Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F8964A0F41911EFAB7E8AB5762E951A.roa
File: 4F8964A0F41911EFAB7E8AB5762E951A.roa (raw, json)
Hash identifier: gPyiL9MCWyT0nM8xmab4DZ13WP0AqUnoTuCWe8HarEo=
Subject key identifier: 28:6E:EF:27:92:17:A9:F3:9A:0E:11:EA:DE:68:06:61:53:D1:B1:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016133
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F8964A0F41911EFAB7E8AB5762E951A.roa
Signing time: Wed 26 Feb 2025 08:11:42 +0000
ROA not before: Wed 26 Feb 2025 08:11:38 +0000
ROA not after: Fri 20 Feb 2026 08:11:38 +0000
asID: 984
IP address blocks: 154.89.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90419 (0x16133)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 08:11:38 2025 GMT
Not After : Feb 20 08:11:38 2026 GMT
Subject: CN=67beccbe-efa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:fb:27:f6:2e:e1:d8:3f:8e:0e:fc:86:58:
fa:7c:40:76:97:8b:82:77:9f:0f:0e:71:f9:33:94:
a6:a0:d4:38:10:3d:76:20:07:b6:de:6e:5d:65:59:
5b:d1:4a:69:15:57:63:20:40:f0:39:de:1f:69:e3:
44:b2:5b:21:94:32:c8:77:6f:b0:da:a8:6a:39:df:
8f:3e:65:fa:6d:3e:0e:cd:32:23:43:88:b8:5b:6f:
4a:71:82:84:f8:e6:16:52:04:f5:8e:e7:fd:20:3f:
f7:a6:11:b8:21:6f:2d:d8:f6:c4:10:26:6e:44:a0:
07:dd:4f:c6:48:5b:0f:4d:33:01:35:46:e3:98:d6:
12:ef:ef:2d:32:5e:81:92:3b:a4:8b:f3:87:85:c2:
e7:b1:38:41:03:a3:37:e1:65:0b:f6:cf:77:90:1f:
74:a7:e8:57:5e:b0:d7:a8:44:03:11:10:24:3d:4e:
1b:be:3b:bd:60:36:0a:ba:8c:0c:77:c8:f9:14:fa:
8a:68:7a:a9:f4:2b:75:53:a3:89:16:22:61:47:2e:
7f:22:5a:09:23:fc:63:4f:07:d7:14:02:db:60:1b:
97:cc:35:2b:e6:d2:66:e8:93:c6:7f:2e:b3:29:5e:
18:c6:65:97:52:f8:34:2e:46:3c:86:74:79:0e:ab:
5d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6E:EF:27:92:17:A9:F3:9A:0E:11:EA:DE:68:06:61:53:D1:B1:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F8964A0F41911EFAB7E8AB5762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.16.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:15:d8:1f:1e:5a:e2:04:5a:18:de:1c:80:7f:2e:96:0b:81:
98:16:ea:cc:c9:2a:74:a3:68:5e:ea:5d:65:14:3a:54:9f:7b:
0c:fe:15:02:e5:f6:51:96:f5:1c:45:fc:84:7d:b5:cf:fd:3a:
c8:6b:a3:31:36:da:87:9f:c5:b6:6a:50:c5:a0:0f:59:f1:db:
a3:9c:0c:dd:8c:18:13:6a:5f:11:13:bb:e9:1e:32:a8:b7:21:
7c:ed:8f:fc:b7:4d:0d:aa:92:85:eb:f1:6c:b7:e4:50:01:2e:
e1:0e:d3:12:8c:73:9c:75:99:5c:9b:27:31:79:ed:72:55:dc:
0c:b4:e6:83:87:01:09:86:45:79:8c:44:9f:28:0c:e9:1a:81:
58:04:9e:83:03:2f:8f:e9:23:9c:f1:8a:fe:a7:32:81:23:46:
5f:ec:51:ff:e1:28:19:c5:bc:2d:b6:de:d3:31:c6:2e:52:e2:
e7:30:09:0c:48:ff:b3:06:87:94:aa:45:1a:03:7c:36:92:5b:
2c:4d:d8:2a:41:35:2f:65:b5:e4:ee:5b:68:7a:9f:dd:92:3d:
5f:72:41:93:19:59:69:cd:cd:ad:ed:28:48:da:45:40:8d:67:
53:f4:72:37:0a:ef:a5:c2:1a:c8:f5:da:1f:9f:ee:04:66:5c:
2d:c0:31:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:12:59 2025 by rpki-client