Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA21DDACDE411EF8FAF4662762E951A.roa
File: DAA21DDACDE411EF8FAF4662762E951A.roa (raw, json)
Hash identifier: HvNofRGkhDuB1rX43vt2C0Tzxg2Eyod2ivr3LKS21NU=
Subject key identifier: A3:AA:C4:5E:24:F4:CB:28:FD:2A:89:BC:9B:F2:CE:E9:A1:7A:D1:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 0137DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA21DDACDE411EF8FAF4662762E951A.roa
Signing time: Wed 08 Jan 2025 17:20:28 +0000
ROA not before: Wed 08 Jan 2025 17:20:22 +0000
ROA not after: Sat 03 Jan 2026 17:20:22 +0000
asID: 984
IP address blocks: 154.89.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79835 (0x137db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 17:20:22 2025 GMT
Not After : Jan 3 17:20:22 2026 GMT
Subject: CN=677eb3dc-e20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:d0:49:5e:cd:1a:62:3a:38:73:fe:77:fa:
cd:45:34:39:15:e3:ee:46:46:61:23:80:d7:37:1b:
46:53:25:e1:e3:4c:92:cb:b7:47:98:ac:9b:fc:cb:
f6:6f:92:a1:40:d2:94:05:51:64:84:ae:ee:01:22:
f6:ab:81:c6:69:7e:2d:2f:1e:52:1d:04:f4:24:3c:
5b:49:36:ad:59:63:6b:e2:1a:5a:b3:b9:0c:72:b8:
19:c3:56:33:14:87:09:64:ca:5d:f8:e5:7d:f6:30:
57:a8:6c:f7:2d:d6:5b:9d:03:b8:7b:4f:c3:b7:9d:
d1:da:c4:be:fc:0e:0a:84:cc:87:bc:0f:59:06:78:
10:b7:f5:d2:d4:6f:ac:fc:02:f2:29:7a:e7:69:f1:
c2:eb:69:a8:58:c9:b7:2f:7f:56:10:96:88:2f:fc:
9a:70:b3:24:4a:e5:a4:79:72:3b:4f:22:dd:2c:31:
19:bf:06:5b:48:8b:75:c5:44:42:2c:99:d2:d8:4b:
af:84:45:12:ef:74:c1:86:49:83:af:54:3a:c4:29:
19:53:f7:bf:75:45:19:9c:64:2e:9e:d8:d5:e0:0b:
4f:7f:a1:09:5c:ad:87:e6:76:ec:8d:5f:bd:22:2e:
82:a0:a7:cb:24:d9:6d:4c:ca:3f:0b:12:f8:8d:7d:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AA:C4:5E:24:F4:CB:28:FD:2A:89:BC:9B:F2:CE:E9:A1:7A:D1:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA21DDACDE411EF8FAF4662762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.188.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:a5:02:ce:b2:03:9b:ed:fc:d6:c9:a7:00:52:c9:55:16:89:
a5:8c:9c:26:51:ac:bb:37:dd:6d:77:88:15:67:0f:8e:bf:46:
85:59:65:f8:f9:48:30:bf:5b:6e:56:c8:86:7c:61:7b:53:c5:
09:37:25:a7:01:c2:51:e2:93:72:c5:89:e7:53:1e:96:84:23:
93:4b:38:5a:e0:bb:95:3d:be:7c:6a:81:1f:3d:c3:2a:86:01:
1a:84:d4:ec:a3:51:df:79:48:f6:e6:35:6e:c2:92:a9:b1:a2:
c8:b1:f1:d2:6f:90:4e:e9:31:42:24:1e:6a:89:18:fc:85:2c:
52:a8:d2:65:20:81:59:29:b3:e5:a1:5c:91:b8:46:41:ca:7d:
32:72:bb:b9:08:0c:5d:dc:a5:f9:f5:d8:f5:11:e2:02:12:7d:
8a:4a:47:53:86:66:5d:fc:fc:2c:c2:2f:00:36:a9:ba:92:54:
66:8d:c1:17:f1:12:5b:89:3f:dd:df:6d:d7:5b:ff:b3:bc:a0:
3b:78:fe:50:b6:8d:ad:43:db:56:5e:7c:10:a7:dc:ee:e8:92:
1a:8b:b5:0e:dc:e6:6c:5f:7b:a4:e1:57:94:1e:20:05:3c:df:
70:e1:9a:c5:94:4d:9b:2a:6c:50:64:66:cd:65:04:a5:7e:e9:
45:05:71:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:28:15 2025 by rpki-client