Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89262C28C0DB11EF82C4857B762E951A.roa
File: 89262C28C0DB11EF82C4857B762E951A.roa (raw, json)
Hash identifier: 6OAsbpSUG3LtpdqsEth7gZ40FZRe6GA4jUtZptFQyGU=
Subject key identifier: 66:34:72:E4:49:51:47:EA:24:E3:B1:81:B2:10:3F:F7:FD:68:B0:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EA4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89262C28C0DB11EF82C4857B762E951A.roa
Signing time: Mon 23 Dec 2024 03:11:00 +0000
ROA not before: Mon 23 Dec 2024 03:10:57 +0000
ROA not after: Wed 10 Dec 2025 03:10:57 +0000
asID: 984
IP address blocks: 154.89.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73380 (0x11ea4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:10:57 2024 GMT
Not After : Dec 10 03:10:57 2025 GMT
Subject: CN=6768d4c4-1e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0d:53:b6:b7:21:7c:22:90:46:80:1f:e0:b0:
46:95:3a:25:9e:df:c7:6c:76:36:23:64:9e:17:eb:
8f:17:3e:06:c4:dd:08:77:38:7a:37:53:a3:16:cd:
52:87:d8:d8:25:75:7e:2d:be:9b:fd:24:fb:e4:06:
06:a6:0a:9b:55:20:10:95:4e:50:be:fc:1e:db:6d:
74:98:7f:5e:42:58:b5:55:b9:f3:ac:98:47:f2:89:
64:df:61:dc:cb:af:19:70:db:a1:7a:50:d4:ba:2c:
83:e0:7a:20:9a:10:bf:39:e6:a7:e7:97:31:70:02:
20:c5:7e:f6:db:c8:ed:7e:a1:8c:d1:4e:8b:d8:bc:
f0:28:8a:ed:e2:0a:73:d8:6d:94:af:e2:71:9f:9c:
4c:20:c3:9f:b1:33:01:0f:29:e9:3e:6a:92:03:80:
da:fe:d4:12:9b:7f:58:da:62:60:f1:96:7a:18:53:
28:1c:9b:89:be:ca:3f:03:0f:af:4a:bc:31:eb:ca:
91:15:cf:4f:a3:3e:fb:09:d5:99:0b:98:cb:e4:96:
07:34:eb:62:17:1c:90:f2:66:77:c0:96:7f:74:1e:
ce:9d:66:d9:3c:1b:20:08:1c:69:db:0a:c4:55:57:
86:9b:90:6a:ea:c4:d8:bd:b9:6e:51:4c:95:d2:5d:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:72:E4:49:51:47:EA:24:E3:B1:81:B2:10:3F:F7:FD:68:B0:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89262C28C0DB11EF82C4857B762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.176.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6a:21:36:fc:0b:22:12:84:ad:fe:6e:0c:b1:55:1d:a8:c9:
6e:23:57:9e:74:0c:92:2a:44:39:09:fc:36:39:8f:25:dd:b9:
1d:7d:cc:6c:6a:2f:ce:f8:23:95:1a:ea:e3:a5:bb:6a:c9:dc:
9a:70:76:5d:05:40:20:7d:ad:d1:f2:3f:c0:a6:c0:38:94:bb:
f4:05:e0:1a:36:b7:c0:54:eb:3c:c3:e5:35:d2:a0:8c:00:8a:
51:ec:43:94:96:32:d7:0d:aa:de:83:33:20:88:75:ea:e5:18:
df:60:5f:6d:c7:e8:e9:0e:07:6a:ba:99:ed:fa:9e:46:cb:68:
44:96:23:6e:b4:e9:42:32:90:e1:fb:4c:cb:60:55:b1:17:0f:
23:a1:de:db:33:ec:e8:80:20:d6:09:a0:bd:59:88:4e:21:f1:
3d:64:22:34:87:0a:54:6f:c1:79:54:37:c4:32:68:97:31:cd:
5d:a2:a2:e7:a8:92:7c:8b:16:18:91:5c:17:77:57:ae:36:ea:
db:db:ab:95:d3:40:24:0a:83:de:d4:72:c5:5d:82:dd:03:35:
cc:9f:f0:d7:16:30:ab:eb:51:8e:b2:b8:07:fb:f3:d9:01:2f:
56:6c:9e:c4:04:32:91:0d:3b:75:12:59:10:fc:97:fd:bd:3b:
f8:a1:a4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 04:06:04 2025 by rpki-client