Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6F68932CDD811EFA9B25295762E951A.roa
File: A6F68932CDD811EFA9B25295762E951A.roa (raw, json)
Hash identifier: VbKlq7wyJFw3hLDZMQ+aRRQqCwsA2FJJtFKz+FIqTAQ=
Subject key identifier: 81:05:7B:C5:BE:9D:04:C5:6E:A0:27:74:D6:67:3F:30:D2:04:DE:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01377F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6F68932CDD811EFA9B25295762E951A.roa
Signing time: Wed 08 Jan 2025 15:53:07 +0000
ROA not before: Wed 08 Jan 2025 15:53:03 +0000
ROA not after: Sat 03 Jan 2026 15:53:03 +0000
asID: 984
IP address blocks: 154.89.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79743 (0x1377f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:53:03 2025 GMT
Not After : Jan 3 15:53:03 2026 GMT
Subject: CN=677e9f63-b7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:89:95:55:9f:eb:5f:64:de:9f:74:ce:1d:
e2:eb:d6:be:95:0e:70:c5:8d:bc:94:6b:6d:d9:a4:
e9:68:53:85:6f:e1:8c:9e:e0:c0:a5:5d:16:de:8b:
cb:05:2c:48:f9:db:fd:49:6e:91:46:f8:76:51:ba:
47:37:4d:91:3a:10:18:96:21:ac:77:72:08:22:6a:
5d:0d:d6:14:d3:81:fb:7f:fa:cc:68:9f:2f:f1:b3:
7b:25:19:25:fd:ac:73:e5:30:63:22:ba:a6:ea:c5:
de:01:c1:dd:80:a2:36:89:a6:9c:86:83:ca:c2:7d:
3f:01:61:0c:c5:4c:18:6d:d4:77:4f:d3:c6:04:26:
e6:91:5b:a3:19:b4:d3:7e:83:d8:e9:68:ac:d1:dc:
6f:6e:f9:da:d5:ea:22:fd:d6:68:bb:5f:50:69:64:
40:94:bd:80:41:ea:48:4f:09:a3:27:c8:61:19:a4:
d8:f0:8b:87:eb:17:c2:5a:8b:4e:c0:c5:67:85:67:
a6:43:a3:1c:a9:d3:86:64:02:13:92:ec:32:02:ce:
e5:e9:17:ed:48:64:09:4d:54:7e:11:ff:e2:5d:08:
14:ae:2e:f8:9b:a7:57:ec:a7:9c:f8:22:bb:9f:a7:
e7:c6:a1:26:d3:24:1b:a3:09:4f:a1:ea:5e:71:88:
47:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:05:7B:C5:BE:9D:04:C5:6E:A0:27:74:D6:67:3F:30:D2:04:DE:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6F68932CDD811EFA9B25295762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.142.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:a5:11:ba:da:76:0f:8b:66:89:11:44:c8:98:20:8d:bd:d2:
28:0b:7a:9d:be:a9:c6:38:88:d5:c4:0c:b0:a4:0a:a2:d8:87:
c5:62:2d:75:c8:f2:a7:ed:a6:45:50:4a:e1:75:0a:9e:f6:bf:
8c:52:2c:9c:61:46:36:4a:c6:52:28:c3:c7:41:26:a4:48:13:
93:b6:41:aa:6e:09:48:b5:4b:d4:7b:e4:7a:8c:30:93:47:44:
5e:a5:a9:24:a2:8f:7a:82:3a:5d:f8:6d:4c:ad:36:a6:d7:9d:
9e:4a:cb:60:ea:cb:20:31:40:a6:58:46:f1:95:70:aa:cb:6a:
2f:9d:d1:13:16:ff:2c:9f:62:f5:13:b3:be:bf:4f:66:c0:fa:
9b:73:fc:aa:22:73:21:25:5d:b8:f8:b6:ae:49:8f:74:29:42:
0a:e9:89:b3:7d:ce:bf:2a:42:ec:c8:75:22:f4:08:95:21:73:
70:c7:45:e9:20:04:f4:49:5b:c0:3a:0c:83:62:76:72:f8:57:
42:8e:1e:67:b1:07:5b:f7:66:42:8b:2c:fa:99:d4:8a:59:a6:
8b:26:99:e9:fe:ea:b5:53:a7:53:6f:0a:b7:35:91:50:ca:6f:
85:30:b4:e6:7c:ea:f7:79:aa:7f:3e:aa:c3:e2:bd:90:97:32:
c5:2c:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:53:55 2025 by rpki-client