Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CB3B1DEC0E211EF92D1E6A9762E951A.roa
File: 7CB3B1DEC0E211EF92D1E6A9762E951A.roa (raw, json)
Hash identifier: Fa+Yqgac1jUofu6euqhgB0JkiDKxJPmORYZ0vTkwWsE=
Subject key identifier: 1C:4C:DC:0D:29:30:83:8B:6E:18:EB:1A:4A:BD:BD:BF:48:1D:55:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CB3B1DEC0E211EF92D1E6A9762E951A.roa
Signing time: Mon 23 Dec 2024 04:00:46 +0000
ROA not before: Mon 23 Dec 2024 04:00:42 +0000
ROA not after: Wed 10 Dec 2025 04:00:42 +0000
asID: 984
IP address blocks: 154.89.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73470 (0x11efe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 04:00:42 2024 GMT
Not After : Dec 10 04:00:42 2025 GMT
Subject: CN=6768e06e-c360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:ee:1f:6f:a3:2c:4b:03:4d:9a:06:22:a7:
f0:43:e9:10:d0:06:1c:69:06:c8:a3:25:f9:5d:de:
c0:98:9f:03:42:46:87:30:81:e9:c0:5b:40:68:de:
67:ea:c5:b0:d7:7f:0c:c7:e5:b3:a4:49:42:da:f7:
9a:0e:f6:f4:62:2f:e9:3d:a1:f0:d6:9b:28:dd:92:
c5:bc:eb:0e:5d:f4:be:27:eb:ab:38:33:33:b0:14:
82:12:31:75:36:09:6a:56:e8:e0:9f:ed:90:8f:4a:
0c:af:9b:ba:c7:c3:0f:66:db:38:f9:5b:10:e8:3c:
6d:79:5a:4d:29:85:ce:0c:49:01:a8:b8:77:07:95:
cb:e3:58:de:1b:33:87:e3:75:c6:19:aa:6a:59:e9:
9f:ae:68:4f:c2:09:13:52:2a:3f:8d:51:89:ad:84:
3f:9e:30:b0:6c:0c:9d:39:ec:52:90:24:40:3b:43:
82:5d:36:6e:83:93:88:4b:46:d0:4a:05:2b:e9:94:
98:f7:c3:25:a1:2f:9a:3c:fa:14:96:78:bf:21:4f:
2b:c6:57:5e:77:75:90:31:11:d6:54:27:c3:2f:f0:
53:10:45:3f:e3:5b:a7:e3:89:18:59:53:be:d6:2b:
a8:5a:20:c2:ee:8e:27:5d:71:7e:78:e1:29:67:71:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4C:DC:0D:29:30:83:8B:6E:18:EB:1A:4A:BD:BD:BF:48:1D:55:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7CB3B1DEC0E211EF92D1E6A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:83:bc:71:79:70:78:8f:39:86:1e:db:cd:91:55:e2:04:4f:
04:25:01:20:90:da:a4:22:c5:7a:7a:22:80:8f:0a:24:da:50:
c5:45:eb:b0:1c:3e:2d:33:be:0e:d7:81:c5:75:67:18:bf:37:
5b:27:a8:66:9a:0e:6d:7e:96:fb:f0:f4:b2:9a:ef:2f:cb:69:
41:7f:81:5c:4c:97:25:66:e6:a0:a7:b7:a1:8e:cd:23:2d:da:
3c:6d:09:cc:3a:d6:a4:8e:c9:98:6c:26:25:71:a6:e4:dd:5d:
86:70:40:37:d7:42:ae:06:97:b0:3f:8a:fe:8a:52:e0:de:07:
7d:cc:f8:ed:fe:dc:1e:cc:1a:9a:80:f0:80:1d:ba:d5:09:3e:
01:db:6a:b4:20:b9:52:1e:ae:b5:2b:e8:d2:61:db:00:8c:78:
69:50:81:bd:d2:6e:55:6b:1d:4b:91:08:e7:43:3d:2d:04:48:
2e:fd:04:af:d5:64:6f:57:37:df:b7:7d:ea:bd:30:b0:c1:23:
02:a5:4e:bc:9c:dc:6d:34:cb:24:ea:a9:4e:c1:63:67:b2:17:
d8:0e:0f:fc:ae:34:3e:76:1b:0a:0b:ac:7e:0f:a6:e1:64:d4:
52:0a:a0:23:d2:f9:34:de:83:7b:5a:64:7d:92:cc:bd:9e:47:
f6:d4:59:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:23 2025 by rpki-client