Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A49C8D38C0E211EF892043AA762E951A.roa
File: A49C8D38C0E211EF892043AA762E951A.roa (raw, json)
Hash identifier: 8gvQDWPlWPV0IzXcKhgM2d654ZqirgxzPYr3WyK8I+Q=
Subject key identifier: 15:FD:A2:75:9E:B0:7C:03:23:99:E4:C2:84:94:AD:48:7C:38:5B:F0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A49C8D38C0E211EF892043AA762E951A.roa
Signing time: Mon 23 Dec 2024 04:01:53 +0000
ROA not before: Mon 23 Dec 2024 04:01:49 +0000
ROA not after: Wed 10 Dec 2025 04:01:49 +0000
asID: 984
IP address blocks: 154.89.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73472 (0x11f00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 04:01:49 2024 GMT
Not After : Dec 10 04:01:49 2025 GMT
Subject: CN=6768e0b1-a453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:80:04:36:82:5d:78:d4:98:d7:a6:df:66:
b7:d8:98:d8:d0:89:cc:1c:71:d4:f8:b6:1d:6a:ce:
2e:d0:50:e7:fd:42:32:7b:6a:ba:13:4f:c3:b7:1f:
f0:5e:ce:7d:21:53:be:67:fa:7a:bc:46:c6:33:23:
fb:9f:f2:d0:bf:75:55:9d:73:68:46:5c:ce:45:85:
4a:9f:c0:22:bb:0c:a0:2e:70:d3:a3:50:44:83:ba:
e6:ee:dc:b0:d7:e6:80:e8:77:8b:2f:b5:b2:5a:d6:
7c:ca:91:ef:6a:61:14:21:6c:2c:9e:eb:46:d3:ac:
00:23:43:44:31:13:a8:d6:42:c5:a6:5c:fd:c5:16:
7b:d6:16:0f:53:32:45:1c:0a:be:76:94:ca:ba:08:
69:46:a9:5b:04:0c:f0:a9:49:07:a0:5b:51:84:4a:
11:00:26:0e:44:c9:8b:fd:d4:a6:a6:19:6b:8b:4f:
b2:3b:87:03:72:a4:4f:2b:1e:c2:7f:25:d9:e6:57:
0d:1c:45:19:89:d3:0c:6f:d9:e7:97:05:69:a3:c0:
7f:c0:47:ba:d5:c1:88:1e:1f:66:e9:84:b3:30:db:
5c:ed:ec:17:61:68:9b:ff:f7:d3:d4:75:51:fa:b8:
18:c0:0d:bd:3d:29:ed:a9:fd:9b:f7:e4:c8:c5:c8:
14:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FD:A2:75:9E:B0:7C:03:23:99:E4:C2:84:94:AD:48:7C:38:5B:F0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A49C8D38C0E211EF892043AA762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.222.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d7:26:b6:06:c6:e0:49:c1:87:84:17:5c:34:1d:3c:ad:13:
34:05:6c:de:99:fa:21:eb:ab:0d:8b:9c:eb:58:23:62:8e:2a:
1e:1b:13:0b:e1:1d:66:99:69:b0:a9:df:6c:62:66:4e:e2:fe:
5a:50:de:e3:98:72:53:e9:09:00:1f:7b:27:42:96:02:b2:d4:
88:60:a5:df:f0:1f:8c:ee:23:9e:02:25:e8:d8:a9:8d:6e:d8:
1b:cc:61:dc:85:c1:b8:b8:5c:fd:ae:c5:34:97:8a:ae:c0:11:
66:f7:d1:c8:f8:a8:b3:be:36:ea:9a:69:e3:39:fa:8e:d8:70:
7e:d7:61:2a:ef:1a:23:92:6d:4f:aa:90:b3:fb:78:39:56:df:
54:2d:94:91:dd:cd:b5:ec:f9:34:ab:a2:11:69:d4:34:2c:b1:
a5:91:2f:ea:7c:e6:f9:83:ee:59:f9:ca:42:7e:73:64:84:78:
5b:50:c0:43:80:b8:fc:34:00:e6:5d:f8:ab:de:f7:ff:33:17:
74:3a:03:02:31:b8:18:35:12:82:d9:4e:79:b1:14:3e:57:62:
74:53:af:78:34:70:e9:69:56:8d:02:31:8c:72:c6:5b:ec:49:
89:1d:f7:7f:79:ed:f5:ad:38:d4:ee:98:5e:97:ce:3e:6c:bb:
cc:38:76:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:29:18 2025 by rpki-client