Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46937682C0D511EF8D3F924E762E951A.roa
File: 46937682C0D511EF8D3F924E762E951A.roa (raw, json)
Hash identifier: 2GT8ByZu0XROBVLEWbZWlfk6njsuqJzNK6QpempcLj4=
Subject key identifier: 96:B4:6F:A8:58:58:88:B6:F3:C7:C4:6E:38:F7:B7:15:C9:CD:4C:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46937682C0D511EF8D3F924E762E951A.roa
Signing time: Mon 23 Dec 2024 02:26:12 +0000
ROA not before: Mon 23 Dec 2024 02:26:08 +0000
ROA not after: Wed 10 Dec 2025 02:26:08 +0000
asID: 984
IP address blocks: 154.89.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73298 (0x11e52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:26:08 2024 GMT
Not After : Dec 10 02:26:08 2025 GMT
Subject: CN=6768ca44-a061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:30:f3:a0:83:41:ae:03:60:a9:be:b7:7d:
07:7a:b4:cc:99:84:7a:8b:ac:0c:ca:f0:c5:ce:7a:
1e:5e:60:e3:24:c5:d3:bf:18:b4:c3:b0:3a:67:bf:
3b:90:fb:04:91:99:c5:45:c7:c9:ad:26:a5:ca:a5:
b5:68:96:9b:a7:bf:43:06:02:da:5b:96:b0:fb:74:
42:bb:05:d0:aa:8a:3d:c4:ce:99:1a:5a:a6:4a:b2:
f5:de:e8:8f:ff:21:a3:5c:86:53:e0:c4:70:6e:cb:
0a:e2:c0:8b:f5:44:e0:b1:7f:94:5f:2c:70:6b:18:
56:e5:82:61:a3:c4:60:12:8e:9a:89:53:df:f4:25:
e7:df:9c:d3:02:9c:b1:d6:4b:7b:27:06:1f:30:e0:
e8:1b:58:d7:e6:ee:2f:e3:bc:9f:c9:85:c9:0f:bf:
8d:ae:b2:b1:3f:be:f5:91:d5:40:55:a4:5e:7d:63:
1c:1e:6d:08:d0:bc:db:a0:74:b4:51:6d:24:11:34:
ba:c9:e2:20:0e:cd:1f:8f:36:a4:fe:ff:5f:5d:08:
d3:02:31:73:5b:12:98:d8:1a:b5:f7:ae:2a:1a:80:
3e:a7:df:fb:4d:12:61:53:89:e6:1a:a9:e0:cf:e3:
d4:b8:25:71:85:22:b0:07:11:19:2f:f6:c4:43:54:
42:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B4:6F:A8:58:58:88:B6:F3:C7:C4:6E:38:F7:B7:15:C9:CD:4C:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/46937682C0D511EF8D3F924E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.133.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fb:06:1d:11:08:39:d6:00:f0:60:ae:8d:75:1d:46:cb:d5:
9c:a8:3f:11:da:e6:1b:1d:6b:c9:10:2c:1a:13:40:34:31:f3:
a5:f2:df:09:41:21:36:37:ef:a8:07:47:d4:0c:34:71:e8:c9:
0c:26:e0:22:f4:7b:47:f4:a9:45:43:90:55:89:64:01:6a:63:
69:b2:a5:63:52:66:01:d1:18:a6:d9:ce:94:8a:7e:b0:f8:f1:
bb:f0:1f:ab:e5:96:0b:b2:8c:47:f4:10:f4:75:2e:35:61:ef:
20:c4:ed:7a:c8:bd:cd:f6:2e:7d:ca:18:18:98:7d:07:c3:1b:
dc:4b:6d:d9:8d:22:50:21:d0:11:93:be:00:ad:4d:7d:7c:be:
82:7a:8c:27:35:e9:e3:fa:5d:ac:b1:88:58:f4:41:fb:bb:61:
4f:4d:54:f8:62:e5:d4:3f:45:15:57:86:36:87:c2:d3:45:b0:
d9:32:7b:8b:58:fb:14:b0:a0:b2:ed:be:38:95:b2:b6:23:5f:
c6:c1:9e:41:25:5f:a2:35:a8:19:2c:82:36:f3:95:bb:9c:3e:
3e:39:d6:68:b0:23:b1:57:3e:55:ff:2d:4a:2b:74:65:fc:bc:
a8:b3:93:13:e4:fc:cf:58:d9:2d:3e:20:11:6b:da:7c:00:68:
23:2f:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:46 2025 by rpki-client