Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C450546CC0DC11EF96A0B983762E951A.roa
File: C450546CC0DC11EF96A0B983762E951A.roa (raw, json)
Hash identifier: xqG8S+SA0kKqFahnauYFUV9e9meYBHJ2EIKawpO4Eqo=
Subject key identifier: 46:E9:78:8F:8D:65:D0:EE:F7:30:F3:61:90:74:18:C8:BD:A4:5B:4A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C450546CC0DC11EF96A0B983762E951A.roa
Signing time: Mon 23 Dec 2024 03:19:49 +0000
ROA not before: Mon 23 Dec 2024 03:19:46 +0000
ROA not after: Wed 10 Dec 2025 03:19:46 +0000
asID: 984
IP address blocks: 154.89.184.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73396 (0x11eb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:19:46 2024 GMT
Not After : Dec 10 03:19:46 2025 GMT
Subject: CN=6768d6d5-0ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:71:92:da:72:0f:f9:e9:28:31:62:31:37:63:
51:96:be:9c:c6:1a:c2:52:9d:72:cc:d7:75:91:85:
db:f6:ea:d4:4b:26:9a:17:3a:74:cb:44:73:81:6e:
21:1b:ed:02:14:06:ae:96:a4:5c:ff:59:62:05:14:
23:79:6a:55:8d:2f:dc:75:44:68:d0:5d:38:1d:11:
5a:91:d3:4a:65:e6:b3:49:19:40:6f:cc:3e:38:ec:
ce:11:99:32:b9:23:80:98:08:6a:83:15:9f:2e:41:
5a:02:fd:ea:73:0e:ed:21:5b:77:a6:e3:3d:1b:a7:
a0:45:6d:7b:d2:9b:8a:a9:6b:62:c3:fc:71:5d:ba:
34:07:da:9b:98:a1:3d:9c:27:d1:6c:cf:6f:89:07:
7b:a2:83:69:bc:61:5a:c7:c8:36:19:a2:b6:47:b8:
27:98:a9:9e:1d:90:b4:c4:e1:da:b7:48:09:b1:c9:
aa:47:8f:3c:68:8d:77:0b:91:57:2e:53:e1:a3:d9:
51:56:70:b0:72:88:e3:28:db:ca:dd:09:08:be:7c:
aa:91:97:12:20:6a:07:ec:83:69:4e:cf:b1:df:ac:
98:83:d0:f0:f6:70:f0:41:6f:b3:9e:28:93:1d:93:
53:35:64:02:bc:14:74:e0:ea:a5:92:56:37:5d:13:
2e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E9:78:8F:8D:65:D0:EE:F7:30:F3:61:90:74:18:C8:BD:A4:5B:4A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C450546CC0DC11EF96A0B983762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.184.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:aa:00:7f:bb:7c:33:ba:da:1b:ef:51:7a:77:15:3f:41:e2:
0d:c7:2f:17:5c:41:e1:6f:02:86:5c:9d:c9:55:f1:f4:30:a0:
a0:30:13:30:d0:3c:54:e1:29:08:c2:9e:42:ed:51:9c:a0:43:
4a:05:5c:1b:3f:e7:57:2b:4b:d5:03:2b:03:38:d0:85:a5:30:
b6:62:fe:9a:88:3d:bf:dd:1c:18:b2:6e:e0:2d:0f:6b:0e:05:
e2:d6:8c:53:15:13:04:15:19:81:e4:fe:7a:30:81:d0:a8:6a:
34:74:5f:53:eb:35:43:46:6c:86:b3:a9:b1:ed:bc:b5:7d:3f:
6b:e7:7e:34:61:e4:3e:7d:e2:fd:59:af:2e:3c:ee:a4:78:2e:
fa:fe:e6:53:f2:34:18:27:36:14:d5:9d:2d:eb:3a:ac:d4:3b:
5f:ab:22:f2:f4:58:a0:05:ea:59:37:a2:20:c3:1e:90:53:57:
11:54:22:70:7d:91:6b:f4:92:0b:19:c0:7e:cc:fa:b0:57:53:
bd:c0:b7:84:75:4a:d8:04:ba:40:9f:5b:d2:29:ae:b2:23:c2:
19:b4:8c:00:13:81:a0:dd:ec:64:dc:5f:d6:5d:fb:37:88:f8:
8e:4b:d0:d4:89:39:c8:6a:f8:5a:f8:d2:7e:25:d3:8f:bb:35:
c5:97:f2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:51:48 2025 by rpki-client