Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85DF786AC0DD11EFACE44088762E951A.roa
File: 85DF786AC0DD11EFACE44088762E951A.roa (raw, json)
Hash identifier: 8jDBHQpYdzX5Fe4i0yJQwODiTv43c02craaWf8usVEo=
Subject key identifier: 59:F6:EC:7E:4C:9F:57:4A:5C:45:63:22:EB:2B:FA:4E:92:83:1B:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EBE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85DF786AC0DD11EFACE44088762E951A.roa
Signing time: Mon 23 Dec 2024 03:25:14 +0000
ROA not before: Mon 23 Dec 2024 03:25:10 +0000
ROA not after: Wed 10 Dec 2025 03:25:10 +0000
asID: 984
IP address blocks: 154.89.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73406 (0x11ebe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:25:10 2024 GMT
Not After : Dec 10 03:25:10 2025 GMT
Subject: CN=6768d81a-0031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f5:b5:9b:a4:81:ca:33:e3:a4:71:79:b6:cb:
14:ff:13:1e:9b:a3:2c:bc:25:7f:31:c3:77:83:c6:
bd:ef:31:a0:83:76:2d:5f:06:1d:dc:0e:83:45:67:
ce:8c:8f:2b:7e:e4:c8:81:19:4e:fa:bb:33:a9:7b:
68:90:1c:9d:4e:94:5f:aa:bc:9a:c3:84:19:e2:b1:
dc:42:4a:54:73:5c:d9:ef:db:61:6f:3d:02:16:88:
17:f7:27:1a:9f:4a:e6:06:00:4c:c8:c7:a9:52:e5:
32:d2:31:57:2f:ab:da:03:44:50:f1:76:e9:f3:27:
b1:4d:87:6a:95:59:9a:0e:2b:ce:ad:98:53:91:60:
b7:92:27:69:26:21:21:35:8c:19:a3:19:31:7d:f0:
c1:5d:41:10:48:f6:52:da:7d:0c:08:51:ce:9a:8a:
53:98:24:26:4d:5e:f5:44:41:98:b5:e1:b9:23:65:
15:87:f0:1a:17:bd:d5:df:35:30:b9:5d:05:e0:d0:
89:40:d4:27:5f:f1:d2:5c:8a:65:ef:bd:fb:f9:1a:
76:ac:40:0e:cd:d2:ab:a9:09:50:e4:50:2c:a3:3e:
10:40:52:20:a8:66:47:15:f9:48:02:01:b4:0a:3e:
dd:8a:0d:4d:59:fe:12:04:6c:5e:83:cf:c7:19:69:
4d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F6:EC:7E:4C:9F:57:4A:5C:45:63:22:EB:2B:FA:4E:92:83:1B:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85DF786AC0DD11EFACE44088762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.189.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0a:3f:5b:e2:c1:83:53:c2:65:97:2f:78:17:6b:a4:7d:d4:
19:a5:b7:66:64:a2:9c:39:52:22:f2:91:79:72:e9:f4:0d:8e:
d4:e3:b9:c2:99:2a:55:59:ff:33:9a:61:7d:fe:20:05:d0:a5:
c4:a8:cd:97:59:e0:a8:d3:ae:a0:b2:45:6b:0e:23:e2:46:33:
6b:05:b7:8d:1f:50:ba:cd:ed:d9:45:a5:8b:80:18:05:29:9b:
f7:12:32:46:42:82:2f:72:e3:af:a8:db:13:b3:08:1c:b3:9f:
e8:5d:ef:1b:7d:b5:98:45:2c:d2:66:3f:32:1c:18:33:8a:59:
63:74:a7:af:b7:0f:f4:aa:27:f7:ce:61:7d:22:27:a4:41:af:
d1:c5:db:22:46:3a:d2:f5:5d:79:05:d9:ff:0a:78:15:3e:f0:
83:4c:0a:86:c4:14:86:18:a3:3a:97:c4:48:05:64:7a:4a:c7:
59:1e:75:fb:52:36:f1:84:c9:38:5c:0d:5e:71:56:d6:59:cd:
55:bf:59:3b:fa:69:d0:55:77:22:e0:6d:07:9a:c9:44:bf:3e:
48:a3:05:46:c8:7f:08:5b:1c:f7:9f:74:fb:7b:31:9e:a8:1a:
eb:50:74:e9:21:1e:ec:86:b1:00:d9:7b:70:12:f8:d6:95:26:
cc:c7:df:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:16:00 2025 by rpki-client