Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BAEC42CDD911EF82389A99762E951A.roa
File: 69BAEC42CDD911EF82389A99762E951A.roa (raw, json)
Hash identifier: e9DTBXBiZSIdXAMZtN9HoLgv4XUaF3RB1BtWz0SrFmU=
Subject key identifier: 1B:38:0D:63:B3:B4:2B:24:5E:89:3D:43:F2:2B:FF:5B:5A:7F:54:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013785
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BAEC42CDD911EF82389A99762E951A.roa
Signing time: Wed 08 Jan 2025 15:58:34 +0000
ROA not before: Wed 08 Jan 2025 15:58:30 +0000
ROA not after: Sat 03 Jan 2026 15:58:30 +0000
asID: 984
IP address blocks: 154.89.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79749 (0x13785)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:58:30 2025 GMT
Not After : Jan 3 15:58:30 2026 GMT
Subject: CN=677ea0aa-f0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:55:88:3d:1e:aa:89:55:9c:db:c8:20:44:ef:
dd:c4:c4:e5:51:50:07:85:ed:d6:54:e0:4b:3f:ea:
6c:9b:37:fb:4c:f9:d7:6f:0a:ee:8a:a1:97:92:a5:
27:5a:72:b9:fc:04:de:03:d1:b0:cf:42:e4:da:b2:
e5:e6:06:e8:06:47:8a:0d:94:2a:05:00:4f:61:8a:
9b:bd:35:9f:27:50:53:62:d7:a0:2e:35:cf:9d:e7:
d6:b9:e7:6b:84:79:03:cc:30:ec:9c:25:4e:e4:55:
03:3d:70:9d:0c:ba:19:c9:cf:cf:66:cd:8a:60:bd:
b6:14:df:91:02:81:1b:91:19:d6:83:0b:2c:38:a1:
df:e9:d5:57:11:97:ba:48:e7:90:32:75:9e:ae:fd:
c8:5e:45:32:c0:a5:b3:db:bf:0e:cc:ac:5c:28:f0:
05:78:d7:1d:4b:74:9f:ec:24:89:42:91:e4:2c:e6:
30:0d:06:2c:a7:99:0b:3d:90:79:a8:83:dc:2b:e9:
5a:c8:32:57:b7:40:80:74:78:fb:35:6d:71:93:f1:
22:4e:a0:6f:c2:04:28:c1:f9:2e:91:fb:61:41:3b:
ff:39:19:88:f2:dd:32:d2:e8:f8:d3:ba:eb:32:bd:
01:20:6c:7c:b5:e4:03:46:6c:18:84:a1:ab:7a:a6:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:38:0D:63:B3:B4:2B:24:5E:89:3D:43:F2:2B:FF:5B:5A:7F:54:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BAEC42CDD911EF82389A99762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.145.0/24
Signature Algorithm: sha256WithRSAEncryption
20:38:5e:62:42:26:a8:6a:59:8b:9d:ff:e5:01:f5:b6:aa:5d:
94:0d:ba:0b:9a:1b:13:4b:ae:4d:d4:bf:42:3b:9a:8b:97:c5:
15:ad:d6:a2:77:b1:55:54:d3:18:e5:1b:7f:35:76:0a:2a:34:
2b:71:40:b5:98:36:6a:8a:60:84:f2:17:52:5e:e3:02:b1:77:
7c:b7:03:72:6d:5d:8b:07:1d:48:de:16:9b:1e:3f:84:f2:52:
d6:d4:01:0d:22:66:5a:dd:e0:eb:33:d2:0e:2d:98:05:5a:74:
9f:09:40:f0:5a:a1:fd:91:c2:27:e0:9c:4c:40:1d:34:8e:1c:
d8:7c:3f:e2:98:c1:fc:7a:ec:73:2c:a1:52:9c:5c:88:dc:e6:
ba:4d:02:66:d4:18:3d:49:b4:ee:0f:25:88:7b:0e:48:12:60:
6b:6a:8d:32:36:19:23:83:64:87:ac:7c:a0:ba:8a:6e:08:dc:
00:22:2a:75:26:1b:38:1a:cd:86:65:c4:aa:21:59:20:ad:cd:
64:77:c0:0d:a6:c6:d1:e6:95:27:cc:a3:10:12:ea:76:90:2b:
c6:06:ce:fd:3a:32:a7:92:7b:6b:8b:84:34:70:30:dd:52:d7:
08:76:5e:68:24:f9:1d:b4:e8:0a:85:2f:7a:40:a8:b7:f9:be:
de:f7:ad:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:49:17 2025 by rpki-client