Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C89E3AF6C41B11EF8DB10FB1762E951A.roa
File: C89E3AF6C41B11EF8DB10FB1762E951A.roa (raw, json)
Hash identifier: gXdBZZLT932eioYfIsiOBmZYaZcfIJwUgNAuUjDeVSI=
Subject key identifier: DD:39:FE:E9:65:AF:18:5B:F6:E1:AE:0D:89:CC:C4:3D:40:D4:6E:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01298B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C89E3AF6C41B11EF8DB10FB1762E951A.roa
Signing time: Fri 27 Dec 2024 06:28:28 +0000
ROA not before: Fri 27 Dec 2024 06:28:24 +0000
ROA not after: Sun 12 Dec 2027 06:28:24 +0000
asID: 17561
IP address blocks: 154.201.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76171 (0x1298b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 27 06:28:24 2024 GMT
Not After : Dec 12 06:28:24 2027 GMT
Subject: CN=676e490c-6a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:91:05:8d:09:ad:70:f6:6f:15:64:c4:4f:
70:10:5d:f7:fc:28:bf:fb:19:47:18:b3:03:b0:d5:
4c:86:d1:2a:ff:9c:e1:ee:d9:e5:b4:f5:6f:97:6b:
1f:ac:e8:19:9a:a1:44:33:fc:ee:bd:9e:49:e7:8e:
ca:31:13:7f:98:d3:a5:3d:27:a4:d8:92:65:49:99:
42:89:ce:cc:13:6a:48:89:62:34:cc:59:46:71:36:
a8:ae:94:ff:31:1e:26:90:4d:22:5d:0f:6d:b9:d7:
e8:4f:49:c6:56:dc:3d:95:a2:41:54:15:6a:5d:d5:
97:66:c5:11:86:f1:6e:3f:db:d5:a0:42:9c:97:ca:
f6:80:21:ea:ad:bc:3e:71:b1:46:f2:a4:77:b7:61:
0e:4c:47:1d:ec:56:d0:3d:a6:82:14:69:47:39:1d:
f6:9c:62:94:ea:7c:81:60:ff:0b:b1:a0:7f:d4:f0:
e9:45:18:dc:be:3b:d7:1e:29:12:cb:4d:21:8c:92:
c2:80:ae:7d:0f:a3:1d:c7:0b:fe:36:25:c6:08:3b:
1b:34:4b:a0:2f:bb:41:3d:7c:17:1b:25:5f:6a:78:
2e:d8:4e:48:a3:01:23:c3:15:4a:46:c4:fd:db:c8:
1b:ba:42:90:13:f3:17:49:6f:e5:81:b3:87:05:f0:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:39:FE:E9:65:AF:18:5B:F6:E1:AE:0D:89:CC:C4:3D:40:D4:6E:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C89E3AF6C41B11EF8DB10FB1762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.20.0/24
Signature Algorithm: sha256WithRSAEncryption
88:34:ba:11:89:21:96:e5:a1:60:87:9a:e2:0b:84:f8:53:f8:
b7:cc:e9:74:de:9d:94:44:70:ef:8e:b5:86:1f:58:cb:f4:93:
3d:0e:67:a6:c8:6c:a2:b9:9a:94:b0:53:f1:7d:90:b1:be:e2:
97:73:cd:e4:ca:24:fe:19:3c:17:d5:66:f6:83:d7:6a:04:6d:
e7:f6:79:41:60:e0:70:30:88:3d:5a:b5:71:02:62:c9:db:20:
39:27:e8:37:b6:8a:cf:c3:43:fd:63:d3:85:91:37:b1:90:c5:
35:3d:53:76:d8:f5:c2:c8:8e:d5:2b:0c:b2:f6:c5:9c:fe:2b:
90:f9:a7:a8:f3:17:91:9d:90:7b:db:ab:5c:f5:d7:10:05:a1:
cc:5d:34:2a:49:0a:27:2a:2e:49:a7:13:88:5f:f9:61:ae:35:
96:d7:13:10:05:67:c2:01:03:d8:b1:08:00:83:69:f1:d9:06:
b3:2f:c8:8d:a3:1e:f6:22:ce:f1:7c:7f:36:72:1d:f5:ee:3b:
51:51:8e:87:59:26:36:72:9c:2f:eb:89:02:e0:3b:cf:fb:6f:
80:cd:07:f8:2f:f3:d4:18:54:55:c3:99:30:25:46:6d:31:e7:
82:16:47:ed:41:05:0c:ec:5e:e5:8c:a0:64:be:97:1e:6a:42:
56:10:bc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:20:55 2025 by rpki-client