Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F184B98C0DA11EF92D88B72762E951A.roa
File: 4F184B98C0DA11EF92D88B72762E951A.roa (raw, json)
Hash identifier: govcDs/5CW3UjCGC1vLD58qGcpQUINFlGUl5PkUidNw=
Subject key identifier: 53:05:10:79:36:28:5E:E1:EF:C0:48:76:77:CD:39:FD:8B:C1:29:5D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E94
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F184B98C0DA11EF92D88B72762E951A.roa
Signing time: Mon 23 Dec 2024 03:02:13 +0000
ROA not before: Mon 23 Dec 2024 03:02:10 +0000
ROA not after: Wed 10 Dec 2025 03:02:10 +0000
asID: 984
IP address blocks: 154.89.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73364 (0x11e94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:02:10 2024 GMT
Not After : Dec 10 03:02:10 2025 GMT
Subject: CN=6768d2b5-1c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:1d:71:cb:2b:de:93:6e:57:f7:95:80:03:
79:fd:71:29:ac:d3:ea:92:5d:68:9f:9a:44:e8:fc:
fa:64:f4:5d:84:aa:8c:14:58:8e:07:b6:2a:c6:f3:
c4:e1:85:1d:2d:88:58:d8:c7:91:e8:be:33:a9:00:
99:54:8d:c0:e5:37:4c:99:f9:98:c7:85:45:b6:f2:
d8:b5:40:9b:d4:b8:36:ea:a5:50:45:2a:c2:2d:a6:
c3:8f:03:19:8c:ad:3e:c3:d6:e2:0b:02:8b:51:ef:
5e:bf:58:76:93:4b:6d:03:60:a7:fe:96:2e:c9:f1:
5f:f7:3b:7d:88:ec:df:4d:51:2d:79:55:5c:44:79:
36:6b:30:5f:40:99:04:ca:5e:cc:8a:b3:97:68:9e:
4c:da:e3:6a:61:a1:ad:99:38:94:8a:a6:72:41:8b:
c8:99:8f:57:4e:96:3e:31:f1:f5:f7:c2:d8:5a:b5:
10:5e:9a:b7:4a:58:87:67:8f:83:c4:83:c8:a0:d8:
b3:6b:39:0b:8f:83:82:a7:f4:96:7d:a1:7c:d4:55:
75:e9:22:71:34:3a:b2:1a:f9:3a:ec:35:3b:f8:32:
92:83:35:13:71:c2:d7:b3:0d:55:5b:64:1d:60:fa:
54:12:a2:a8:3e:bd:38:72:3d:39:39:4e:eb:09:6b:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:05:10:79:36:28:5E:E1:EF:C0:48:76:77:CD:39:FD:8B:C1:29:5D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F184B98C0DA11EF92D88B72762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.168.0/24
Signature Algorithm: sha256WithRSAEncryption
19:5a:22:e6:e9:a8:1e:96:59:b7:4d:c7:a0:74:a5:f4:ea:e8:
74:8f:9b:0d:5c:c7:e7:2f:84:d8:9d:72:8b:98:2c:5b:e0:eb:
bb:ea:00:23:ec:01:8d:9e:68:75:49:04:d0:c6:0f:4e:c6:c6:
dc:ab:ca:ed:ab:9d:de:3d:b9:b9:69:2b:d3:a9:cb:75:ba:3a:
e0:ea:15:d7:ce:cd:9d:03:72:bc:ce:0e:a6:2a:69:cf:78:4f:
54:7a:94:6e:e8:d9:2b:4c:8c:e5:19:29:47:a1:be:d1:ff:c0:
0f:4b:1f:15:e7:a8:fe:57:74:82:e0:80:72:81:ca:00:c7:b6:
32:12:57:08:db:69:ee:c7:58:2b:de:b3:ef:0a:66:9d:45:b4:
8c:db:a0:ca:ae:61:f1:7a:02:c1:2f:d5:2a:34:46:9d:88:29:
d5:d4:bc:96:70:6a:3b:bd:0d:dc:79:57:82:75:63:d4:0e:63:
e1:80:77:87:84:d5:91:92:e5:38:89:c1:af:d8:46:e0:fb:37:
b9:19:6d:3a:30:30:8b:ee:08:1c:bb:92:7f:73:15:47:2c:ed:
79:50:e4:02:c7:88:95:b5:81:13:e1:f0:95:c0:64:9f:21:f0:
dd:ba:0a:47:6b:7a:f2:a3:f4:f4:57:f6:a5:0f:e8:a5:e2:8a:
ad:19:80:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:44:28 2025 by rpki-client