Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0033B4C0D511EFA804EB4E762E951A.roa
File: 6D0033B4C0D511EFA804EB4E762E951A.roa (raw, json)
Hash identifier: jq2AbMSxK7dugdgS03I00F7v7vuYRafu+IMJSUmkOV4=
Subject key identifier: 77:C5:10:3E:EC:EE:8C:3F:7D:76:AB:D7:CA:A3:E9:96:BF:56:E5:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011E54
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0033B4C0D511EFA804EB4E762E951A.roa
Signing time: Mon 23 Dec 2024 02:27:16 +0000
ROA not before: Mon 23 Dec 2024 02:27:12 +0000
ROA not after: Wed 10 Dec 2025 02:27:12 +0000
asID: 984
IP address blocks: 154.89.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73300 (0x11e54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 02:27:12 2024 GMT
Not After : Dec 10 02:27:12 2025 GMT
Subject: CN=6768ca84-1d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3d:4e:06:7c:98:f3:3d:3e:14:04:4d:73:fe:
1d:3f:fb:0d:20:cd:01:a8:78:c6:58:17:ef:f7:5e:
d4:8f:8b:be:9c:b0:6a:fd:66:0f:eb:1c:d9:a4:32:
c5:18:5d:ff:65:c6:53:96:c9:78:d2:48:df:e2:15:
43:4b:73:9e:e6:6a:88:5f:0d:65:6a:89:10:1a:f2:
34:7b:89:ab:05:39:ab:e3:58:be:fc:4d:4c:b9:be:
49:58:37:ae:10:80:36:eb:8f:f4:c7:bd:dd:39:52:
11:d8:63:ad:8f:eb:de:7e:19:66:cf:6a:2f:69:56:
44:c7:e2:21:59:3f:16:4f:ca:62:7e:de:18:bf:17:
6a:d3:99:2e:e4:77:a2:7e:34:46:57:c2:87:ed:36:
93:a8:90:44:05:d7:e1:9d:1d:a2:c2:45:47:11:33:
8b:e5:b4:23:70:2d:a3:e9:3f:70:84:b7:18:33:35:
f7:f1:58:74:e3:f9:01:56:96:1a:94:3c:22:c1:51:
34:ee:58:4c:b6:bb:49:6e:00:00:e1:13:47:06:9a:
77:61:fc:0e:81:b6:18:7a:98:6a:02:a1:aa:81:8d:
ca:a4:3b:59:29:08:90:cd:b6:24:de:ee:7b:4a:f0:
bd:69:a1:1f:4d:7e:90:d9:dc:bb:eb:ee:7a:0f:c5:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C5:10:3E:EC:EE:8C:3F:7D:76:AB:D7:CA:A3:E9:96:BF:56:E5:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D0033B4C0D511EFA804EB4E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:8f:22:2b:08:5c:14:02:68:c6:68:9b:6f:1c:c4:69:63:b5:
34:e4:25:0c:9f:5e:74:54:8a:23:fd:d2:8a:e3:ea:d3:cb:9d:
fa:e2:71:09:2e:64:89:60:bb:28:1e:8b:ba:24:24:11:ba:00:
9c:f4:33:c6:96:10:70:76:0d:d8:ea:cf:25:0c:c7:8b:4a:df:
ce:8a:bf:62:89:e3:30:90:58:30:dd:74:f7:71:36:27:e8:a2:
91:fa:4d:62:ee:0a:d5:c8:b2:c2:36:01:2f:31:4c:f2:c0:8f:
5e:21:7c:fa:b3:07:9b:ca:21:aa:d5:1b:11:7b:0c:18:75:40:
81:0a:f5:d6:5b:98:03:15:ab:15:e9:4b:46:68:dc:c8:b6:fa:
a9:42:63:92:d7:5f:a5:c0:c1:79:dc:a0:d1:01:e5:37:0c:d7:
77:17:99:62:d1:53:c2:9b:bf:e5:75:2d:93:fb:54:00:0f:73:
ee:87:e4:31:12:89:d2:16:3d:a0:fe:59:9a:b4:bb:63:4c:80:
39:27:70:d0:a6:93:f6:9d:86:ea:f4:ec:5e:a4:6c:fd:cf:16:
f6:e8:fc:bc:f8:b0:6a:62:ce:22:a1:a9:4b:39:22:81:07:f9:
c3:c4:58:ee:3d:c2:16:a1:25:b9:41:77:f8:76:07:4b:a2:2b:
53:7a:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:16:06 2025 by rpki-client