Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ED759E0C0DD11EF94E13A86762E951A.roa
File: 5ED759E0C0DD11EF94E13A86762E951A.roa (raw, json)
Hash identifier: 9u9qFoZijHyviAFjq3lJYoUArPg2bl59AMUE8I0EBFY=
Subject key identifier: 32:13:8B:0D:7E:43:44:75:E9:60:7D:77:AA:22:DE:BE:31:C5:E3:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ED759E0C0DD11EF94E13A86762E951A.roa
Signing time: Mon 23 Dec 2024 03:24:08 +0000
ROA not before: Mon 23 Dec 2024 03:24:05 +0000
ROA not after: Wed 10 Dec 2025 03:24:05 +0000
asID: 984
IP address blocks: 154.89.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73404 (0x11ebc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:24:05 2024 GMT
Not After : Dec 10 03:24:05 2025 GMT
Subject: CN=6768d7d8-e3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:f5:1a:0f:f2:e9:7a:b5:a2:da:f2:86:f4:
02:4a:76:85:8a:1b:59:39:41:73:50:77:0c:79:54:
31:64:a2:da:17:f0:6a:fb:fe:fa:e3:99:36:6e:d2:
f6:0e:7b:47:ce:02:23:0c:18:12:33:7c:27:4c:b1:
ed:62:27:de:f1:bd:b4:fe:be:04:21:f4:c1:86:86:
74:c1:96:08:1f:99:03:9a:a9:52:c4:12:40:30:64:
ba:cb:57:f3:28:54:44:6b:6b:55:82:16:f6:f4:4f:
32:7f:e6:24:67:bf:b8:d2:3d:7d:8f:7e:ba:a9:9d:
e6:08:63:67:1b:8e:43:62:8b:13:7a:b3:cd:c3:e7:
cb:73:9a:78:56:c2:23:fe:41:b3:f4:78:09:57:da:
9d:9f:52:94:84:4e:0c:88:ec:8b:1e:f3:78:60:1a:
55:df:46:e2:72:c7:11:f5:68:d5:1c:46:6f:56:0a:
ce:a3:9c:c6:0b:1d:5e:b9:7a:c7:f6:ed:26:e5:ac:
c9:20:59:0e:43:94:d3:49:bf:b8:6b:8f:66:5b:73:
97:7b:40:48:5f:57:b0:93:51:52:ae:cd:61:3f:b3:
b7:44:0e:5f:7a:e0:ec:7c:25:55:a1:84:9f:52:2e:
8c:bf:3c:c1:6d:c0:ad:8b:3e:cf:bb:61:88:6c:92:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:8B:0D:7E:43:44:75:E9:60:7D:77:AA:22:DE:BE:31:C5:E3:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5ED759E0C0DD11EF94E13A86762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:5d:09:91:8a:18:be:1c:9e:00:ee:37:b3:cf:e0:d9:ed:76:
ad:6c:f4:9f:22:f8:cf:bb:c0:0c:4a:57:50:64:08:99:bd:e2:
0c:56:57:03:8b:f4:00:db:4e:f2:59:16:21:6b:2e:9b:f7:79:
c6:7f:50:50:9a:45:89:b7:e1:87:f7:8f:0c:51:78:38:35:c7:
71:4e:34:dd:5e:9a:88:aa:b2:e4:a3:34:df:5c:0a:94:ec:55:
2c:9b:ff:ec:1d:87:6e:71:55:4a:5b:ce:09:ba:11:6e:90:e9:
37:9c:60:19:64:85:f8:0b:f0:77:11:c9:57:c2:5c:2f:11:27:
c9:73:fe:c3:df:ab:c8:9a:77:27:12:cd:90:5b:b6:23:ff:1f:
ce:ed:6f:fe:f0:b0:c6:07:ce:03:19:ab:0c:24:42:06:7f:75:
26:5a:a7:14:42:5c:c4:e6:5f:0b:24:45:e4:0f:65:35:08:82:
f2:b8:84:d1:55:a9:c3:a9:3d:2c:3e:0b:f6:1a:59:01:05:ca:
06:14:d9:0b:97:a5:26:2c:47:ce:fd:81:c7:17:38:f1:81:c5:
b9:76:fa:7b:18:86:cf:80:45:7b:94:d9:5e:fa:6e:f6:e2:53:
dd:9c:3c:98:a1:4d:3e:f5:f1:e7:05:87:e5:24:3d:13:cd:ec:
cf:38:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:53 2025 by rpki-client