Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD21E1ACDC511EF81F1D29D762E951A.roa
File: BBD21E1ACDC511EF81F1D29D762E951A.roa (raw, json)
Hash identifier: 23KxXERR8NotGnTXjfym1deFYSYQZhLpELHg8D209o0=
Subject key identifier: 89:04:CD:9C:F7:4C:4C:81:1E:83:A2:D0:C3:31:9D:9E:C9:FB:4A:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01373A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD21E1ACDC511EF81F1D29D762E951A.roa
Signing time: Wed 08 Jan 2025 13:37:41 +0000
ROA not before: Wed 08 Jan 2025 13:37:38 +0000
ROA not after: Thu 23 Dec 2027 13:37:38 +0000
asID: 17561
IP address blocks: 154.89.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79674 (0x1373a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:37:38 2025 GMT
Not After : Dec 23 13:37:38 2027 GMT
Subject: CN=677e7fa5-790b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:7a:e9:c0:68:75:7f:65:6f:f5:ed:ba:e5:
0a:76:84:37:3a:10:89:17:b0:ed:2f:c6:7f:8b:29:
5e:4d:52:0c:44:6f:99:00:08:da:fb:3e:1b:b3:88:
42:c0:e3:ca:7e:1f:1e:e9:07:be:3d:cd:bd:9b:6a:
89:c7:cf:fb:9d:90:d8:18:c4:6d:46:19:3b:4f:d6:
1d:ae:c5:0e:b2:f4:81:42:77:db:2b:cf:85:b4:da:
4a:68:34:2a:95:f2:df:8c:3f:12:78:24:7a:a2:b4:
d1:3a:30:b7:55:47:5e:a9:3a:9c:16:c0:6d:f0:5c:
b2:6e:8a:ed:6b:b1:6d:2f:1f:1e:26:f4:c9:7b:a6:
b9:13:10:df:04:1f:6f:d0:b6:8f:21:5d:07:9c:d6:
2c:74:6d:4e:d7:66:3c:9b:87:56:b0:1a:93:e8:7e:
ca:43:6d:c1:64:e3:7b:ce:84:6e:b9:08:83:24:e7:
d0:9b:51:f6:90:26:8f:03:9e:bf:a9:31:ae:58:9f:
0c:d8:9b:06:11:4e:c5:4b:64:b5:a5:2e:47:4c:8c:
4c:93:c5:97:32:6d:3c:91:fa:0e:6e:92:82:7d:51:
79:f0:47:27:7a:f1:d8:9b:fd:1d:7f:28:ab:6f:c7:
c0:aa:f4:51:f9:bf:65:c2:51:fa:74:b4:64:28:d5:
36:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:04:CD:9C:F7:4C:4C:81:1E:83:A2:D0:C3:31:9D:9E:C9:FB:4A:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BBD21E1ACDC511EF81F1D29D762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.22.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:16:6f:ee:ed:16:dc:2e:09:8c:81:43:3b:b0:fe:84:90:58:
aa:9b:a2:9d:eb:b2:41:2a:54:03:29:a5:2c:36:9b:3e:4a:9c:
94:d5:1b:8b:22:fe:fd:54:a7:cb:db:0d:76:7b:31:c8:29:fc:
44:63:32:91:9b:ce:23:68:9b:56:f6:36:92:3a:50:1b:ae:79:
8e:b9:6c:63:6d:c6:08:7d:eb:25:43:4a:b4:a1:17:3f:d0:65:
fe:a2:55:2d:08:4b:28:bc:c4:e6:70:10:fb:71:7d:72:68:37:
3f:57:7d:6b:8b:6f:c7:ff:d9:0f:01:da:f3:cd:79:fe:c7:49:
16:cb:c6:85:f6:af:4f:1a:5f:91:b6:cb:fc:83:cb:d1:a0:a2:
69:dd:9e:7d:2f:de:15:4a:fd:33:a1:bd:34:0e:61:b0:bc:aa:
77:1e:27:a4:71:41:82:96:ad:00:8b:e2:d0:ed:12:c7:42:ed:
49:fc:97:bd:ce:a0:ef:24:cf:47:16:af:74:3b:dc:37:4d:fb:
0d:e1:b9:99:08:3a:a2:02:6e:7c:3e:3c:92:2d:82:1e:54:7f:
d3:c0:78:ee:6a:ea:9c:54:8c:d6:33:0d:ac:2b:fb:ce:0d:a8:
d6:42:74:ae:ea:02:e6:61:04:7c:d6:72:03:63:d0:e9:7a:77:
8d:06:9b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:18:05 2025 by rpki-client