Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA79ADCC0E411EF879201B7762E951A.roa
File: AEA79ADCC0E411EF879201B7762E951A.roa (raw, json)
Hash identifier: 6ekAGnMVQ6ntyFn78ES6Nd9827sKDgEstTMnZKHpZ4U=
Subject key identifier: C8:78:CF:19:F1:BF:11:F6:BE:57:1D:10:8D:52:7A:05:6F:E1:2D:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011F1A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA79ADCC0E411EF879201B7762E951A.roa
Signing time: Mon 23 Dec 2024 04:16:29 +0000
ROA not before: Mon 23 Dec 2024 04:16:25 +0000
ROA not after: Wed 10 Dec 2025 04:16:25 +0000
asID: 984
IP address blocks: 154.89.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73498 (0x11f1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 04:16:25 2024 GMT
Not After : Dec 10 04:16:25 2025 GMT
Subject: CN=6768e41d-5b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:59:9e:02:b1:37:86:6c:12:38:fa:27:9a:b9:
ef:bd:70:d6:c3:6d:35:35:1b:98:4a:b0:39:c0:06:
f2:3f:9f:5d:c2:27:e2:c1:8d:74:9e:4e:76:94:27:
d3:61:6e:b3:b1:89:c1:13:52:39:2a:4a:4b:be:9d:
b5:6b:04:69:5d:7f:86:96:d6:06:81:56:d4:84:71:
b0:40:55:a7:da:24:b2:1c:d9:2b:d0:d0:67:ac:ec:
cf:2e:3a:ee:8e:de:1e:4c:62:d9:4b:6d:f1:5c:93:
eb:f1:02:1d:0b:d8:fc:22:35:1b:22:28:a9:41:2a:
4c:df:60:67:8d:f1:16:10:3b:cf:76:2e:5f:c5:68:
84:2a:b5:55:5c:43:14:9a:97:ab:a0:78:97:f2:46:
d7:9a:de:1d:ad:d7:d4:d5:e9:03:64:ef:16:ff:8b:
f4:9a:d4:fb:e9:f8:73:0a:3e:18:30:7d:e1:0d:d6:
e9:b6:03:61:f6:bd:31:ae:8e:98:76:11:24:0a:33:
b9:81:3d:0f:21:a6:12:d9:9d:9e:05:8b:18:35:c0:
28:c4:74:c7:f5:d2:5b:1d:99:36:c9:c9:26:07:8f:
4a:b4:b9:50:e8:8c:57:b6:2e:70:58:ae:26:86:96:
72:6a:9a:df:b4:0c:bf:c9:f8:9c:62:ad:b7:04:80:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:CF:19:F1:BF:11:F6:BE:57:1D:10:8D:52:7A:05:6F:E1:2D:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AEA79ADCC0E411EF879201B7762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.252.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:94:59:70:cb:af:99:51:9f:b9:1c:36:7c:f1:f7:e8:e9:49:
4c:90:a8:ce:b5:b8:9d:c0:ec:6c:37:20:b7:39:29:03:19:34:
c9:fb:07:60:e7:12:c7:54:5d:fc:8a:50:c0:b9:2d:48:08:23:
dc:f8:35:e8:8f:01:92:1a:41:8e:d3:70:1f:d7:c8:82:d7:de:
b7:f8:24:6d:da:5a:25:d0:b3:a4:48:56:39:dc:a1:f3:57:9b:
c6:3a:c9:0f:36:64:5e:3c:e8:66:63:ef:7b:4e:00:d9:2d:9d:
21:18:13:64:ee:84:3a:0e:53:bf:dd:22:4e:26:f1:b2:1f:99:
8e:21:8a:7f:36:f5:76:c6:f7:d9:19:8a:17:0d:64:8c:60:ac:
16:b3:a4:20:27:81:1e:a2:5c:89:57:63:8c:c1:ac:b8:fd:ad:
ff:47:60:c7:00:fa:5a:0c:db:96:2a:94:cc:de:f2:bd:5a:a9:
9f:81:ff:a2:14:83:13:97:dc:93:a9:61:59:a2:1d:25:68:99:
29:89:3f:df:69:a1:a9:4f:a4:ea:ad:e6:1a:fc:a5:bd:d7:41:
84:80:ab:ac:5b:2b:2e:cc:63:fb:2f:c5:b0:19:4c:9b:49:cc:
be:4e:5b:81:74:b6:ff:f6:fb:ca:97:ec:aa:8f:3b:92:dc:f9:
c8:af:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:52:54 2025 by rpki-client