Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B0BB82F3D611EF81013C5E762E951A.roa
File: B4B0BB82F3D611EF81013C5E762E951A.roa (raw, json)
Hash identifier: FKCDoz8R4mG9St4FLBzxhStSP3/0nH1lNLGqtHWJh50=
Subject key identifier: F3:BB:4C:80:9B:C0:19:45:A5:2B:8A:EC:9A:EE:EC:B5:DF:CC:ED:00
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016031
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B0BB82F3D611EF81013C5E762E951A.roa
Signing time: Wed 26 Feb 2025 00:14:55 +0000
ROA not before: Wed 26 Feb 2025 00:00:52 +0000
ROA not after: Thu 19 Feb 2026 00:00:52 +0000
asID: 984
IP address blocks: 154.89.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90161 (0x16031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Feb 26 00:00:52 2025 GMT
Not After : Feb 19 00:00:52 2026 GMT
Subject: CN=67be5cff-91e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:c1:7a:6a:86:14:22:5e:74:a2:51:e7:0c:
a9:d5:37:a0:13:69:91:4a:cc:61:ed:92:d4:5b:7f:
7a:ff:6c:d2:7f:ed:a7:0b:c1:94:ad:24:31:d8:bb:
93:18:ee:e6:5d:f7:09:57:5e:50:1d:9a:08:26:af:
6a:1f:6e:bd:df:7a:ce:6f:06:95:49:af:63:39:33:
ad:07:36:ed:93:bc:42:31:1a:7b:0a:bd:fa:83:98:
b3:9f:fa:b6:cd:e1:ee:88:9b:63:1a:b6:7a:8e:fc:
e7:fa:ce:0e:17:4f:10:15:ca:f8:63:17:07:85:9f:
5c:a9:d6:b8:90:47:28:e2:1d:48:d7:48:e2:23:bb:
04:6c:ee:c8:c1:9c:97:43:85:8e:22:5e:8f:76:ed:
24:18:8a:9d:4b:e9:6b:82:2d:e0:35:bc:8f:72:34:
64:13:e7:23:11:c7:7b:3f:42:71:a1:64:36:0d:c7:
2d:35:6d:3b:41:9e:f6:1b:a3:de:20:01:94:7c:c2:
42:c3:1e:d3:e7:b9:f4:3c:06:be:c1:b0:ed:5e:9f:
a4:f4:76:17:d4:9c:2c:e4:33:cf:42:12:6d:15:40:
03:f8:0f:73:0d:b5:5f:f8:2d:cd:16:4f:cf:4f:61:
52:d7:6b:82:58:4c:e1:f8:30:aa:2d:06:be:0d:1a:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:4C:80:9B:C0:19:45:A5:2B:8A:EC:9A:EE:EC:B5:DF:CC:ED:00
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4B0BB82F3D611EF81013C5E762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.235.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0c:5f:84:9d:da:d4:ed:94:35:4c:a8:05:a4:81:59:3c:8a:
4d:93:f3:47:b1:71:3c:95:cd:ac:45:5e:8a:b0:98:8e:4c:87:
c3:9f:26:1f:d1:31:10:20:a7:2b:e7:f3:4e:4d:4f:14:ac:a0:
a4:a2:2f:79:a7:26:62:bd:bc:f7:e3:33:57:e9:27:8e:32:38:
e4:e1:fd:0d:8c:73:3e:a8:91:f9:8f:86:d6:f0:e0:0d:15:31:
38:e5:70:5c:53:46:9d:37:8c:d2:8b:4c:31:62:9f:61:c8:ad:
08:76:08:03:93:77:8c:07:a0:d7:ed:24:a0:f6:43:95:d6:68:
e9:dc:0f:2a:ef:0e:4f:ec:8d:ba:61:f8:ea:ef:c0:98:32:69:
82:1b:32:8f:05:1a:7c:c4:7a:24:6f:d6:18:cb:50:32:0b:b2:
0a:bb:01:ec:03:18:00:28:5c:46:ab:04:0c:42:95:7b:4d:32:
ff:f9:d8:a4:61:c3:96:77:56:c4:66:a4:a7:68:42:ed:1f:cc:
ae:81:df:32:84:0c:02:ab:3a:ef:8a:90:63:8a:60:31:73:a2:
11:2c:7c:da:f5:e6:b1:9e:0c:ea:79:47:7c:64:ce:5e:42:71:
fd:f7:c7:64:b3:03:f6:46:89:fd:37:98:5e:e3:ba:7a:f6:60:
25:8f:31:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:47 2025 by rpki-client