Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD2B900C0E111EFABE7B4A4762E951A.roa
File: DFD2B900C0E111EFABE7B4A4762E951A.roa (raw, json)
Hash identifier: 4q20nxiBEhd2KXzwf7mXRUJcZeGfE6DvZ7PEEpuIDos=
Subject key identifier: 16:E7:2C:94:01:AF:FC:B7:5F:08:DE:64:A3:58:FF:2C:3F:96:1A:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 011EF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD2B900C0E111EFABE7B4A4762E951A.roa
Signing time: Mon 23 Dec 2024 03:56:23 +0000
ROA not before: Mon 23 Dec 2024 03:56:19 +0000
ROA not after: Wed 10 Dec 2025 03:56:19 +0000
asID: 984
IP address blocks: 154.89.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73462 (0x11ef6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Dec 23 03:56:19 2024 GMT
Not After : Dec 10 03:56:19 2025 GMT
Subject: CN=6768df67-8a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:c8:6b:3b:e3:33:fd:37:59:55:0f:4e:20:
a5:14:9d:81:3c:30:9d:1b:26:6e:11:e7:4e:af:84:
ec:12:45:12:e4:94:0e:e4:cd:96:0e:cf:0f:84:9b:
9b:38:b1:5f:e1:13:fd:53:b9:3d:7c:de:8d:d5:16:
97:8a:b7:c1:01:10:3c:0f:10:c7:f6:8e:7b:91:14:
1e:8e:55:38:57:79:24:ec:63:f9:8d:75:e9:5d:46:
94:6e:70:94:c7:8b:21:06:f9:84:a7:d4:d1:90:cb:
b6:9f:0f:be:31:b7:84:0d:85:74:99:2f:e4:85:d5:
8c:6b:e2:74:ac:b1:91:9e:bd:3a:7b:5e:3f:21:b8:
16:0b:d3:f1:dd:31:56:38:8b:9c:91:5c:87:b2:86:
b3:dc:4e:28:3a:7d:32:8b:c0:cb:6a:b5:25:59:59:
d4:98:d0:96:7b:ff:f2:ee:6c:cf:88:2c:74:6e:a3:
88:bd:4b:fe:e6:28:2e:bf:2d:f6:79:c9:9d:a0:6a:
84:b7:16:55:a4:2a:15:57:00:45:10:91:d6:f3:4e:
65:b5:93:a5:87:0b:77:54:17:67:5a:cc:f7:3c:e1:
bc:0a:5d:1d:e8:48:c7:6a:13:33:26:45:c3:d3:cd:
75:c1:49:32:71:8d:78:38:e8:03:1f:7e:2f:33:c7:
24:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E7:2C:94:01:AF:FC:B7:5F:08:DE:64:A3:58:FF:2C:3F:96:1A:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFD2B900C0E111EFABE7B4A4762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:20:5f:dc:51:1e:e4:38:7b:ea:2d:0a:75:e9:91:52:2a:be:
50:8d:9a:2e:be:6b:19:56:2c:19:f5:60:bb:dd:e0:d2:cf:ca:
9a:21:6f:09:72:6b:b2:42:7c:6a:76:78:44:c1:9c:eb:82:0c:
ed:64:6e:6b:36:8e:d7:dc:d1:fd:44:ff:39:54:c7:2b:b4:8d:
d0:2a:f7:60:73:46:1c:ad:4c:3e:fc:21:a3:ec:9b:8a:52:20:
8c:8a:9e:91:d3:73:d4:48:ee:b4:44:fc:1a:90:f4:d7:71:9d:
82:b5:18:45:b4:b8:0b:bb:5c:5b:dc:88:d0:93:42:76:ed:54:
5a:4e:4f:0c:4b:67:45:7a:de:7e:ec:50:f8:ec:21:b3:60:1e:
0c:6c:ab:87:4f:08:63:1f:f6:7f:0c:11:c5:9d:97:b1:74:4f:
b7:b8:9a:46:ef:d8:7d:b8:5f:d0:68:a1:9e:ea:e7:4a:61:56:
3b:3c:a5:06:a5:56:7c:96:3b:08:4f:f2:38:47:18:90:c4:88:
4e:8a:3b:bd:ed:d0:24:6f:dc:fb:29:e9:ef:6e:d1:ba:a0:54:
c0:7a:5e:5a:67:23:0c:83:06:0f:9e:34:11:d4:ec:7f:fc:e4:
25:2c:4d:05:c8:13:c7:ad:10:b6:60:e0:4f:49:ae:60:b5:0c:
3b:ed:d9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:37:42 2025 by rpki-client