Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A85A1CCDEB11EF821E1D89762E951A.roa
File: 54A85A1CCDEB11EF821E1D89762E951A.roa (raw, json)
Hash identifier: 3z19CC6DepTkrL0fz9tgzHRSbSCFsCaPEv560s6gMxI=
Subject key identifier: DF:28:E7:11:46:FB:F6:B4:35:83:DE:85:31:53:90:1F:4C:25:50:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01380B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A85A1CCDEB11EF821E1D89762E951A.roa
Signing time: Wed 08 Jan 2025 18:06:49 +0000
ROA not before: Wed 08 Jan 2025 18:06:46 +0000
ROA not after: Sat 03 Jan 2026 18:06:46 +0000
asID: 984
IP address blocks: 154.89.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79883 (0x1380b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:06:46 2025 GMT
Not After : Jan 3 18:06:46 2026 GMT
Subject: CN=677ebeb9-4720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:df:ab:ae:c2:62:73:e8:af:79:7c:7b:e9:
d6:53:64:b1:21:c2:d1:80:a0:23:22:77:8f:e4:69:
fd:01:4a:a8:29:26:b7:3a:14:ed:68:ab:68:78:5b:
5a:60:cc:fa:1a:46:10:9b:73:0b:99:d3:dc:1c:8b:
35:b6:4d:91:9b:88:3e:c1:be:32:91:54:c7:8b:1a:
48:dd:17:08:4e:31:73:58:2f:87:7c:bf:e3:37:bb:
4e:b1:73:11:fa:91:c1:3e:e3:85:b6:32:53:81:1f:
1b:eb:ab:24:6a:d4:65:f5:60:5c:ae:ce:f9:66:5f:
66:54:66:17:07:c6:42:a3:c9:d8:7e:56:e8:de:10:
77:31:1f:78:28:8f:6f:70:0b:60:c9:fb:24:8e:59:
b7:5b:ab:22:86:61:74:17:d1:9a:53:ac:77:d8:6d:
a3:9b:08:1d:92:c3:7d:cd:86:33:ca:f0:c7:1d:74:
a3:47:45:3b:94:17:da:8c:16:71:31:b2:87:b0:55:
94:b3:74:b2:6e:8b:e7:c9:71:fd:72:72:cc:ab:82:
0f:e8:99:06:9b:b4:2d:94:9e:9a:57:1a:0a:76:30:
88:4e:55:a2:57:64:86:82:09:2b:17:cc:46:d2:9b:
03:d1:9a:72:9c:07:b9:35:b8:66:9f:de:3c:75:f4:
4e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:28:E7:11:46:FB:F6:B4:35:83:DE:85:31:53:90:1F:4C:25:50:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54A85A1CCDEB11EF821E1D89762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.212.0/24
Signature Algorithm: sha256WithRSAEncryption
64:99:ab:e0:47:ac:6f:23:7c:e8:10:85:9f:ac:0f:17:ec:29:
82:4f:19:19:95:a7:b0:11:43:bd:49:b8:8b:50:a7:3f:ef:f7:
6f:49:27:01:30:49:79:3c:55:48:94:9b:ca:ce:f1:fc:3e:1f:
73:c2:e6:8a:83:07:46:49:f4:1e:e7:5f:bb:d0:eb:b4:7f:10:
2d:1c:a1:5d:05:c2:24:6a:db:fd:42:50:95:5b:99:a6:1e:d5:
3a:d2:b8:3a:e1:05:30:1c:8c:5b:7b:83:1d:59:11:fc:0d:e8:
7f:02:cb:ac:13:97:4d:24:e8:5c:97:0d:b5:d4:f3:56:9c:df:
36:cb:f0:2c:09:11:2c:e0:2a:41:03:8a:ca:f1:9c:d4:d5:3c:
01:48:84:a2:d1:c6:ba:99:89:61:7c:4e:24:25:f8:4b:93:d2:
58:9d:8a:e1:34:f2:21:21:91:f3:55:ab:5e:93:19:3d:7e:1a:
ff:b6:16:a4:1e:95:49:56:b5:eb:2a:02:3e:4a:21:dd:54:be:
c4:bd:3a:15:38:c0:d3:51:8c:f8:4d:f0:de:81:7e:63:3b:d7:
f1:b0:c9:87:18:0b:78:4d:35:94:5d:a2:bf:ce:d6:e2:31:31:
8d:c2:9e:5e:b1:40:d2:8b:69:37:9f:6b:bd:11:94:54:1a:11:
62:5c:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:44 2025 by rpki-client