Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89BBB48C1A211EFBBE53763762E951A.roa
File: D89BBB48C1A211EFBBE53763762E951A.roa (raw, json)
Hash identifier: M/2p/YVEBGx6d+ss2gbHVdKBU0Hs4/gUH6SVcg750II=
Subject key identifier: 21:8D:15:D3:D0:30:37:7B:DA:F3:36:FC:E7:B4:69:20:17:41:4A:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0120C9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89BBB48C1A211EFBBE53763762E951A.roa
Signing time: Tue 24 Dec 2024 02:57:43 +0000
ROA not before: Tue 24 Dec 2024 02:57:40 +0000
ROA not after: Wed 10 Dec 2025 02:57:40 +0000
asID: 984
IP address blocks: 154.92.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73929 (0x120c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 24 02:57:40 2024 GMT
Not After : Dec 10 02:57:40 2025 GMT
Subject: CN=676a2327-f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:83:36:78:e6:37:34:3e:e8:0d:1d:8b:2f:
91:7b:67:4e:49:ce:31:ca:f1:df:e4:38:f5:76:5d:
dd:fd:3f:41:01:95:82:d6:e8:be:22:9c:37:3a:c3:
f9:29:33:08:e6:2b:10:0f:de:65:f8:e8:23:02:14:
37:08:c1:57:d0:a8:fa:47:c8:57:00:38:23:52:e2:
10:07:88:59:97:12:56:d9:b6:0c:df:a8:44:5d:ca:
34:4d:a4:19:5f:4e:88:0a:9c:b1:8d:2a:f9:9c:8a:
fb:78:90:3c:09:e2:cb:25:33:d9:e3:30:e1:d7:7d:
9e:7c:28:7b:94:ee:20:23:ff:21:79:cc:61:da:80:
a1:75:fe:7a:28:40:9d:ca:69:6e:55:71:43:d6:b3:
55:bb:8b:25:1f:7c:4d:ef:37:33:67:cc:dc:fa:b9:
a1:b7:a9:5a:f4:28:5b:c8:59:4e:c8:e0:37:01:61:
2d:c0:7a:90:d5:63:15:41:9f:53:7d:5f:25:8e:16:
24:36:ae:46:93:75:65:db:ac:ad:50:75:c9:b4:0e:
8f:4f:50:40:28:6a:d8:3e:7c:96:82:87:16:a7:eb:
c8:b0:81:9b:33:ba:60:56:dd:c8:9f:9a:16:a9:4e:
eb:c5:c2:6e:e5:56:1a:12:08:55:47:4e:95:1c:6c:
47:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:15:D3:D0:30:37:7B:DA:F3:36:FC:E7:B4:69:20:17:41:4A:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D89BBB48C1A211EFBBE53763762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.137.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c4:30:af:44:6b:b4:17:f2:c8:58:dd:1f:b1:ad:84:d2:b1:
3c:cc:66:d8:67:26:b8:37:08:10:96:16:48:56:09:d3:d8:c3:
1d:0a:e1:e3:a7:dc:46:42:e2:2e:4d:04:80:8f:ae:33:4f:db:
9a:64:ac:9d:80:b1:49:21:04:d8:a2:71:e2:62:39:65:db:b1:
91:9c:86:1a:12:80:c8:94:ed:98:e9:b4:da:e7:56:46:2e:ef:
4c:cc:e5:e4:24:35:0b:2a:d6:60:9d:1c:f8:b9:c6:4d:36:90:
ab:1c:b2:9c:f3:ce:c5:09:e5:82:24:dd:30:b6:bc:dc:40:12:
77:51:1d:0c:97:56:1a:1d:a1:76:9a:09:3e:7a:ef:89:21:f8:
e5:52:2a:12:d4:9a:38:20:a9:54:23:b7:92:9f:35:52:c0:16:
b6:9b:58:bd:b2:fa:39:08:24:25:5d:90:64:2e:47:14:eb:99:
08:dc:17:ea:39:22:17:29:fd:11:db:17:c3:38:a7:77:f9:32:
18:c0:60:58:a0:66:03:a7:7e:14:c6:5d:7e:83:8f:7b:df:f0:
e8:d8:6f:f1:ff:30:b0:d0:43:72:cc:4c:f1:d6:75:5c:24:e5:
03:64:04:b8:4e:6b:04:09:98:9f:62:11:0c:5f:6c:da:e9:66:
24:3a:4a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:57:25 2025 by rpki-client