Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D98D646C0DC11EFA014E57F762E951A.roa
File: 4D98D646C0DC11EFA014E57F762E951A.roa (raw, json)
Hash identifier: bpxU2lzdyEt4FB6p+cWTIQBphelR2JB9pa90cl6ITRk=
Subject key identifier: 7B:4A:6E:68:7A:FC:61:B8:94:C9:9C:86:93:1D:DC:F8:9A:B9:B8:B0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D98D646C0DC11EFA014E57F762E951A.roa
Signing time: Mon 23 Dec 2024 03:16:30 +0000
ROA not before: Mon 23 Dec 2024 03:16:26 +0000
ROA not after: Wed 10 Dec 2025 03:16:26 +0000
asID: 984
IP address blocks: 154.89.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73390 (0x11eae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:16:26 2024 GMT
Not After : Dec 10 03:16:26 2025 GMT
Subject: CN=6768d60e-e45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:9f:aa:c5:29:74:a6:2c:10:90:85:46:fc:
0b:12:b9:2d:9d:23:66:64:9b:f6:e2:ef:c6:b8:0e:
2e:ff:1c:b7:a3:a4:c6:b2:7f:ac:0b:66:68:12:cc:
41:f8:86:0e:28:eb:34:98:e0:d6:f1:e8:07:0b:00:
68:b6:18:4f:c2:34:45:11:08:8c:2d:4f:a6:0b:ce:
9a:78:ff:d0:19:46:c9:7e:12:ef:34:3e:80:0d:c4:
88:0e:9c:ab:1d:7b:46:d6:c5:c1:7f:13:13:70:8e:
09:72:65:cc:07:aa:bd:f8:b7:fc:67:18:bf:5a:f3:
65:4c:3c:44:0b:a1:b7:ed:37:5f:00:c8:3c:3d:4f:
34:cf:68:35:cc:57:16:80:9f:18:53:8a:a5:b6:ad:
f7:af:a2:6b:7f:e2:17:4f:66:03:ea:e9:0b:ad:a9:
ea:0c:93:10:63:35:8d:bb:65:02:db:2d:b6:e2:97:
55:55:fd:36:5a:07:06:5c:6e:50:36:c4:52:b7:a5:
58:04:1f:ae:6e:78:13:c8:69:15:7f:36:17:91:b2:
53:8b:d6:92:c6:29:71:0c:ee:80:00:02:bb:e1:4c:
95:a9:98:96:30:6b:ae:dd:a8:58:2c:cd:ae:ea:39:
ff:17:3c:00:d3:48:4c:6e:d6:6e:5e:fe:8a:14:11:
3b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:6E:68:7A:FC:61:B8:94:C9:9C:86:93:1D:DC:F8:9A:B9:B8:B0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D98D646C0DC11EFA014E57F762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.181.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1a:aa:fa:b4:37:ef:b3:28:f5:ea:4e:4f:ba:92:42:c8:0b:
83:10:89:68:b7:73:06:84:d9:51:29:dd:99:62:d0:a7:0d:33:
eb:68:69:ac:05:08:3c:a2:48:d0:06:20:0f:ff:ed:73:6d:17:
3b:36:47:af:3a:c4:1a:41:45:fd:98:79:01:7b:fb:1d:d3:8e:
89:44:2b:6a:54:44:29:dd:09:7c:9e:97:27:74:13:62:02:78:
51:f0:83:db:77:d6:25:ec:a8:95:72:79:5c:d7:28:5d:b8:b0:
f0:27:17:e1:06:61:5c:7d:75:3c:3b:e8:5d:33:d5:30:b3:28:
47:ab:3b:48:28:9f:44:2a:59:c6:81:db:0c:13:15:08:92:56:
30:26:46:fe:da:b6:bf:64:0e:68:1b:91:4c:f0:f9:ff:fb:38:
b0:06:d1:50:d1:e9:d2:8d:f5:3d:b7:cf:52:31:83:aa:dd:73:
01:f9:83:bf:5f:e4:48:9b:7c:23:52:67:76:4d:4f:5d:1f:e9:
55:b4:90:a2:87:9e:e4:36:4d:b7:6f:49:74:73:fc:45:1d:3e:
8a:9d:f3:4e:03:e1:3c:9a:fc:02:5f:08:11:eb:59:d0:14:49:
eb:39:59:14:41:90:5b:db:bb:16:60:57:85:d3:58:f7:5d:1f:
00:72:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:40:48 2025 by rpki-client