Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8112600FF2E11EFB62676AF762E951A.roa
File: B8112600FF2E11EFB62676AF762E951A.roa (raw, json)
Hash identifier: RW1W7vWl1qnkQstlXNkUI8oLZXVeNuNSmzfWE3SkaW4=
Subject key identifier: E2:0D:71:8D:18:82:F9:CF:BC:92:01:08:85:A7:12:2C:86:A7:E0:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0173EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8112600FF2E11EFB62676AF762E951A.roa
Signing time: Wed 12 Mar 2025 10:42:39 +0000
ROA not before: Wed 12 Mar 2025 10:42:36 +0000
ROA not after: Thu 24 Apr 2025 10:42:36 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
154.89.200.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95214 (0x173ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Mar 12 10:42:36 2025 GMT
Not After : Apr 24 10:42:36 2025 GMT
Subject: CN=67d1651f-8668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:df:47:9f:e3:3d:22:5b:cd:ec:f2:3f:3a:bb:
5e:c1:f0:b3:2f:d7:6f:3c:f3:7d:db:30:5e:e3:7a:
87:69:bf:f3:0d:83:87:a0:3a:c9:32:6b:0f:5c:26:
3e:a4:23:9a:cc:c7:be:a7:bf:00:a5:ca:19:74:2b:
5b:d3:4d:6d:96:9d:25:e6:3c:da:79:ef:af:3d:6b:
dc:20:9f:7e:24:41:55:1e:bf:ac:22:5a:d8:82:8e:
16:72:8d:b4:26:fb:d2:77:ce:c5:b8:06:71:31:a4:
5c:55:d5:29:6c:cd:95:8d:af:0e:06:64:f5:66:c9:
00:c9:22:cf:f6:98:90:a2:8a:28:1d:8e:22:20:84:
de:a3:5b:40:5b:e3:cf:a0:c7:f3:bc:d7:c9:ad:9e:
6c:d8:dd:be:16:a6:93:41:a8:cf:d9:3d:80:a0:f9:
99:dc:8f:f3:95:a5:59:f0:75:ac:4c:6c:18:fb:8d:
1a:eb:b4:d2:13:c2:34:77:e7:ee:b5:f5:80:27:3a:
ea:ad:d1:e6:61:cd:11:6f:71:47:b8:48:4f:2e:85:
19:59:cf:79:4e:db:de:89:ea:1d:0b:b4:78:52:6f:
91:99:c3:e9:c9:f4:9a:ed:c9:bd:61:05:84:d0:d7:
30:91:dc:55:cc:11:58:30:49:bd:5e:b6:bc:ca:f8:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:71:8D:18:82:F9:CF:BC:92:01:08:85:A7:12:2C:86:A7:E0:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8112600FF2E11EFB62676AF762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
154.89.200.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:8b:78:d6:40:39:b7:ec:58:39:06:f6:47:8f:dc:ef:86:96:
7c:7e:80:6d:da:b0:c5:96:d0:73:1a:70:fd:95:aa:cd:37:37:
1b:6f:42:8a:b5:50:37:c8:ac:5a:c7:a1:19:3f:0a:21:b6:3c:
eb:21:70:6b:fd:70:b9:0e:9f:fe:48:fe:45:90:32:25:28:4f:
b8:de:3a:ef:8d:85:d8:7c:33:78:b8:ac:50:60:c9:3a:db:ed:
89:e8:2d:59:fe:d7:cc:d6:cb:c9:77:5e:be:b9:4c:cf:ce:24:
ca:d8:ac:62:8d:b3:68:fa:c9:47:4d:84:7e:33:e1:6f:cd:7d:
33:20:66:c0:2e:35:f8:56:06:d1:0c:cb:81:a0:9b:1d:b8:45:
6b:69:a7:90:71:41:ac:25:b4:e3:92:f9:1d:b2:63:67:a6:6a:
cc:7d:c7:84:54:77:34:95:7d:00:64:a5:83:4b:88:fb:19:c8:
bd:8f:cd:93:c1:46:70:1e:d6:b2:19:18:aa:86:da:35:69:b6:
09:15:45:cb:f7:ad:67:bb:48:22:c5:1f:32:33:1c:19:e2:1f:
10:31:3f:c5:3a:39:b5:5f:b4:7e:34:4b:e2:9d:5c:b3:3b:2b:
f2:ca:a0:e1:c4:1d:5e:10:3e:7c:5c:11:84:bf:d6:3a:c3:d6:
76:06:21:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:56:20 2025 by rpki-client