Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89E1ABE4CF5C11EFB0275CBC762E951A.roa
File: 89E1ABE4CF5C11EFB0275CBC762E951A.roa (raw, json)
Hash identifier: CyKJQh+7+b4asqWw2yQwcU6lrXlLs0IhwPys6BDScOQ=
Subject key identifier: 4E:6B:A0:55:E6:C7:C7:90:71:F3:A7:99:63:FD:01:20:0B:6D:0A:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0139F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89E1ABE4CF5C11EFB0275CBC762E951A.roa
Signing time: Fri 10 Jan 2025 14:09:43 +0000
ROA not before: Fri 10 Jan 2025 14:09:39 +0000
ROA not after: Wed 10 Dec 2025 14:09:39 +0000
asID: 984
IP address blocks: 154.199.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80371 (0x139f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 10 14:09:39 2025 GMT
Not After : Dec 10 14:09:39 2025 GMT
Subject: CN=67812a27-0584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:3e:fb:8d:d5:a9:2c:8c:38:c7:fe:dd:87:
cd:7b:21:44:69:4e:93:57:6d:67:16:5b:0c:8b:9a:
e9:dd:a1:de:12:49:0c:d0:01:25:ab:47:8c:83:3b:
66:d9:49:67:36:72:db:7b:0f:6d:c1:d0:bf:3f:c0:
c0:bc:07:1a:63:14:52:c1:75:70:dd:70:6e:54:6a:
e5:06:0b:eb:a3:94:17:0f:0f:2b:f8:29:c4:9e:f8:
21:ee:a9:6b:f6:fd:fc:db:75:19:7e:65:43:63:d0:
5d:91:c0:35:b1:12:1c:e9:bb:6b:1c:4e:bc:33:46:
eb:65:93:5a:f7:05:fb:62:5a:ff:ed:a6:4b:9c:6d:
61:c6:77:14:8a:b9:1c:47:32:c1:d0:ee:a2:35:5e:
58:eb:6c:02:f6:7c:07:cc:cb:ee:35:9e:a7:e8:97:
84:e0:37:a9:0b:52:4a:2e:2d:e9:e3:b2:85:18:8d:
7b:7b:d7:83:14:81:a9:c3:14:46:e5:11:c6:ff:6c:
b3:79:81:15:46:1c:ac:7d:4c:76:61:00:ef:83:80:
df:06:ad:b6:d6:79:1a:0d:ce:3b:96:17:d2:72:ea:
71:70:77:db:34:a3:cf:79:a6:0b:78:d8:38:cb:2a:
40:57:5e:96:b0:f8:63:da:13:34:62:c8:44:94:21:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:6B:A0:55:E6:C7:C7:90:71:F3:A7:99:63:FD:01:20:0B:6D:0A:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89E1ABE4CF5C11EFB0275CBC762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.205.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:98:e6:31:60:5e:69:b3:33:10:6b:7b:3a:8b:10:b6:1f:60:
c4:4a:c3:86:7f:e5:4a:18:c1:af:9c:0c:ca:44:a7:60:36:e7:
44:21:21:ce:1d:0f:c0:fc:11:62:11:ea:fc:cb:54:cf:dd:cc:
36:e9:6f:45:6e:5c:9f:aa:71:43:fc:8a:9c:3f:7f:0d:14:e3:
d5:87:f5:9c:b4:02:fe:94:33:d1:ef:e4:64:84:4f:e0:15:1d:
1c:7d:b6:98:d3:7c:70:56:8f:c8:1c:73:02:ae:35:36:ef:c8:
67:4c:61:5f:07:3a:b8:4b:a6:d5:b3:fe:31:c0:2f:c4:9d:7c:
fa:ad:44:f4:26:8f:b3:e4:c0:25:9a:30:ce:f0:d4:21:5a:0d:
8a:35:e6:e3:a2:81:1c:83:ac:57:c1:f1:70:34:21:01:45:d7:
27:97:85:fe:a7:89:90:6e:96:96:50:d0:c6:ef:f3:6b:55:dc:
22:5c:f2:dc:b3:56:1b:25:61:4b:8a:5d:69:71:ce:a5:28:55:
03:6e:69:28:3a:9e:cb:76:6a:59:9f:f1:bb:e8:13:6a:19:34:
98:d1:06:a0:88:ec:9c:83:c9:a5:f6:65:d7:d8:a4:65:ef:6a:
2e:5b:9d:73:dc:e1:e2:65:fa:1c:54:53:b3:cc:c8:37:ac:8d:
2c:71:a5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:57:30 2025 by rpki-client