Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D698E0F3D811EFB886AD6B762E951A.roa
File: 83D698E0F3D811EFB886AD6B762E951A.roa (raw, json)
Hash identifier: bdkF3fnN9hGyAX/sbsljVleVUBjWLlY6kWXsepSRSLk=
Subject key identifier: 1F:EF:FD:1A:9F:46:E5:C7:99:ED:2C:FC:15:FA:FB:B9:16:41:E8:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01603B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D698E0F3D811EFB886AD6B762E951A.roa
Signing time: Wed 26 Feb 2025 00:27:52 +0000
ROA not before: Wed 26 Feb 2025 00:00:48 +0000
ROA not after: Thu 19 Feb 2026 00:00:48 +0000
asID: 984
IP address blocks: 154.89.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90171 (0x1603b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:48 2025 GMT
Not After : Feb 19 00:00:48 2026 GMT
Subject: CN=67be6008-8069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:1b:5d:e7:b0:18:f4:f7:ae:7c:cc:1d:9a:
35:f7:83:92:d9:62:a3:cc:7b:ed:f5:b1:25:93:dd:
07:87:aa:ae:c8:f8:32:87:f3:75:ec:b7:d2:23:b1:
6a:96:86:b7:c5:ba:be:24:68:7e:39:d9:c4:2a:da:
d5:83:68:15:a3:67:07:d6:c0:57:65:0c:f8:fa:58:
13:af:e6:52:f5:fc:cc:65:b4:bd:90:80:d9:7c:c4:
f3:5e:43:90:d6:ee:1e:20:86:c2:6b:3f:86:cf:d1:
88:ce:4b:5a:24:f5:67:40:a8:34:78:57:99:64:26:
58:41:1b:2e:9c:86:0d:3e:57:00:72:14:ca:d3:a9:
58:b0:cc:61:d8:84:56:17:f8:2b:56:37:d7:40:6e:
07:df:1d:9d:f9:16:c4:dc:f9:c7:79:1a:42:5d:68:
32:2a:57:8e:ca:d1:9e:16:44:d9:18:5d:30:e7:41:
f3:03:dc:85:ca:fe:b9:35:16:0f:fb:fc:88:3e:9c:
b3:8a:9b:df:9c:06:c6:18:9b:3a:27:e6:6d:e4:33:
6e:0c:a5:87:7c:6a:7d:fc:b8:7c:8b:a6:2b:d5:4f:
98:e2:07:b0:d2:a3:eb:55:a4:f9:f0:af:66:2d:2b:
4a:d7:be:ff:b6:4b:c3:6b:b1:d3:c9:d2:e9:93:7b:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EF:FD:1A:9F:46:E5:C7:99:ED:2C:FC:15:FA:FB:B9:16:41:E8:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83D698E0F3D811EFB886AD6B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.240.0/24
Signature Algorithm: sha256WithRSAEncryption
94:40:11:88:99:4f:aa:12:ff:63:a3:a1:1e:dc:d7:77:aa:ad:
08:08:26:1e:20:ff:a8:59:72:7e:2e:d2:03:28:61:d7:f4:1c:
24:86:3c:14:da:b8:a1:0a:fb:1d:13:77:ff:7d:cd:62:ab:c3:
8f:cf:2d:7c:9b:e7:1e:74:05:30:7c:63:a3:47:55:41:ca:13:
5c:a5:19:35:48:bc:42:4d:f6:b6:7d:8c:89:b7:2e:61:9a:cf:
cf:86:ea:5d:78:e1:50:98:9c:f8:fc:1d:a3:b6:4d:3a:d3:93:
37:68:fc:82:49:29:66:b0:4b:46:31:f8:c0:d0:16:5c:d9:19:
10:5c:cd:5e:4d:32:61:0b:a6:4a:ac:74:65:de:26:1d:59:bd:
0a:3d:28:1d:f9:0c:05:cb:e1:db:c8:d6:68:61:ad:10:93:dd:
0e:31:ea:5c:6c:82:99:ef:fd:e8:fa:56:d5:c1:9e:d6:93:80:
4b:67:9f:78:85:c0:cf:eb:b8:d6:d5:1d:ce:0c:a6:ad:f7:dc:
7b:f7:81:43:c3:83:56:44:7a:3c:08:2a:a8:ab:21:d9:6b:9c:
4d:eb:9c:5b:ed:db:fa:9d:37:ea:3d:2b:d6:f8:83:08:9a:95:
2d:d3:bc:d8:ee:64:56:4a:fd:49:e4:48:f9:40:aa:0e:32:92:
31:e6:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:27:25 2025 by rpki-client