Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6043BCCDC711EF919003A9762E951A.roa
File: BE6043BCCDC711EF919003A9762E951A.roa (raw, json)
Hash identifier: oME1dBX5A+kT+h+OJ1/7l89dwLMGIqfsW41vwCKHfVM=
Subject key identifier: 0F:DA:12:DC:3E:E8:A9:ED:28:42:DC:1C:92:17:83:6C:AA:FF:19:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01374B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6043BCCDC711EF919003A9762E951A.roa
Signing time: Wed 08 Jan 2025 13:52:05 +0000
ROA not before: Wed 08 Jan 2025 13:52:01 +0000
ROA not after: Thu 23 Dec 2027 13:52:01 +0000
asID: 17561
IP address blocks: 154.89.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79691 (0x1374b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 13:52:01 2025 GMT
Not After : Dec 23 13:52:01 2027 GMT
Subject: CN=677e8305-a960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0c:49:1f:9c:06:84:91:e5:82:08:38:d7:9a:
ce:75:37:b8:b1:24:69:a6:85:64:c6:5e:7b:00:3a:
78:1a:06:95:52:f6:cf:60:4c:77:23:12:ed:c9:44:
bc:0f:5e:ce:24:b0:61:31:00:ff:a6:51:a0:c9:53:
fa:98:24:bf:dc:f6:91:22:3e:ee:db:38:e7:df:b9:
f5:10:9d:1e:a6:75:5c:09:a2:16:c4:83:70:f2:fb:
f1:28:c3:cd:7f:77:49:79:66:b2:09:a8:e7:d7:a1:
47:1e:ba:d2:c7:d3:73:0d:c0:7e:15:cf:8f:7e:ed:
85:da:9c:a9:70:08:85:c9:d8:fd:b5:15:ca:2c:f0:
13:9f:d3:05:4a:cf:18:88:1a:c8:da:90:c4:f5:46:
9b:3e:6a:b4:a9:46:d5:45:e3:95:8a:3b:45:bd:fd:
ee:2f:df:fd:37:a5:87:5d:67:46:a8:2b:9f:4b:ae:
28:d2:7f:57:8b:56:d9:cb:c8:7a:6c:cd:f2:4c:87:
db:87:4a:d3:60:08:ba:01:5e:07:0f:d3:1e:dd:6f:
89:43:eb:d1:35:1d:98:58:d6:be:bf:fc:2c:a5:2f:
9d:21:9c:fe:7b:e1:58:41:fd:20:0b:96:ff:d5:c9:
96:d3:cb:99:76:49:d0:b9:03:6f:6d:39:6b:40:95:
5e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:DA:12:DC:3E:E8:A9:ED:28:42:DC:1C:92:17:83:6C:AA:FF:19:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BE6043BCCDC711EF919003A9762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.30.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:b5:6f:19:ff:0e:cb:ea:54:f5:89:0b:56:b2:be:42:47:7b:
5a:fa:14:fe:fa:1b:2f:37:21:1e:06:27:09:7a:9c:43:f5:4e:
1b:23:6a:a5:2f:7d:5c:30:01:d2:da:17:28:fb:29:9e:29:06:
56:bf:2e:a2:a8:e8:e2:a5:9b:ff:21:4e:48:65:5f:0a:cc:55:
42:13:98:d9:87:50:f5:3b:0b:98:93:01:c5:c4:25:e8:69:92:
68:c4:c9:3c:57:be:a7:2d:20:9e:64:b5:11:32:8a:61:cd:43:
02:8f:01:12:61:15:7a:8c:ea:e1:cb:bc:5d:45:08:8c:8b:49:
27:b6:0c:2d:5b:c6:bc:cd:17:a1:3e:ce:b8:f1:3c:8d:14:17:
f1:07:10:ed:bd:63:55:65:cf:ca:09:ff:b8:df:ba:2a:17:35:
33:49:3d:d8:7a:66:4c:b8:50:e8:a1:65:86:77:0e:5a:4c:40:
02:7c:e2:2d:8e:99:9e:b2:ac:40:1c:08:f8:5d:83:46:d2:a7:
2f:3f:ce:bd:20:f3:c2:6a:8a:85:66:9a:9c:af:16:fe:b0:73:
7b:5b:47:50:03:de:27:e8:22:34:0f:fb:96:0e:a5:8b:93:31:
b5:62:b7:1e:74:fc:20:d3:49:55:40:f7:2a:16:b0:70:82:61:
14:00:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:56 2025 by rpki-client