Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEFDA78C0EB11EFBD37CB60762E951A.roa
File: 5BEFDA78C0EB11EFBD37CB60762E951A.roa (raw, json)
Hash identifier: EfrEfkxb7EsP1RxDb11c85whQgxZEnJ5davsy6p1FZ8=
Subject key identifier: 14:0E:93:D3:26:64:DC:8B:4D:0B:FF:F7:99:F0:A8:0A:A5:46:3B:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F20
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEFDA78C0EB11EFBD37CB60762E951A.roa
Signing time: Mon 23 Dec 2024 05:04:16 +0000
ROA not before: Mon 23 Dec 2024 05:04:13 +0000
ROA not after: Wed 10 Dec 2025 05:04:13 +0000
asID: 984
IP address blocks: 154.89.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73504 (0x11f20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 05:04:13 2024 GMT
Not After : Dec 10 05:04:13 2025 GMT
Subject: CN=6768ef50-99e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:ad:9e:d8:b1:be:ea:3b:64:18:a3:1f:cd:
64:d4:aa:99:e3:52:fd:3a:bc:a3:03:95:1c:88:3f:
76:18:5a:55:62:e1:b0:47:a1:f7:51:f1:3e:77:a2:
48:43:c0:bb:ba:9a:67:66:d5:42:3c:1b:09:b7:14:
ed:e1:e8:57:5e:82:9a:9d:9d:a3:1a:d2:4d:90:3c:
d0:b4:a3:99:ce:93:df:af:0d:09:f8:ab:46:e8:ee:
d1:70:3f:59:bc:ba:bc:a9:0c:58:7e:ef:bd:17:20:
27:84:b5:6e:2e:5b:fb:08:f7:3b:f5:d8:fd:e4:20:
34:20:41:b1:4d:a2:4d:0d:0b:d8:50:16:79:0d:95:
ea:ce:7f:f9:61:7f:de:c0:90:59:96:ca:8b:33:cf:
40:33:54:26:f7:d7:e9:e8:12:7b:95:2e:7b:76:dd:
fe:ff:3a:0d:32:27:c0:45:a3:27:a1:6d:68:41:01:
fa:e7:f6:0c:aa:a3:7b:b2:84:75:ba:ce:7c:e4:c0:
8e:0e:e3:ca:c8:ca:e7:2c:4f:04:a1:92:9d:ba:9c:
5e:3d:93:65:b0:40:0a:e3:f1:5c:ab:f3:ab:16:8d:
7c:89:24:4d:b8:c6:f3:7f:e4:d6:ef:d8:1b:71:e3:
03:04:27:b9:1f:25:8e:58:07:36:14:f1:f9:ff:3b:
86:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0E:93:D3:26:64:DC:8B:4D:0B:FF:F7:99:F0:A8:0A:A5:46:3B:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5BEFDA78C0EB11EFBD37CB60762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.255.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:dc:67:99:72:0f:e5:f4:60:c5:95:44:d1:32:47:44:ed:b4:
ef:f8:b8:7c:cd:05:92:c0:e0:7e:c3:9b:8b:ac:19:40:6f:e3:
26:47:b0:b0:b0:aa:98:74:78:5e:c5:df:2c:c1:54:ba:61:61:
ef:f9:14:5d:00:18:32:3f:4c:89:49:a1:76:96:21:0f:e2:03:
4a:6f:15:89:1b:ce:24:f1:e2:49:04:8b:f7:a8:ff:33:67:4a:
22:36:18:ad:cc:b2:cd:0e:10:31:5c:b8:e7:8f:63:e0:0b:8f:
ce:bc:a0:f5:29:34:66:0e:c0:ef:8a:05:32:ec:f9:0e:6c:31:
b1:b8:a9:6e:32:a5:4b:ad:2c:71:ce:b9:73:03:67:38:bf:80:
fb:b1:7a:46:c2:c5:99:0b:94:ca:26:44:bc:76:f0:f7:23:94:
33:03:5a:31:09:bf:fd:9d:6a:a8:95:d2:e6:0f:ee:92:96:18:
81:b4:73:ca:ef:a0:fd:e0:ff:6f:7a:fa:98:6c:f6:dd:d7:58:
96:89:aa:24:83:31:f9:83:3f:9b:ec:37:f6:92:08:78:61:23:
60:fb:0a:86:89:a6:c9:94:c8:cd:e8:90:3b:4d:82:87:f0:f8:
06:ba:f5:d8:45:21:54:03:81:7c:02:b7:92:55:d7:cb:7e:d1:
eb:64:51:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:23:17 2025 by rpki-client