Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9499054EF3D511EFB0087657762E951A.roa
File: 9499054EF3D511EFB0087657762E951A.roa (raw, json)
Hash identifier: HPqhqr8DA3EH7hsaH373+Uo+FFEmnLv5whi5jJwthnw=
Subject key identifier: 2D:C0:5F:E8:97:06:56:66:94:CE:C5:05:93:D3:56:36:8F:EA:73:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01602B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9499054EF3D511EFB0087657762E951A.roa
Signing time: Wed 26 Feb 2025 00:06:52 +0000
ROA not before: Wed 26 Feb 2025 00:00:48 +0000
ROA not after: Thu 19 Feb 2026 00:00:48 +0000
asID: 984
IP address blocks: 154.89.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90155 (0x1602b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:48 2025 GMT
Not After : Feb 19 00:00:48 2026 GMT
Subject: CN=67be5b1c-f26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a0:cd:19:55:84:e0:c6:aa:55:55:31:da:4e:
27:87:f0:be:ad:1a:15:38:de:f2:dd:b1:c9:46:a5:
5c:c1:06:a0:b0:36:a7:b5:94:ef:36:b3:94:9f:b1:
58:7b:5c:dd:36:06:ae:25:66:0a:94:a1:9d:f2:f9:
be:35:08:39:c1:5f:6c:c7:41:79:c7:e5:56:04:66:
3b:66:12:ef:92:bf:08:4c:91:5b:04:02:d3:b6:20:
ef:41:aa:1c:d4:74:0f:41:2b:26:4c:d9:f0:f3:2b:
54:4f:d8:34:e6:b6:d4:54:b2:f2:f5:67:f2:21:11:
0c:89:65:2a:1e:5a:7d:e3:0b:4e:94:68:e2:e2:5f:
e1:f7:48:85:4d:a7:cc:7e:94:de:ca:3c:5a:7f:35:
20:51:fe:e7:2d:b4:c8:6a:9b:91:c8:62:d0:6e:0c:
7b:d6:0f:56:3a:ed:22:ae:46:0b:df:69:01:e4:d6:
77:65:31:1c:40:fc:c5:6b:f5:fa:24:86:fe:15:37:
a6:b6:36:66:48:b8:8d:bd:12:c0:5b:b4:76:4e:2c:
00:bb:1b:2b:90:72:9c:05:71:84:15:c9:01:49:bd:
c9:78:ad:3a:20:de:cd:b8:f5:01:02:81:0e:f1:2f:
e2:39:77:2b:93:bd:b4:1f:03:e7:07:5e:4c:da:d2:
a9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C0:5F:E8:97:06:56:66:94:CE:C5:05:93:D3:56:36:8F:EA:73:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9499054EF3D511EFB0087657762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.232.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3c:94:54:c4:9c:0d:7a:7d:8c:1b:c2:58:97:a7:4c:15:69:
b4:fb:d9:45:8a:25:1b:45:1b:9f:bf:81:e9:7d:e2:da:6f:58:
ee:7f:9a:1e:75:9c:44:f7:79:05:79:0b:78:ce:d2:33:b2:51:
a7:63:47:3d:0f:c1:01:4d:b7:6a:3a:88:bc:1e:ea:ea:60:01:
8a:3e:17:0f:ea:21:62:01:32:4d:1b:78:3b:2a:fc:60:be:c9:
43:d3:4e:b9:5a:23:08:d0:03:76:57:ab:ee:d0:90:b8:3e:09:
27:4e:9a:c1:a2:2c:55:d2:a7:54:bb:39:3a:2e:2e:96:34:59:
20:28:25:2d:02:ce:12:b4:45:f7:bc:c6:7e:fe:eb:30:28:90:
b8:68:16:51:72:28:c5:92:47:6a:28:7f:b8:fd:37:e9:a1:58:
69:78:eb:39:b4:7a:32:d5:01:f2:85:0b:2b:23:09:4b:ff:2a:
da:94:09:77:16:f0:44:e2:89:c2:78:c0:83:44:0a:80:f5:9b:
b5:1b:03:d2:71:6f:46:97:00:a6:3c:b3:70:ed:a2:71:8f:1b:
b5:94:5e:5e:c1:3a:ee:30:d7:ae:75:03:30:20:99:ac:89:28:
c0:1e:f3:d4:1c:c5:5a:1d:b4:d4:9a:a6:2d:5d:0a:63:d3:7c:
94:29:4a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:11 2025 by rpki-client