Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7892C22C0DF11EF8B8E8395762E951A.roa
File: D7892C22C0DF11EF8B8E8395762E951A.roa (raw, json)
Hash identifier: ydD9dBq/zzdTXuQ6XdbubpIe6zftx4wFgIAQIvZ5aK4=
Subject key identifier: B5:6A:00:24:D8:CD:B7:EE:8C:B3:92:3D:03:BF:09:48:0E:7A:1A:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7892C22C0DF11EF8B8E8395762E951A.roa
Signing time: Mon 23 Dec 2024 03:41:50 +0000
ROA not before: Mon 23 Dec 2024 03:41:46 +0000
ROA not after: Wed 10 Dec 2025 03:41:46 +0000
asID: 984
IP address blocks: 154.89.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73436 (0x11edc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:41:46 2024 GMT
Not After : Dec 10 03:41:46 2025 GMT
Subject: CN=6768dbfe-784e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:22:38:f7:44:ca:12:c8:e9:c3:3b:90:a6:ac:
ca:08:09:de:4e:3d:4a:22:22:3a:5a:6c:b3:dd:8b:
45:85:7b:9a:16:e4:46:2c:7a:c6:8f:fd:ef:3c:0a:
c9:24:53:a3:9e:40:e7:04:77:03:89:00:71:f0:ca:
35:99:88:3c:12:15:71:46:ef:a9:de:52:3c:c0:3f:
5b:ba:26:06:44:83:91:f1:5c:99:a3:89:9f:1f:05:
0a:85:0d:2c:50:39:42:0b:da:e3:f4:8d:84:47:ec:
44:1c:c1:ca:a3:fe:3b:1f:60:7b:67:9e:dd:6a:c1:
eb:5e:ad:ed:10:d9:f5:60:ad:b9:0d:6c:dd:55:e0:
ac:f3:c8:7d:a6:e4:a3:ce:43:f9:a0:f3:1a:c1:49:
87:fc:68:48:90:fa:75:d7:76:88:3f:ad:57:54:cb:
4a:7b:63:10:c1:96:f5:ba:be:b6:7a:1c:fc:e3:cf:
4c:cf:d8:9b:fa:22:36:01:1f:e5:e8:1c:43:5b:5b:
1e:04:87:9f:f5:d8:7e:d7:73:75:2c:3c:75:e1:71:
73:4b:bd:d6:92:1f:ba:8f:5a:a6:85:80:f1:4a:19:
36:5b:14:f8:0f:ec:b1:3a:1b:c1:fd:5b:28:46:d8:
cc:5f:73:52:1b:46:cf:77:35:af:e9:77:1d:22:cd:
90:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:00:24:D8:CD:B7:EE:8C:B3:92:3D:03:BF:09:48:0E:7A:1A:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7892C22C0DF11EF8B8E8395762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:5b:32:84:c4:a5:12:41:61:20:74:41:d4:fd:10:3f:84:18:
4f:93:c1:57:15:82:e3:32:db:f0:66:1a:ce:2e:d4:99:5a:fc:
9d:25:79:ef:b0:74:c7:7a:3f:1a:94:86:82:c4:8b:3a:10:85:
19:70:76:cf:f6:96:b8:14:56:fd:21:eb:c7:8b:0b:8e:d4:4c:
8e:58:62:6f:92:a0:e7:4b:3d:7e:49:cd:19:2c:bb:df:ca:28:
96:0c:e7:a1:7c:9d:6d:e7:ab:46:d0:36:b9:1d:f2:9a:a4:7a:
5e:46:16:79:44:da:fc:fa:3a:1f:be:df:18:27:8c:44:a5:4e:
61:46:f7:89:12:37:62:06:25:76:4f:3a:ba:c0:a5:2c:6f:69:
f4:4c:eb:64:a4:04:21:72:7c:44:a7:ed:8e:40:66:69:8c:b0:
0e:05:63:59:d9:40:59:36:97:45:fd:3e:ce:f5:6a:49:41:89:
3e:bc:cb:db:6f:a3:9b:a4:a6:43:d2:12:14:fd:25:cf:f2:b7:
de:90:27:87:af:12:26:29:86:fe:e7:b8:f9:d5:34:03:ba:f4:
12:ce:66:fb:07:7c:e4:53:d2:5d:56:e8:d1:b5:2a:ed:62:bb:
e9:50:1b:d4:bb:19:91:8e:a1:18:59:5d:6e:c6:5d:12:9e:9a:
2a:e5:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:34:51 2025 by rpki-client