Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC60DC2CDEC11EFA0037490762E951A.roa
File: 5EC60DC2CDEC11EFA0037490762E951A.roa (raw, json)
Hash identifier: 37XzQ9uOR6AaElax0Z1POIoSqoPbTBxrQ/QFZ6XdOFs=
Subject key identifier: 3A:2B:0D:06:B8:89:BD:AE:B3:6E:4A:FD:AF:28:6B:EC:C1:D9:74:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013813
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC60DC2CDEC11EFA0037490762E951A.roa
Signing time: Wed 08 Jan 2025 18:14:16 +0000
ROA not before: Wed 08 Jan 2025 18:14:12 +0000
ROA not after: Sat 03 Jan 2026 18:14:12 +0000
asID: 984
IP address blocks: 154.89.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79891 (0x13813)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:14:12 2025 GMT
Not After : Jan 3 18:14:12 2026 GMT
Subject: CN=677ec078-c508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:63:c0:4e:e9:b3:df:f4:44:b1:46:d1:9c:
d4:c2:b2:00:d9:2a:b0:f1:66:0e:d6:c8:a3:5c:78:
ac:2c:e1:a0:0c:0d:a9:c3:92:82:5f:2d:da:54:7a:
90:1e:7a:b1:24:05:dc:49:e7:90:93:5d:9f:b4:11:
1f:32:c1:cc:74:2d:27:ca:8e:b2:0f:9e:12:14:b6:
52:b5:0e:08:20:46:4a:cf:16:89:f1:da:59:c2:7c:
19:6b:b8:f3:ef:31:83:50:6c:76:dc:a8:6d:e8:ac:
c4:ca:14:51:13:72:0e:45:22:52:dc:00:ab:4f:be:
32:7d:7d:09:bb:59:57:c7:5a:b2:56:d1:b5:ae:ef:
8a:ce:1f:6b:25:fa:29:8b:bd:c8:df:27:81:29:d4:
d1:ef:b0:42:8d:3e:e3:7d:fc:11:9a:01:7a:9b:ba:
79:e5:95:0f:ac:8d:85:97:c3:0d:35:72:12:57:85:
15:68:f8:ff:cc:ad:d5:18:c3:42:b7:99:7d:4b:47:
3a:bc:a7:b5:7a:e8:3b:99:b6:33:cc:dc:bd:94:56:
44:27:d5:8e:77:d8:65:9f:1a:e4:c7:84:e2:a8:24:
0d:6b:c3:4d:06:33:ac:29:27:f9:26:22:b5:c7:23:
48:0d:30:97:d9:f9:40:35:c5:fa:a1:73:f3:75:c2:
cc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:2B:0D:06:B8:89:BD:AE:B3:6E:4A:FD:AF:28:6B:EC:C1:D9:74:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5EC60DC2CDEC11EFA0037490762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.216.0/24
Signature Algorithm: sha256WithRSAEncryption
85:9c:f3:5e:7f:92:da:49:c9:27:2b:68:a4:3c:86:7c:b2:7a:
d3:e1:1e:93:96:07:88:88:eb:36:67:e2:e4:3d:c0:28:17:91:
4f:47:fd:08:aa:af:15:17:1a:16:ff:d8:ac:14:28:77:d0:9a:
59:37:eb:68:49:40:e0:1e:bf:ca:62:33:a8:f5:13:2f:61:e8:
b1:3b:58:33:15:72:69:13:31:f7:79:dc:8b:c3:87:1f:eb:f5:
a5:e0:c2:d6:18:50:75:74:7c:42:48:36:72:46:59:96:cc:90:
55:a5:89:c7:ba:9d:6d:ca:24:de:7d:fb:6c:80:65:a4:4e:ee:
67:85:4a:52:5f:7d:2e:53:bc:56:fb:e2:b8:fc:73:0d:1f:97:
3b:91:cc:46:3b:62:fd:d2:2a:e0:f9:51:b0:17:c5:73:fe:79:
12:1b:61:ca:57:2f:38:7e:f8:70:f4:da:c5:fb:35:79:98:e2:
bb:1f:fe:92:07:8b:b3:b1:80:89:c7:ce:28:6a:fb:e6:13:ee:
73:5b:f4:ea:98:84:6b:43:4e:54:24:6d:8c:d6:2d:91:77:3a:
9b:e7:4e:b3:0d:8a:ba:f5:c9:51:81:65:c1:63:68:f1:44:21:
4c:c3:e8:56:11:65:8a:78:f1:77:0d:c9:ae:a2:1e:a2:34:5c:
e4:39:91:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:47 2025 by rpki-client