Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65AD3E66C0E111EF9AB4ADA0762E951A.roa
File: 65AD3E66C0E111EF9AB4ADA0762E951A.roa (raw, json)
Hash identifier: O7znJu3N9lw6C+0cbg5lb7WZMUQAwcsDVnuHv74WIPQ=
Subject key identifier: 3F:6B:60:AF:46:30:AE:17:88:AA:AD:99:B9:59:DE:AC:4D:5B:3B:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65AD3E66C0E111EF9AB4ADA0762E951A.roa
Signing time: Mon 23 Dec 2024 03:52:58 +0000
ROA not before: Mon 23 Dec 2024 03:52:54 +0000
ROA not after: Wed 10 Dec 2025 03:52:54 +0000
asID: 984
IP address blocks: 154.89.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73456 (0x11ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:52:54 2024 GMT
Not After : Dec 10 03:52:54 2025 GMT
Subject: CN=6768de9a-2375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:82:48:19:1f:2a:65:b5:4d:3c:1b:28:4c:b2:
20:94:6a:0a:63:00:20:a8:54:a2:fb:a3:6d:d7:1f:
2b:3b:59:a4:09:13:e4:cd:9b:65:cf:d8:e5:ef:4f:
6e:86:d2:1e:07:ef:82:5a:d0:71:bb:c3:be:bc:56:
2f:4f:cc:27:9a:92:17:9b:ec:6a:57:8a:51:71:b4:
b0:7e:40:bb:95:1b:29:4b:08:b6:5b:15:53:fa:d2:
6e:be:85:22:44:52:28:3e:f6:48:0c:e5:fa:af:9e:
92:69:f4:6b:39:8c:c4:ee:bf:05:37:92:1b:80:c9:
52:e7:de:d4:4e:9a:cf:80:d1:d0:c7:b9:30:db:a2:
8e:0b:d9:5a:66:24:38:6e:ee:16:87:ec:3f:7d:53:
51:06:a0:1d:13:12:45:e7:f9:e9:3b:30:7a:31:f4:
9b:f0:10:68:0f:93:67:27:17:50:cf:00:e7:f1:43:
25:ca:fe:6d:52:ef:93:e8:e3:c8:6a:c7:d6:0e:70:
e5:76:47:01:06:1f:e9:8a:0a:e1:e6:d5:8f:19:7a:
75:83:3b:0e:46:68:dd:6f:87:f9:68:d8:62:4f:c2:
7a:4d:b1:97:c1:81:0d:b4:08:aa:0b:9c:d5:11:99:
43:79:35:b7:26:5f:7b:43:95:3e:17:47:ab:49:54:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6B:60:AF:46:30:AE:17:88:AA:AD:99:B9:59:DE:AC:4D:5B:3B:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65AD3E66C0E111EF9AB4ADA0762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.214.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cb:c4:56:42:50:55:93:cf:89:a6:99:d6:f9:71:76:26:d2:
65:5a:49:13:66:24:ea:16:00:6b:4c:2f:2d:ce:9d:68:62:70:
56:8e:33:0f:db:76:8d:85:fa:5c:2c:1b:a4:73:bc:12:f7:1a:
af:72:52:0d:e3:0a:21:aa:66:d2:fe:16:4e:24:84:42:5d:07:
ee:fe:36:12:1d:a2:02:45:7f:2b:a1:94:74:c5:27:b6:54:04:
f8:6c:94:31:72:0f:71:07:71:b7:16:55:c4:8a:39:a0:be:fd:
02:27:61:63:12:d5:59:eb:82:26:f8:d6:eb:63:58:4f:56:09:
af:5e:0f:e8:a9:6a:f9:52:be:cf:35:75:3b:96:1f:f2:5e:61:
09:fd:cc:8e:85:cb:ff:a2:49:7b:14:1b:72:60:95:c2:69:e4:
ad:ab:40:d5:45:e4:6b:8e:24:23:a8:cd:83:7c:07:73:1a:b4:
8d:01:ef:55:2c:fb:46:75:2e:0e:93:75:a4:cb:c4:76:d1:41:
32:46:dd:86:4e:69:89:72:b6:bf:1a:ac:76:50:22:61:35:d3:
6a:50:fe:5b:69:7f:36:d5:f8:b1:02:5b:b9:97:3e:28:1f:1e:
af:46:b7:09:a3:e3:f3:39:ac:67:27:2a:d5:f1:98:a1:b0:ba:
87:c2:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:15 2025 by rpki-client