Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F587152C0D811EFA8296963762E951A.roa
File: 4F587152C0D811EFA8296963762E951A.roa (raw, json)
Hash identifier: cidyvCAlHzkyd0Y48/+OE7f2Jy+yPlKGB/hdkoUgu1Q=
Subject key identifier: D7:30:D3:9E:B4:B8:C9:C1:07:E9:F2:D4:16:99:56:48:09:F9:CD:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E7A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F587152C0D811EFA8296963762E951A.roa
Signing time: Mon 23 Dec 2024 02:47:55 +0000
ROA not before: Mon 23 Dec 2024 02:47:51 +0000
ROA not after: Wed 10 Dec 2025 02:47:51 +0000
asID: 984
IP address blocks: 154.89.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73338 (0x11e7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:47:51 2024 GMT
Not After : Dec 10 02:47:51 2025 GMT
Subject: CN=6768cf5b-7d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fb:f1:51:af:a1:9d:56:96:bc:a2:b8:cc:cf:
7f:92:06:bd:08:d7:bf:44:34:bd:97:15:f5:eb:a2:
db:fe:b8:1a:e2:8e:c8:cd:3a:a7:f7:a2:19:92:76:
90:c1:57:46:a6:16:3c:7a:68:19:1b:86:15:f0:85:
50:57:2d:6f:b6:2a:ac:41:2f:f6:89:de:d3:12:05:
40:06:de:be:d2:fe:39:9b:85:a9:d2:5a:8f:7a:30:
79:c1:49:ca:48:e8:54:b9:9a:a5:76:e2:52:58:9b:
8f:7e:a2:41:17:ba:8e:b7:50:13:dd:57:e1:10:d2:
24:d7:09:91:0e:0a:1f:7f:7a:ab:04:2b:5e:48:f7:
23:0c:7b:9d:17:d2:20:b3:1a:b6:a9:65:99:bd:ea:
9d:3e:88:38:fd:83:69:7f:22:06:22:55:84:80:4e:
cd:b8:1d:3b:c4:51:28:2f:a1:05:a7:a7:ed:7d:b2:
3a:b3:fa:3a:82:02:67:f6:5a:d2:59:74:6d:4b:4f:
c1:bf:96:ae:d2:2f:f4:90:3b:07:ef:02:13:07:65:
d5:f4:d0:92:f6:41:17:da:c2:c0:ce:cd:c5:c9:d9:
2c:87:a5:84:f8:d9:80:b0:05:be:40:8a:6a:ed:26:
90:b6:17:2e:00:cd:25:50:28:61:ba:b8:e3:62:7b:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:30:D3:9E:B4:B8:C9:C1:07:E9:F2:D4:16:99:56:48:09:F9:CD:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F587152C0D811EFA8296963762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.155.0/24
Signature Algorithm: sha256WithRSAEncryption
33:73:7f:75:b6:5f:6c:5f:e9:a6:29:c3:0e:03:a2:7b:98:2c:
e2:b2:68:d9:8b:7c:92:a1:04:63:0b:55:5c:19:75:fb:85:16:
06:37:61:b0:23:47:ff:d9:91:9c:61:ae:c4:39:ef:2e:db:55:
dd:16:15:ec:cc:05:d9:26:db:d0:c9:5d:dc:8c:9a:00:67:67:
23:ae:7c:b2:b6:72:07:43:0b:73:d2:d5:29:b7:b7:47:93:ea:
de:da:d3:0d:5c:d6:a0:64:e3:49:1e:a8:00:df:be:bb:59:b1:
41:56:72:58:95:d7:78:8b:bd:25:19:7e:01:be:ed:f8:43:e3:
2f:53:fc:5f:c0:f0:a8:aa:d5:e4:64:a3:7d:fa:3d:8e:d9:43:
17:3a:97:db:c8:15:65:d6:0d:20:ee:98:af:b0:2c:4e:fe:37:
1a:7b:04:3b:b6:79:6a:58:1a:41:fe:3c:4a:4a:99:ee:1d:6e:
34:58:35:7f:30:eb:0a:d1:d8:ba:81:10:c5:98:08:8a:4c:5d:
60:37:a8:7f:80:fd:e5:96:d1:01:3d:0d:83:0a:0a:18:c9:11:
ad:2e:50:d2:b7:ec:8f:a5:12:fd:9b:53:d4:2f:93:7e:97:c9:
37:7f:fa:5d:be:84:3a:fd:f4:7f:4f:4d:f8:48:1d:0a:af:a4:
cd:05:a2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:59:30 2025 by rpki-client