bd:c0:b6:eb:20:
4a:3b:66:a2:85:ca:05:5e:17:1d:64:f0:f3:2a:97:
18:0d:c9:14:f1:fc:7e:30:11:a5:59:1a:ba:f0:3b:
a7:fe:77:b3:6d:d8:48:6e:88:f3:e0:dc:5a:31:71:
7f:fc:65:aa:59:a3:ca:ad:2f:b7:e9:3e:5d:7f:42:
5b:b4:64:4f:13:8f:ee:eb:31:de:f0:45:05:41:44:
e4:7b:63:9a:d2:f7:a1:ac:04:31:1a:2b:dc:17:e7:
01:bf:1f:3f:f5:a1:7d:0e:4c:b0:d0:0a:68:56:ea:
12:92:d9:66:50:40:5c:c8:40:7b:74:9b:8a:99:d5:
23:ed:60:ca:04:2d:9f:a7:ff:4c:c0:d8:38:9e:33:
ab:29:94:8d:1b:98:f1:93:6e:d6:13:0e:b1:3a:d8:
ae:88:38:f5:26:8d:38:4f:6a:ed:da:74:ae:d4:d6:
5a:da:27:6a:b7:ca:80:1d:6b:f8:ee:ea:89:ae:9c:
1c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:55:53:8C:12:15:67:5A:B4:BB:71:C7:F1:43:4D:E1:68:5C:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F696638CDC711EF880C91A6762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
32:64:78:9e:56:c8:35:f3:05:8a:72:96:0c:88:ae:d2:ef:7a:
65:cb:bb:c5:5c:90:9d:aa:d0:4b:09:78:8e:8e:f2:09:e9:9a:
79:a3:05:80:e7:6a:7c:22:b7:dd:77:b5:5c:0d:db:ab:f9:65:
15:d3:0d:31:0f:df:7e:07:3f:99:4e:4c:02:f7:12:71:a0:21:
6a:c9:f9:b3:0b:47:9f:05:02:c5:ee:a3:e7:40:53:ef:c6:d9:
f5:83:03:a2:7e:5f:b2:82:81:03:f9:3f:70:74:d3:b8:b5:f6:
3b:80:e2:2d:e8:bb:5c:a8:9e:92:86:9d:16:f9:ec:3e:61:9c:
a0:a3:64:47:f8:aa:ce:fa:ef:6a:5c:fd:90:22:f9:c5:d3:b1:
a9:e5:27:2d:83:a9:fb:3b:b0:d2:c0:35:fc:11:60:28:09:50:
88:41:ee:87:95:34:2f:a1:e9:03:c4:a4:af:d4:37:30:21:c7:
6e:ff:04:a8:1b:97:a4:d0:18:94:9d:00:34:b7:df:d2:9b:08:
23:2c:b8:7c:ce:c8:92:3a:f0:77:23:16:de:85:6c:ce:9e:a7:
f2:d4:98:28:f4:dc:3f:a8:83:6e:0c:b2:41:1f:59:c6:c4:89:
d6:2f:10:75:21:66:c3:12:37:97:b5:89:cb:9d:cf:b1:8c:54:
9a:b9:91:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:39:22 2025 by rpki-client