Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DDB826D58911EFBBE179BA762E951A.roa
File: 61DDB826D58911EFBBE179BA762E951A.roa (raw, json)
Hash identifier: n95GJLqRIul+Q0jOT3gVmzoKj4wXzJfxW0v0RiK1GSg=
Subject key identifier: 7E:5C:03:2A:28:C4:19:A4:DD:49:78:D6:EE:28:04:F3:05:77:42:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013DEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DDB826D58911EFBBE179BA762E951A.roa
Signing time: Sat 18 Jan 2025 10:45:50 +0000
ROA not before: Sat 18 Jan 2025 10:45:46 +0000
ROA not after: Thu 22 Jan 2026 10:45:46 +0000
asID: 63199
IP address blocks: 154.89.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81390 (0x13dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 18 10:45:46 2025 GMT
Not After : Jan 22 10:45:46 2026 GMT
Subject: CN=678b865e-c6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:e6:fd:58:60:a5:6a:5e:21:04:fb:d0:92:
a9:4a:d1:9f:0b:0f:b1:64:cf:e9:a9:43:f8:92:49:
4d:5e:f7:32:e4:ec:01:b7:3a:62:aa:97:1b:00:ae:
2d:b7:cd:8e:c6:00:52:39:3e:dc:16:01:93:b5:11:
31:69:7f:7d:b5:99:f8:3f:45:3f:65:bf:c3:d8:d6:
81:5a:15:59:99:1f:ed:4e:88:46:2f:1c:97:4d:ec:
2e:a7:c7:5a:86:2c:f3:3d:3e:6b:9d:21:1f:fd:a9:
69:ef:86:86:d8:d3:64:81:1e:60:73:a9:a9:40:3c:
b9:a6:71:8a:0c:70:e4:2f:66:61:3c:c9:11:0d:9f:
2f:86:0f:45:2b:38:ec:c1:17:f8:12:e3:db:ba:8c:
21:01:24:3f:59:0c:34:2c:65:37:f3:8b:c2:12:62:
42:8a:ec:b7:2a:2a:b6:45:bd:09:d9:ed:bf:5f:43:
32:6b:ba:32:49:ed:12:01:a2:e9:cb:aa:55:0f:90:
9b:ce:ed:64:65:cf:d5:9f:32:92:65:66:05:02:6f:
3f:8d:7d:c0:02:6b:eb:75:db:cf:19:6c:05:9d:9d:
e1:b1:2e:d2:93:7f:ca:32:50:aa:3e:7f:c7:eb:00:
4f:f9:d1:c4:86:be:37:df:af:a9:b8:65:50:c7:95:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5C:03:2A:28:C4:19:A4:DD:49:78:D6:EE:28:04:F3:05:77:42:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/61DDB826D58911EFBBE179BA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.140.0/22
Signature Algorithm: sha256WithRSAEncryption
40:ac:a9:34:22:6e:e6:6a:bb:51:cd:7c:ae:34:85:a9:0c:ce:
a7:2c:f2:f9:32:bf:37:c1:bd:5a:bc:e5:0b:37:a1:34:25:83:
ed:42:0f:01:f1:f1:2d:04:c0:44:58:67:12:15:7f:84:20:36:
0a:2e:62:bb:72:97:54:5e:3c:ca:dc:74:c9:55:e7:97:49:0c:
f8:8e:50:73:25:e9:2b:26:d0:68:09:0d:9f:7d:6b:d4:87:0a:
88:e5:e2:e4:5f:fc:d0:6f:1d:14:56:98:cc:1d:12:41:a8:f5:
af:d3:1e:1b:27:25:62:7d:d0:cb:11:4e:7f:4b:ec:58:49:5c:
2e:d8:53:81:3c:7e:a1:01:94:46:c7:a1:74:89:72:3a:61:bd:
3b:c3:53:49:ac:2b:0b:25:bf:34:fd:5a:92:12:f9:8f:43:b0:
6e:c5:00:c3:8a:eb:79:a4:d7:fd:44:cb:f6:ad:4d:be:52:a5:
d3:80:7e:82:20:dc:63:9b:17:03:3d:81:bc:c4:8c:66:6d:58:
85:d2:44:61:86:f0:99:d2:31:db:48:2e:33:a9:33:e9:e3:4b:
de:8a:a5:a3:46:4d:c8:32:6e:f9:9b:65:b5:09:d4:1a:be:ef:
ae:2a:22:a5:82:34:6d:92:bc:21:61:11:4e:57:a5:a8:59:81:
8d:12:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:48 2025 by rpki-client