Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6BA0EE0CDEC11EF8125B194762E951A.roa
File: E6BA0EE0CDEC11EF8125B194762E951A.roa (raw, json)
Hash identifier: zsZfkLKyZlyteYQccT5KznS82cBqtOKkEVN/dGBN3iA=
Subject key identifier: 37:CC:9A:CC:66:91:1E:7E:24:E0:C6:74:AC:C0:79:58:BF:D0:26:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 013817
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6BA0EE0CDEC11EF8125B194762E951A.roa
Signing time: Wed 08 Jan 2025 18:18:04 +0000
ROA not before: Wed 08 Jan 2025 18:18:00 +0000
ROA not after: Sat 03 Jan 2026 18:18:00 +0000
asID: 984
IP address blocks: 154.89.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79895 (0x13817)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF
Validity
Not Before: Jan 8 18:18:00 2025 GMT
Not After : Jan 3 18:18:00 2026 GMT
Subject: CN=677ec15c-5d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:3b:ea:44:46:11:18:d2:bd:ee:04:71:30:70:
dd:f0:c1:d3:7a:ee:53:da:4d:9f:0d:f7:4b:90:5a:
66:1f:8f:65:29:22:0b:08:68:df:25:d1:05:22:7c:
f1:ed:ae:57:45:76:57:e0:1e:26:45:2b:0b:88:eb:
ff:9d:6c:f4:15:aa:4c:cc:df:97:f4:c4:62:22:b5:
49:e6:cf:95:57:32:83:23:0e:b1:da:ec:20:fb:61:
0a:2a:33:05:ef:eb:a4:7a:70:6f:1f:7d:f6:9e:8b:
19:90:d2:e3:1e:29:8b:d6:cf:ac:a5:21:58:df:00:
5f:e5:36:8c:e7:23:74:b9:8f:9d:f9:c3:fc:c0:e8:
e1:86:44:39:81:c7:32:83:c4:36:cf:9e:f9:a7:2d:
c4:df:84:8b:5f:5c:ec:35:56:d1:90:ba:a2:b1:69:
2c:2d:a7:ed:81:96:12:59:85:71:9a:ca:8b:3b:7c:
a4:90:b6:0e:91:17:37:72:de:be:88:61:2e:2e:f2:
b9:10:65:81:3d:42:68:7d:9a:59:e4:78:86:a7:a5:
c8:8d:81:8b:24:ee:18:0d:36:19:5d:22:a4:33:52:
6c:d3:4e:2f:1f:c0:bd:f6:43:6b:64:9e:92:af:2a:
3d:46:e2:44:b5:2d:2e:40:de:44:6a:8c:56:b5:28:
e6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:9A:CC:66:91:1E:7E:24:E0:C6:74:AC:C0:79:58:BF:D0:26:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6BA0EE0CDEC11EF8125B194762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.218.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:14:1f:aa:85:5f:2d:31:d4:c6:6c:1d:0a:3b:bc:cb:43:41:
da:c1:1e:9a:3a:13:6d:0e:54:48:79:5f:65:14:2e:c4:50:ad:
80:a7:e9:7b:1c:e4:aa:fc:81:a1:fd:e6:6a:ca:f2:46:dc:21:
bd:3c:45:b7:2f:41:40:f8:0f:21:60:c3:e2:3f:f5:0b:a1:a1:
28:80:18:5e:5c:40:1a:00:d9:bd:92:b5:cf:be:7c:8f:da:99:
40:70:a4:96:63:e3:58:98:bb:33:56:24:6e:5f:a6:c9:83:81:
32:31:4f:c9:8c:28:31:da:22:5c:48:2d:aa:de:2e:ec:99:ab:
fc:7d:97:55:73:75:15:f4:2c:80:b1:83:09:90:08:e0:fc:60:
a3:26:21:97:67:79:4b:cf:ec:f3:9c:3b:44:9a:93:5b:3a:b4:
e2:00:43:b0:a7:a8:fb:66:f5:10:61:0c:3b:aa:38:17:fa:c1:
e0:63:18:ff:5c:5c:0f:71:04:79:49:20:b6:48:df:93:3b:11:
7c:4c:db:2a:c8:d0:90:3e:85:5c:26:b1:54:7f:82:cd:ab:e4:
30:19:2a:a0:6f:d3:3a:e0:8f:6a:58:38:1d:27:93:7c:85:32:
d8:cc:cb:13:d3:e4:82:e2:61:36:91:c3:1a:53:6e:6e:50:c1:
cf:17:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:37 2025 by rpki-client