Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86381948CDE911EFAC47237E762E951A.roa
File: 86381948CDE911EFAC47237E762E951A.roa (raw, json)
Hash identifier: 7cZmfcdxcp1UjVqa2Ql6sqc/cz60oZPOKdyLEtqYIs0=
Subject key identifier: 89:00:92:FA:5C:4D:87:C1:B7:24:2E:34:73:81:05:C2:99:B4:13:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137FD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86381948CDE911EFAC47237E762E951A.roa
Signing time: Wed 08 Jan 2025 17:53:53 +0000
ROA not before: Wed 08 Jan 2025 17:53:50 +0000
ROA not after: Sat 03 Jan 2026 17:53:50 +0000
asID: 984
IP address blocks: 154.89.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79869 (0x137fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:53:50 2025 GMT
Not After : Jan 3 17:53:50 2026 GMT
Subject: CN=677ebbb1-5422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:06:90:02:50:77:fe:3f:3b:63:05:14:09:
30:fb:72:e0:10:44:e2:e1:fd:1c:b5:f1:37:7f:a3:
84:7b:25:45:97:b1:49:1e:35:7e:12:fb:66:f0:c2:
57:a1:6f:18:5d:74:f7:a3:c2:91:4f:f1:c2:8f:6d:
63:3d:47:b1:6b:83:37:8e:2e:48:94:cb:a1:6c:2c:
de:d5:c6:1b:85:dc:4d:a8:e1:e6:1a:01:c6:fb:7c:
c6:bc:8f:fe:3f:1c:6d:73:98:24:f5:77:7c:0d:d6:
39:b9:d1:a4:0f:2d:b5:b8:ae:9e:6a:f8:c7:cd:23:
a5:f8:ea:39:da:50:86:95:ab:83:15:19:99:5c:5f:
8e:e9:e6:8d:c5:7d:f4:6b:5b:21:b4:ea:22:20:9e:
cf:1a:c5:e0:d6:31:d0:43:f7:0e:03:cb:30:5e:25:
c6:9c:7b:ea:e1:27:67:cf:25:26:3d:f3:26:a2:42:
6b:5f:03:ea:ac:80:a2:9f:0a:fc:48:a5:77:ce:17:
0f:49:46:d2:e1:3c:14:fc:64:94:41:fc:41:e5:0f:
fe:47:20:46:8d:64:e7:f5:81:a9:22:18:07:81:20:
09:7f:cc:07:3b:13:5a:f0:11:80:f6:e6:7f:5a:ca:
82:b6:f0:c4:ea:71:8c:4b:73:a7:ba:5f:17:a8:0d:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:00:92:FA:5C:4D:87:C1:B7:24:2E:34:73:81:05:C2:99:B4:13:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86381948CDE911EFAC47237E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.205.0/24
Signature Algorithm: sha256WithRSAEncryption
82:58:a6:13:45:2f:2e:9f:fc:f4:06:63:ff:d5:b7:63:26:00:
b8:af:c5:c6:12:52:df:84:58:f1:54:28:02:9d:0b:03:cc:c4:
3f:ef:5d:09:7e:18:c6:5c:29:4b:cc:36:a3:31:f7:39:63:eb:
33:1f:53:57:02:6a:38:d2:90:3d:1f:b1:84:d9:64:81:b3:cb:
00:fd:f9:e2:ea:d2:16:54:ab:68:88:c5:d5:09:bd:d2:76:09:
32:19:5d:18:b1:2a:a8:4e:8e:8a:21:b6:76:99:f0:44:b0:df:
1f:bc:f5:4b:b1:88:71:5c:06:17:77:16:9b:ed:ab:36:21:a2:
e4:99:b9:8a:a0:85:71:b1:cb:05:2d:1e:0b:75:e1:94:a9:12:
37:1c:f6:12:2e:24:6b:86:fa:fc:a0:9b:b4:51:64:8e:fe:1a:
f7:8a:f9:a7:aa:5d:bc:c6:42:38:a9:68:db:d8:51:3a:d1:b0:
15:16:c8:e3:4e:46:6b:e7:bd:1b:92:b5:24:7a:fd:2f:c9:04:
9d:9a:bc:c6:e8:02:d7:d7:7d:4f:55:15:a1:b8:f8:dd:a7:6f:
da:d3:13:3f:ae:9e:9f:54:6c:e0:81:db:45:65:bb:d2:2b:09:
e2:1e:41:52:1a:19:26:7d:62:92:e5:d9:fa:16:a0:ac:71:35:
58:81:61:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:46 2025 by rpki-client