Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DE26F8F81111EF837E0B6A762E951A.roa
File: 89DE26F8F81111EF837E0B6A762E951A.roa (raw, json)
Hash identifier: gdPgjd69GiAkjSHxqS1h8bK4oDWQWi4ZgT3lUSAjReU=
Subject key identifier: EC:55:12:33:E1:34:78:08:EB:AB:47:79:10:0B:9F:42:79:48:48:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016FB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DE26F8F81111EF837E0B6A762E951A.roa
Signing time: Mon 03 Mar 2025 09:26:08 +0000
ROA not before: Mon 03 Mar 2025 09:26:04 +0000
ROA not after: Fri 04 Apr 2025 09:26:04 +0000
asID: 61112
IP address blocks: 154.83.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94132 (0x16fb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 3 09:26:04 2025 GMT
Not After : Apr 4 09:26:04 2025 GMT
Subject: CN=67c575b0-7713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:89:0e:14:6f:06:63:1d:f1:ac:5f:00:1c:c7:
b9:30:1d:82:39:15:23:e0:b3:c6:6d:c2:c8:72:e1:
0a:50:e5:5a:e4:ab:d3:51:cc:4b:31:ac:17:59:9d:
56:6f:e6:d4:89:39:13:d1:63:3c:03:29:21:e6:0f:
84:3d:50:f2:eb:6f:6c:81:05:90:01:b4:d3:60:d0:
8c:ff:5e:b8:4d:05:70:79:a2:50:62:48:69:fd:21:
c9:86:35:c2:33:23:31:61:5d:dd:16:8d:24:94:c5:
7d:ed:4c:de:34:57:54:18:c3:b2:5d:b1:af:ce:1b:
17:24:49:73:73:af:f7:58:0f:cb:0b:e3:c4:1a:e0:
95:17:f6:2f:1a:24:ab:77:08:3a:82:d0:23:36:9d:
72:ee:2e:51:3c:5a:5c:db:2a:b7:67:ca:4f:18:96:
d6:5c:e2:6d:25:f6:b0:0c:ae:44:4a:d1:c1:a1:bb:
c4:b9:d7:7b:88:b2:f3:bb:e7:59:27:b1:6e:7c:95:
84:07:e3:2b:d3:5f:c9:0e:4e:f6:1f:73:45:e9:a2:
76:d5:3e:15:ab:b4:fd:7d:c5:11:56:4b:af:da:2c:
7c:8c:db:ce:ba:e6:3a:d8:2e:d1:2c:72:3a:68:81:
18:2e:9e:d9:10:26:d4:9d:e7:30:8f:05:19:e5:ff:
ad:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:12:33:E1:34:78:08:EB:AB:47:79:10:0B:9F:42:79:48:48:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89DE26F8F81111EF837E0B6A762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.84.0/22
Signature Algorithm: sha256WithRSAEncryption
73:05:9b:3f:26:ca:fe:31:b8:c8:76:ab:ec:4b:7d:15:ec:0a:
26:5a:90:90:52:2c:98:b8:a2:c6:1f:a5:0c:99:d2:32:6e:63:
50:12:81:8f:94:ae:bf:5f:5e:62:02:86:b4:b9:0b:5a:08:ae:
5f:24:38:0e:0d:c2:51:16:8a:8e:b7:ba:20:52:64:fd:54:bc:
e6:47:61:96:9f:f9:de:82:8a:95:a6:d9:b9:68:88:86:4c:88:
60:1a:92:2e:cd:3c:94:0c:11:a6:ce:4f:c6:5a:87:f0:13:1d:
7a:63:42:d9:17:45:fe:53:8c:8c:58:63:59:15:28:9c:c0:07:
f6:50:27:cc:dc:e9:46:70:03:07:93:2c:9c:6d:47:61:33:2f:
7a:35:b9:0b:5a:45:5b:4f:62:79:04:ab:3d:13:52:97:b1:d4:
ae:ca:c0:02:36:f9:48:2b:f7:76:a1:08:9c:bc:80:86:ba:45:
63:4b:f0:d1:6d:36:af:db:63:e0:da:11:ae:60:51:45:ae:25:
c0:bf:68:60:83:76:1c:74:b0:8d:37:4e:b6:ce:a8:13:48:59:
55:35:db:96:e1:7b:5d:f7:52:2c:e0:df:a2:2c:d5:28:d9:1e:
c4:02:42:34:6d:0e:22:c8:01:79:7b:1c:9f:93:81:53:dc:82:
b1:72:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:37:42 2025 by rpki-client