Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF3F54ECDDE11EF8DE3CAB9762E951A.roa
File: 9DF3F54ECDDE11EF8DE3CAB9762E951A.roa (raw, json)
Hash identifier: SqS6UkbTD5c8rvWkbV1kZNQ8H6UWFEfImUCkawhWEf8=
Subject key identifier: 93:1C:1B:57:47:24:3B:C3:5B:BF:52:94:79:E7:2D:EA:41:43:A8:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137AD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF3F54ECDDE11EF8DE3CAB9762E951A.roa
Signing time: Wed 08 Jan 2025 16:35:49 +0000
ROA not before: Wed 08 Jan 2025 16:35:45 +0000
ROA not after: Sat 03 Jan 2026 16:35:45 +0000
asID: 984
IP address blocks: 154.89.165.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79789 (0x137ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 16:35:45 2025 GMT
Not After : Jan 3 16:35:45 2026 GMT
Subject: CN=677ea965-9666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a3:81:4b:74:34:e8:63:27:fc:37:6f:ff:f1:
70:85:30:03:e9:0c:6f:28:4b:a4:30:9e:17:00:65:
49:94:a1:4b:74:92:c3:1a:c3:fa:9c:87:12:8a:32:
24:d8:2e:45:80:be:fe:3c:27:18:e6:ca:f4:a2:e6:
e2:b2:0f:36:ae:40:21:60:2d:a9:2a:7f:bc:e6:f8:
1f:7b:25:80:ea:07:9d:a4:47:fb:8d:e0:07:fb:2b:
12:ca:a6:5d:5d:88:e9:b9:31:23:3c:fa:9b:d4:6e:
a0:db:c0:bb:f3:b5:25:12:cf:04:49:dc:57:d9:0a:
96:84:a3:38:d4:12:44:26:6a:d6:13:45:1d:be:96:
9f:5a:35:21:e7:7b:71:8b:0a:60:70:e3:22:09:14:
1f:72:6f:86:cb:87:3c:01:71:ca:b2:03:fe:7c:5b:
72:ab:04:74:59:b2:ef:53:94:4b:1a:df:c3:50:50:
34:70:95:85:1c:83:61:3d:61:de:5b:ef:1a:ff:aa:
1d:92:50:f8:14:bd:1f:33:c7:80:b0:fc:df:cb:a6:
11:8e:1d:d2:5b:0d:dc:6d:b7:c4:c1:aa:67:4a:e1:
01:8a:81:5e:8f:59:fc:4a:09:ad:2c:7a:77:91:f3:
e5:3e:fb:66:1a:2f:29:25:35:47:54:bf:a0:34:31:
37:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1C:1B:57:47:24:3B:C3:5B:BF:52:94:79:E7:2D:EA:41:43:A8:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF3F54ECDDE11EF8DE3CAB9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.165.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f3:1f:cd:74:6d:3f:2c:ab:ca:91:39:b4:e4:34:5e:7d:9c:
cb:72:9d:40:b2:d1:a4:a3:a4:b0:42:1c:d5:5c:45:09:83:fc:
77:b6:4c:a4:41:cd:7a:cc:25:3c:7c:8e:80:75:8f:47:37:5b:
02:72:3f:21:8d:64:97:e4:47:6a:4d:2e:0f:e2:42:ee:1f:71:
e8:9c:1c:fa:af:8b:03:f7:c8:a3:06:9d:b6:02:84:5b:b3:eb:
ac:d8:83:6e:f3:40:37:2d:d7:ec:c3:42:30:a1:a5:11:e6:fc:
fa:f3:44:20:b2:e7:41:1e:8f:e0:bb:ef:53:3f:3b:01:fe:c9:
77:4f:25:48:cf:f8:f1:40:b3:83:63:c1:7a:29:9d:7d:7c:47:
0b:13:2a:b6:fd:9b:ce:6c:d4:f7:a0:ba:7a:7f:fa:14:e6:69:
5c:0c:6b:59:6e:9b:6b:78:27:7e:ad:f5:f4:26:88:84:67:5d:
4f:d5:7a:35:c0:e2:04:59:69:f1:17:fa:5f:9f:6f:b0:30:25:
08:2e:1d:b2:cb:30:90:76:39:bd:ce:58:cf:97:c9:36:36:4a:
b3:42:de:07:0d:a3:91:85:9f:6a:95:0b:86:db:50:1e:e6:27:
36:57:f6:c6:90:f6:8f:23:09:37:10:78:30:1f:f5:ca:c0:9a:
aa:8f:ea:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:56:58 2025 by rpki-client