Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4225E4C0D911EF9EEBCC6C762E951A.roa
File: 5F4225E4C0D911EF9EEBCC6C762E951A.roa (raw, json)
Hash identifier: LbVhbC+n82qp4CrZNIjfHNo8hST3MnS89xygqD1quIY=
Subject key identifier: C9:34:C6:C1:61:89:03:08:29:A2:75:A4:19:61:42:B8:4E:22:8E:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4225E4C0D911EF9EEBCC6C762E951A.roa
Signing time: Mon 23 Dec 2024 02:55:31 +0000
ROA not before: Mon 23 Dec 2024 02:55:27 +0000
ROA not after: Wed 10 Dec 2025 02:55:27 +0000
asID: 984
IP address blocks: 154.89.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73352 (0x11e88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:55:27 2024 GMT
Not After : Dec 10 02:55:27 2025 GMT
Subject: CN=6768d123-c072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:da:a2:49:32:54:e9:f1:16:14:bd:be:87:
40:b4:76:06:53:31:d8:83:ff:a3:97:1d:25:a6:37:
7a:81:20:78:c2:14:37:79:56:dd:04:c0:2f:4e:64:
f7:d1:bd:e6:9f:76:c6:fb:da:43:0d:48:44:6f:3b:
d3:49:dc:59:60:f1:5f:39:b2:76:53:eb:33:dc:0c:
3f:f8:c8:06:9c:08:43:29:2e:a1:13:b6:2f:0a:9e:
8a:02:89:5d:2d:aa:1a:26:b5:6d:1a:eb:b0:3c:8b:
4d:c3:24:5a:53:49:5a:f4:e5:0b:89:5e:20:0d:2f:
9c:6e:1d:48:d4:cc:27:70:ff:27:64:fc:42:d8:e4:
d8:fd:0c:38:09:2b:43:b7:d5:b8:e7:73:30:60:5c:
74:d9:50:70:04:0e:56:99:58:b4:8f:10:50:21:9d:
01:43:2f:11:56:75:ca:ae:b1:3f:95:54:f2:00:68:
1c:38:2c:11:c7:21:4b:52:c2:8b:65:09:68:1b:22:
1f:ab:86:fd:b6:77:57:1d:93:08:cf:f0:de:35:92:
2d:7e:69:3a:a2:20:51:fd:a8:b3:74:a0:46:ce:4f:
e3:99:a6:e9:01:fb:47:a6:fb:a5:55:7c:d4:11:60:
00:f8:a8:6f:3d:79:c9:ae:d5:f9:98:29:69:f7:be:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:C6:C1:61:89:03:08:29:A2:75:A4:19:61:42:B8:4E:22:8E:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F4225E4C0D911EF9EEBCC6C762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.162.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e2:a5:6d:dd:71:44:eb:93:7d:e3:21:27:9b:54:fb:1f:77:
f5:60:2b:59:d3:4a:69:27:a7:da:ad:8a:fa:b6:dc:29:2f:83:
3c:96:3f:4a:9f:20:16:36:24:c0:42:d0:3a:de:98:f6:b0:b6:
c2:94:bd:db:e3:fc:be:42:e0:93:f2:0d:e6:4d:a0:60:1b:d5:
36:7a:f3:92:15:17:c1:6a:82:15:ab:31:79:eb:79:ba:e3:a0:
b5:7b:9e:82:82:ee:11:cd:c5:89:36:48:cf:88:4b:50:68:75:
61:73:26:7d:a2:a2:5d:17:c7:bc:a9:8b:cf:d6:11:02:71:1a:
d3:b5:c3:a0:ca:d3:e2:2a:06:24:f1:d1:e0:d1:40:30:b9:47:
6d:a2:5b:18:49:93:d1:ce:4b:cb:47:48:6c:bc:b9:fa:cd:2e:
59:7f:75:c8:72:a5:3c:4e:41:98:94:7a:da:4f:a4:30:15:4f:
76:2d:1a:71:9a:36:fe:55:1a:57:b1:ca:4e:18:09:f8:0a:78:
41:44:e7:35:cb:49:3b:f0:e9:42:9c:52:16:8f:b5:05:bb:c9:
04:69:7b:a5:7b:a0:b3:93:14:de:8b:27:93:6e:b8:fb:38:36:
e0:27:14:a6:62:ec:ad:47:aa:b7:ad:f4:d4:91:a4:c2:95:36:
58:c6:9c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:41 2025 by rpki-client