Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47EC5CCCDD711EF8BDD0691762E951A.roa
File: E47EC5CCCDD711EF8BDD0691762E951A.roa (raw, json)
Hash identifier: CCFWGHmm2DV75BB++G3vEMNXSzP0xv/Nvz6e7DWHJXk=
Subject key identifier: 7E:1B:08:5D:2B:95:34:65:5E:15:83:BC:60:9B:40:8C:D1:E7:EF:BD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013779
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47EC5CCCDD711EF8BDD0691762E951A.roa
Signing time: Wed 08 Jan 2025 15:47:41 +0000
ROA not before: Wed 08 Jan 2025 15:47:37 +0000
ROA not after: Sat 03 Jan 2026 15:47:37 +0000
asID: 984
IP address blocks: 154.89.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79737 (0x13779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 15:47:37 2025 GMT
Not After : Jan 3 15:47:37 2026 GMT
Subject: CN=677e9e1d-7b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:53:b1:9c:5e:19:50:3b:97:2d:05:d6:de:50:
74:e4:d6:51:e5:ec:39:59:00:2b:1f:4e:7b:5d:64:
6d:4b:af:94:66:96:fd:21:d8:38:1b:65:23:59:bb:
35:cb:de:d6:d8:e5:31:c6:c0:85:ba:32:6e:7d:53:
ae:98:a8:83:e1:11:40:61:d7:ee:be:50:63:ee:c4:
bf:78:db:ca:c6:93:f9:fb:67:7b:53:8d:76:51:14:
0f:69:13:57:d3:c0:14:3e:7c:19:0d:3a:ae:81:4f:
f8:6b:2d:37:58:a0:d1:13:41:b2:1a:07:7b:36:ec:
45:24:26:6e:af:b7:23:5e:91:4b:ee:be:0a:6a:ff:
04:83:91:69:2e:7d:95:0e:67:03:45:92:19:f8:af:
46:6b:fd:3c:2c:4c:0f:50:7f:9e:00:25:64:ab:ea:
c0:65:d1:22:b5:f0:78:7a:67:a6:aa:12:a8:ce:31:
39:f0:ae:b1:64:70:e0:ea:71:60:df:15:4b:c5:4e:
68:3c:35:f7:80:3f:8d:7c:e3:1b:d8:2e:0e:14:ac:
f2:de:df:1b:36:77:2e:a4:32:1b:09:63:9b:4c:99:
81:31:73:a4:bf:7b:5f:7a:ce:23:60:4a:ba:72:84:
6f:60:95:61:74:f0:6b:6e:ce:b1:d8:8c:ad:87:c0:
59:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:08:5D:2B:95:34:65:5E:15:83:BC:60:9B:40:8C:D1:E7:EF:BD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E47EC5CCCDD711EF8BDD0691762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:49:33:d6:a9:8a:1f:b7:44:0e:31:a7:5b:1d:f2:17:70:e4:
7f:ff:d9:4d:8b:49:26:e5:60:aa:1c:25:bc:bc:5a:09:14:c8:
94:52:5b:14:8a:c6:2d:50:13:a1:dc:f5:3f:ee:ef:3b:01:e1:
90:81:e8:b9:18:2f:b1:b6:14:a7:12:d8:af:5a:ec:8f:c5:ef:
65:31:90:9a:53:82:f8:c2:c8:a8:b3:2b:ed:c7:9a:ae:73:27:
59:c4:66:0b:00:f2:6e:84:0e:e3:48:4b:29:71:c0:f3:95:aa:
ad:96:ac:49:29:d3:6f:bc:13:81:d0:57:6d:88:db:94:0d:ac:
c7:61:5b:c4:f3:aa:37:b7:79:49:2d:2a:f7:b5:80:a5:4b:8a:
40:00:12:72:60:11:83:2c:8e:cb:fd:ef:2c:a4:3a:e9:5d:9d:
c9:ae:7d:3f:f9:f8:9a:e8:d3:37:cd:49:09:e2:69:4a:27:61:
7e:28:ce:f5:51:57:93:d6:34:87:19:6b:0a:e2:32:c0:4e:6f:
f8:1e:8d:63:25:a4:bf:a7:a7:94:2c:f8:55:52:29:c6:b4:d4:
a1:51:fc:f9:b1:e7:10:cc:c9:bb:b3:3d:cc:00:63:1b:1d:e4:
90:c6:a9:33:2c:4e:ab:5f:ea:33:ed:d4:ac:73:a2:1a:91:b9:
41:69:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:32 2025 by rpki-client