Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AFF9F0C35E11EF8F9D6077762E951A.roa
File: B1AFF9F0C35E11EF8F9D6077762E951A.roa (raw, json)
Hash identifier: NMKtKNrV+2ug8SL0BjJMLenSD6FXY4wIrZglvQfVPQQ=
Subject key identifier: CE:2E:8E:D8:C4:54:FE:0A:0B:2C:B6:4B:DD:92:18:35:94:E5:8E:95
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 012620
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AFF9F0C35E11EF8F9D6077762E951A.roa
Signing time: Thu 26 Dec 2024 07:54:55 +0000
ROA not before: Thu 26 Dec 2024 07:54:51 +0000
ROA not after: Sun 12 Dec 2027 07:54:51 +0000
asID: 17561
IP address blocks: 154.89.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 75296 (0x12620)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 26 07:54:51 2024 GMT
Not After : Dec 12 07:54:51 2027 GMT
Subject: CN=676d0bcf-f62b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:28:2e:9b:16:fe:14:18:8c:e0:06:43:89:
46:94:7f:44:6d:11:0c:a4:cc:6a:62:d6:5d:b6:c0:
8b:54:1a:83:6d:09:fd:f7:e3:5e:ac:19:af:aa:01:
08:39:77:bb:a3:91:b4:ce:f5:16:0c:52:4e:53:48:
a1:da:fc:13:db:8e:0d:f5:3e:76:2e:e4:f5:85:54:
af:da:38:f7:b6:2b:33:e3:fe:c4:42:e5:64:eb:54:
a1:2a:6c:82:dc:95:42:c5:01:3e:80:a0:10:f9:23:
c0:2a:4f:bf:55:04:89:2e:99:7a:12:1b:16:97:c4:
16:e0:f3:88:96:ac:a7:fb:3a:ef:c2:ba:9b:7d:ea:
73:25:08:77:3d:55:55:c6:36:99:db:f7:7b:b9:31:
98:36:b7:ec:52:38:ff:9f:f8:35:da:5d:e0:0f:d0:
21:bb:b4:d0:f3:4c:21:b3:ca:6a:b7:27:ce:cb:4d:
40:d5:10:44:75:75:f3:ca:ff:2f:1e:77:65:27:bb:
e8:55:cb:3e:4d:90:e2:0f:8f:d5:37:e3:c7:6b:15:
92:c2:b9:22:49:2d:f9:a4:f0:02:d6:07:f9:d3:20:
fa:b7:e9:54:1b:39:f9:9f:ba:be:c7:38:98:13:f1:
08:92:33:a2:4d:e4:09:47:0f:f1:51:30:a4:20:0b:
f6:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2E:8E:D8:C4:54:FE:0A:0B:2C:B6:4B:DD:92:18:35:94:E5:8E:95
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1AFF9F0C35E11EF8F9D6077762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.2.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ee:9b:cc:31:e0:4f:6f:d0:fc:45:e0:34:e7:73:19:bd:8e:
92:3f:43:00:18:30:29:07:51:bc:ac:e1:d5:31:4e:fe:1f:3e:
2c:b7:c9:b9:ea:ef:1e:6b:e0:4f:57:9f:59:1c:3c:92:17:9a:
51:ab:61:73:6a:2c:b0:c9:ac:66:a1:5b:47:1d:bb:82:5f:dd:
b2:59:ee:e3:7d:d6:fc:de:8c:6e:2d:14:ef:3b:d2:53:00:7f:
24:3c:4e:04:d5:4e:19:df:6d:82:56:88:ef:90:38:ad:df:07:
01:ee:04:b3:17:27:30:9d:7d:2b:86:fb:56:aa:f8:68:84:d5:
38:3c:ff:20:09:73:b1:7e:a3:3d:33:21:46:be:72:21:95:4d:
6c:97:aa:17:dc:b8:a2:3b:6a:43:d8:5a:00:68:ab:7a:96:88:
1f:96:50:6a:4c:bb:51:8c:ec:38:75:af:57:c4:e2:96:77:c0:
92:ac:50:f9:45:8d:18:8d:df:42:5a:ff:d6:1f:69:2e:24:08:
86:55:11:04:f4:ee:8f:e9:d3:4c:80:da:2b:c6:3b:b8:88:f1:
43:47:6a:b2:1e:53:77:a4:d3:e8:2a:4a:7a:5d:aa:a6:07:3c:
6f:24:72:79:50:6a:ea:6c:82:71:87:64:8a:41:b0:d9:08:d5:
96:78:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:28:10 2025 by rpki-client